
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139362e302f32332d3234203d3e203338333635.roa
File: 3138322e36312e3139362e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier: ZQ/RmPxKVv5Sjbvy7VY7B+AVJYrnx6KYLtKx2LA17M8=
Subject key identifier: 01:41:56:67:3A:2E:36:2A:B3:C2:3D:DD:E4:2F:C7:8B:1B:30:71:25
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 034A1E1A043F0669BAE4DE266661CB5D5DE92A04
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139362e302f32332d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 11:17:03 +0000
ROA not before: Sun 19 Apr 2026 11:12:03 +0000
ROA not after: Sun 18 Apr 2027 11:17:03 +0000
asID: 38365
IP address blocks: 182.61.196.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:4a:1e:1a:04:3f:06:69:ba:e4:de:26:66:61:cb:5d:5d:e9:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:12:03 2026 GMT
Not After : Apr 18 11:17:03 2027 GMT
Subject: CN=014156673A2E362AB3C23DDDE42FC78B1B307125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:e8:f3:a7:bc:ba:02:a8:72:91:75:6e:fc:
ad:46:ac:1e:d7:d3:1e:60:4e:2b:a5:2c:6e:60:0c:
e2:0c:57:9b:f9:07:cc:fe:b6:9e:a8:f3:98:7f:d6:
d3:74:78:31:45:f7:97:33:d1:77:0c:85:f9:9c:af:
ca:8c:fb:32:f8:15:3c:c0:63:df:f3:db:83:9b:31:
2c:d6:44:60:20:4d:73:4f:cd:46:78:75:62:da:b8:
5d:b4:3b:5a:5a:92:d4:00:3b:53:68:74:e8:92:a7:
c3:40:1c:7b:43:b8:89:1e:ba:4c:31:cb:68:0f:c5:
7d:ef:d1:8c:7c:54:18:41:66:51:34:3a:44:f2:98:
d7:39:27:51:47:83:bc:5a:3f:89:c4:d7:2d:fc:31:
6e:78:9a:0c:59:17:18:8b:79:ee:46:00:c8:7f:08:
92:65:cc:dd:bb:fd:11:71:b5:14:c6:db:ba:56:e1:
61:a8:b7:f9:3c:1f:34:5d:08:13:e0:89:21:90:d6:
49:a9:d1:d9:13:a4:79:e0:7a:34:1f:b7:b6:58:ca:
10:fb:85:74:76:18:22:ae:80:28:f4:5c:f8:53:bf:
d2:21:76:d7:fb:7f:0e:1d:62:46:10:a7:37:a3:8a:
a3:7c:9c:68:de:bd:93:22:cd:59:3b:42:86:e0:c9:
38:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:41:56:67:3A:2E:36:2A:B3:C2:3D:DD:E4:2F:C7:8B:1B:30:71:25
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139362e302f32332d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.196.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:2b:7d:fe:4e:aa:3c:ac:53:8a:a8:87:d2:04:38:2f:b5:1c:
44:21:4a:d5:48:ec:91:92:8d:88:c9:3f:2e:65:ec:1b:e9:39:
97:ef:33:8d:b1:84:2d:9a:a5:1d:0b:3a:6f:df:1d:ef:4b:e8:
c6:22:73:48:f4:41:bc:b3:b5:f3:26:1a:ad:59:87:35:1b:36:
b4:ee:a7:20:20:4e:a4:c4:79:33:3b:83:d8:37:56:62:53:ef:
2c:3e:e7:8f:40:4b:1f:c6:31:5d:25:04:44:a8:8d:91:c9:82:
3f:e0:07:ff:fb:c3:b7:32:d4:69:b4:81:fc:98:58:f4:28:5a:
14:5c:68:6d:c6:06:ff:8e:24:56:f4:f1:61:7c:55:ba:ee:36:
2e:ae:b7:23:c1:3c:d9:97:8f:4f:6b:90:d4:f9:d5:13:0d:75:
91:98:94:70:9e:97:b2:ed:32:1d:97:3f:73:b6:00:79:1d:f4:
71:15:d0:59:4f:40:bf:20:1a:62:4a:b0:a8:01:5f:4e:4c:1a:
ac:9e:d9:80:91:0a:fd:ce:5a:87:ba:5c:a1:dc:e0:0f:c0:17:
70:97:4a:6c:a4:33:d6:c9:87:6d:a8:77:ed:7e:ee:02:75:be:
57:eb:ea:22:8b:3b:eb:03:7a:80:0e:75:7f:d3:1d:96:47:06:
01:b4:c8:77
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:25 2026 by rpki-client