
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203338333635.roa
File: 3138322e36312e3139342e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier: zY2hyYdtwdvqfCj0IYu3sonJQtSxyIHqzJkwlXx4iJ0=
Subject key identifier: BB:B0:06:D1:7D:2B:1F:CE:2B:63:47:DE:F5:52:80:87:8C:33:34:A5
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 31E5D0A9392E5914768AE889097027AFB68CE87C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 11:15:02 +0000
ROA not before: Sun 19 Apr 2026 11:10:02 +0000
ROA not after: Sun 18 Apr 2027 11:15:02 +0000
asID: 38365
IP address blocks: 182.61.194.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e5:d0:a9:39:2e:59:14:76:8a:e8:89:09:70:27:af:b6:8c:e8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:10:02 2026 GMT
Not After : Apr 18 11:15:02 2027 GMT
Subject: CN=BBB006D17D2B1FCE2B6347DEF55280878C3334A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:2a:aa:f3:ec:72:89:f3:f1:85:67:73:6f:
45:41:2e:c0:f4:d4:a7:55:1e:84:45:11:0b:7f:91:
af:e6:81:5c:d4:93:0b:83:5d:ab:71:27:4a:c9:3e:
3a:3d:ca:55:97:75:aa:ff:04:fe:0c:36:ca:1a:46:
e7:7a:15:ca:63:02:ff:23:6b:e4:ae:ab:09:db:ef:
61:31:69:91:8e:85:e7:a3:52:93:40:ec:e6:cc:a3:
43:af:28:c6:0e:f6:b5:85:a9:ce:41:81:5d:10:bb:
62:43:96:66:14:aa:bd:31:0a:9e:7f:2f:13:20:ba:
12:cd:b0:8c:6b:55:54:b3:cd:61:f6:fb:9f:ff:a3:
18:f9:d8:9b:2a:dd:04:d4:e8:e1:07:d8:ec:ba:c6:
59:b6:35:e7:2f:85:ad:63:af:00:c1:f5:e5:4a:79:
45:c4:1d:14:0b:d5:ed:e2:9c:f3:2f:35:e7:6d:16:
79:3b:75:45:2d:10:fc:42:5b:40:8b:58:b8:ec:a0:
91:fa:32:8b:df:2a:11:e9:79:4f:e6:fe:b8:9f:ca:
d0:ad:dc:fd:ff:6d:2e:91:d2:c0:7b:64:88:c3:7f:
bb:87:67:ef:c8:39:74:ad:15:b1:9e:88:eb:81:06:
00:ff:2a:2e:93:fb:ff:c7:18:22:2d:84:2d:40:96:
c0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:B0:06:D1:7D:2B:1F:CE:2B:63:47:DE:F5:52:80:87:8C:33:34:A5
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139342e302f32332d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.194.0/23
Signature Algorithm: sha256WithRSAEncryption
78:0b:33:41:5b:65:f6:b3:fd:bf:39:ba:66:94:e2:18:6f:74:
24:d0:3f:87:05:39:c3:72:70:87:aa:c0:ab:43:d7:90:1f:5e:
de:74:08:4a:b9:aa:47:93:ed:d2:55:b7:7c:ad:16:30:b7:1a:
5f:46:3b:88:51:6b:cc:9a:65:06:62:25:d9:d5:9d:d1:e0:e6:
dc:19:b9:a7:f6:2d:06:f7:68:25:c5:9b:be:c7:96:8c:d0:66:
6c:95:f3:e6:73:f4:56:e5:f3:0d:49:c3:18:19:57:60:41:4d:
b8:a1:0c:ed:e6:10:68:5e:4b:8a:af:3e:c2:91:bf:ac:62:33:
cb:dc:58:6c:ae:da:54:9e:66:05:ad:f7:fc:04:fc:f8:75:b9:
0a:ea:14:59:0d:86:ff:d1:3b:f0:9d:00:8b:22:a6:97:e5:b3:
c0:ce:e5:a0:b1:d0:52:78:96:7d:21:f1:e3:85:0a:77:6d:7d:
a1:00:51:8a:1f:45:a5:de:f4:fe:f5:ae:c4:c6:22:ac:30:a0:
c4:14:a8:dc:ca:0c:30:6d:c8:c4:3c:91:c7:b1:d7:d6:1b:19:
ad:71:aa:24:15:71:2a:84:ad:0b:a2:fa:7a:05:f2:14:a0:f3:
dd:65:97:d3:36:41:0d:fc:05:ac:51:33:2d:06:29:81:08:e9:
3d:55:09:ed
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:26 2026 by rpki-client