
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139322e302f32332d3234203d3e203338333635.roa
File: 3138322e36312e3139322e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier: 0mrStAQDggL3COHm72eTODZNSeVEysO3oJPbDUIrU5U=
Subject key identifier: 57:31:F8:6F:E8:F8:DF:C5:47:74:1D:FC:8D:0D:02:3E:85:4B:28:E0
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 4B8671940976BF71A42E2ECEF0CA1D93C534EB14
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139322e302f32332d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 11:06:52 +0000
ROA not before: Sun 19 Apr 2026 11:01:52 +0000
ROA not after: Sun 18 Apr 2027 11:06:52 +0000
asID: 38365
IP address blocks: 182.61.192.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:86:71:94:09:76:bf:71:a4:2e:2e:ce:f0:ca:1d:93:c5:34:eb:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:01:52 2026 GMT
Not After : Apr 18 11:06:52 2027 GMT
Subject: CN=5731F86FE8F8DFC547741DFC8D0D023E854B28E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:35:5b:b3:2e:be:ef:d6:cd:66:a1:97:ac:
43:f6:7e:80:e5:73:25:74:f8:0f:56:73:6e:b7:07:
b2:a9:fd:4a:6c:ce:94:30:7d:85:d0:57:fd:41:81:
20:44:96:d7:4c:bd:41:c6:7e:62:4b:2b:4a:f8:f4:
9d:2a:9f:a9:08:f7:34:19:0a:18:cc:c1:c4:8a:59:
13:16:02:f8:85:a1:60:91:5f:85:99:be:51:9b:d0:
26:66:da:5e:26:9e:25:5f:41:88:6b:41:66:f3:1e:
a0:eb:bd:0d:17:81:47:2f:8c:89:82:6e:2b:1c:0e:
8a:80:5b:4d:f3:92:9c:9e:de:6b:7f:9f:f5:4b:16:
7d:c6:c7:a1:54:78:95:1f:54:a2:4a:13:80:e0:a7:
ea:7a:cc:93:4f:f3:7b:38:64:5b:36:0f:af:f6:8c:
ea:d2:c9:75:1e:60:23:9f:03:8c:65:03:47:4e:54:
9f:cc:0d:6e:2a:f9:13:49:cc:8d:ef:60:e7:48:12:
c5:b9:f6:71:e8:ec:3b:cc:0e:66:2a:b2:d6:9c:b4:
f2:a5:09:4d:a6:15:f9:a5:aa:fb:49:8e:aa:92:01:
be:2e:41:6f:a5:ba:61:5e:20:ef:a8:2e:a6:8c:80:
e0:5d:79:62:ef:d8:05:c6:10:00:a1:c0:97:c9:82:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:31:F8:6F:E8:F8:DF:C5:47:74:1D:FC:8D:0D:02:3E:85:4B:28:E0
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139322e302f32332d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.192.0/23
Signature Algorithm: sha256WithRSAEncryption
72:a6:e9:5a:29:3a:18:5e:2b:42:0d:c2:cb:48:e8:6c:13:d6:
e4:76:a7:db:c9:21:8a:df:61:03:b7:48:93:ff:31:5a:73:db:
f4:3e:34:18:84:bf:2f:c3:1e:7f:e5:bd:dd:43:70:72:aa:f9:
85:44:9d:46:03:43:19:b6:39:ac:cf:c7:33:78:5e:d6:38:15:
14:2e:7e:79:f8:34:ec:8f:72:2f:07:20:35:8b:26:60:17:4f:
f8:ee:46:8d:ce:9c:ef:14:1f:4b:c6:2f:e8:c2:a7:f0:1f:e5:
10:0d:64:3c:7b:d7:df:70:76:2f:69:2c:f5:0e:93:72:ea:e8:
78:ce:3e:f4:2b:52:ea:ca:06:d8:8b:8e:82:40:11:d1:93:e4:
78:d1:ae:a2:a9:2f:67:32:03:53:a8:1b:78:43:66:69:37:0d:
44:3c:46:b2:60:bf:d3:56:4a:e0:e9:8a:02:f1:f6:d4:30:2b:
05:73:1b:c6:94:ef:0b:0a:18:8b:0d:a3:42:71:ce:92:b3:6f:
b5:ee:0f:53:c5:d3:5e:0c:9d:1f:c2:5d:61:c2:d5:23:42:06:
b4:c9:56:37:39:17:36:e5:b5:86:59:2d:60:ed:30:4e:bc:65:
82:10:6e:4f:e6:b8:31:f6:1a:8a:17:e0:ad:cd:2c:62:f6:89:
00:72:33:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:14:57 2026 by rpki-client