
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3134342e302f32302d3234203d3e203338333635.roa
File: 3138322e36312e3134342e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier: 7mBQjgba6cI8nY5SWnxNkqvpj3M+fSp6ZUl3hSjGx5I=
Subject key identifier: 7B:74:DB:D0:FE:D5:EB:D0:24:5E:41:6F:C7:B4:A3:3B:C4:2C:33:8C
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 5F7A1E03D961A1DFFE3298BB5680F24CE9A4847C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3134342e302f32302d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 10:44:17 +0000
ROA not before: Sun 19 Apr 2026 10:39:17 +0000
ROA not after: Sun 18 Apr 2027 10:44:17 +0000
asID: 38365
IP address blocks: 182.61.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:7a:1e:03:d9:61:a1:df:fe:32:98:bb:56:80:f2:4c:e9:a4:84:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 10:39:17 2026 GMT
Not After : Apr 18 10:44:17 2027 GMT
Subject: CN=7B74DBD0FED5EBD0245E416FC7B4A33BC42C338C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:46:d5:f0:31:17:e4:b5:ef:b8:38:25:d7:1a:
1b:d2:a7:a1:e5:33:5b:70:17:02:e1:06:2a:89:3e:
4e:21:66:1c:1d:0d:92:e2:e3:0f:75:89:ce:c9:94:
73:e0:98:a2:b4:ae:4e:73:b3:27:99:96:e3:76:37:
ce:4c:70:3b:c3:11:21:26:80:6d:37:b3:ec:82:94:
d5:62:c5:e3:2d:08:75:be:08:e1:8f:87:02:82:ce:
63:82:fe:0d:0b:44:ad:cc:43:3f:36:29:57:c9:55:
95:4c:3d:b6:d0:71:43:fd:a1:52:c9:3b:05:4e:d8:
f3:71:24:65:83:4d:e5:34:00:dc:0f:4d:fa:96:35:
53:be:2f:8e:78:36:a8:ce:9b:63:fe:b3:ba:bf:1f:
e7:b1:eb:2e:c2:5f:3e:4d:d5:76:da:3c:b8:bd:4a:
cb:7d:83:7c:f7:66:85:f9:44:a7:ba:50:c8:a1:52:
b6:98:e7:d5:1a:47:57:ee:de:83:f4:3b:c2:11:7c:
bb:2e:b4:98:9b:1e:35:72:27:15:fc:90:cf:a9:bd:
5b:88:80:37:f9:75:d3:c8:4b:95:08:31:44:05:0b:
08:28:4d:79:dd:2e:ca:98:8d:b7:82:ef:b7:eb:64:
75:1d:3c:01:a2:c0:89:fc:18:1f:1c:35:39:45:3c:
d4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:74:DB:D0:FE:D5:EB:D0:24:5E:41:6F:C7:B4:A3:3B:C4:2C:33:8C
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3134342e302f32302d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.144.0/20
Signature Algorithm: sha256WithRSAEncryption
02:fd:39:9f:08:e6:41:95:d1:e7:9e:b2:53:d4:13:c0:9d:d7:
62:45:4a:68:0a:98:13:79:21:a0:1f:b3:fe:a8:6c:9e:cb:5b:
84:a3:11:94:73:1e:3e:c8:4d:82:84:dc:bf:6a:be:9f:a4:e9:
01:32:43:18:4b:c0:5d:de:31:1a:5f:6e:6c:c2:52:30:60:98:
a1:f2:03:73:a9:04:8b:87:8c:c2:2a:88:7c:b5:6e:46:56:68:
72:1c:b6:4b:78:5d:e8:d6:64:7c:cd:b5:02:ab:ba:b2:dd:5b:
fe:b8:41:ee:2e:70:63:5b:55:a9:0a:24:0a:9c:cd:4d:96:b0:
cf:06:84:6f:f1:6a:e5:23:32:78:0c:73:00:b4:ee:2d:20:04:
01:15:90:a8:67:93:c9:0a:b8:a7:65:e3:8c:21:7a:ca:3a:14:
f0:c9:dc:57:32:f4:8d:a8:e5:f2:d2:6f:e7:8f:4d:3c:f0:88:
bb:64:36:f3:7e:b1:56:2b:11:91:c8:c1:41:b4:b9:70:42:47:
84:1c:d8:c4:1b:94:6f:9e:de:fa:c0:1c:26:2e:c8:36:72:d2:
ab:d4:38:5d:05:9e:5c:f6:fd:98:de:e5:e8:07:f2:bd:18:46:
2e:b6:69:7f:fe:b0:3c:21:0a:1a:67:e4:1e:3e:b0:86:54:e9:
e9:a7:50:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:01 2026 by rpki-client