
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139382e302f32332d3234203d3e203338333635.roa
File: 3138322e36312e3139382e302f32332d3234203d3e203338333635.roa (raw, json)
Hash identifier: 3Dp2vGBBNn1awN3CoEcJWmcvAiHsuHb0+/54P3JWJRA=
Subject key identifier: 6D:6F:2B:08:4F:D6:AF:86:E8:28:71:12:74:A1:37:07:F0:F7:68:4F
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 3C507F1B7041D395C4D3BED5266C9D6C20B1170E
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139382e302f32332d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 11:17:04 +0000
ROA not before: Sun 19 Apr 2026 11:12:04 +0000
ROA not after: Sun 18 Apr 2027 11:17:04 +0000
asID: 38365
IP address blocks: 182.61.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:50:7f:1b:70:41:d3:95:c4:d3:be:d5:26:6c:9d:6c:20:b1:17:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:12:04 2026 GMT
Not After : Apr 18 11:17:04 2027 GMT
Subject: CN=6D6F2B084FD6AF86E828711274A13707F0F7684F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ae:af:18:f8:d5:e4:ab:d4:68:c7:fd:54:e7:
9d:87:10:ef:8c:dd:65:59:e4:18:e4:1a:bf:e7:29:
47:62:1f:14:de:ae:4e:39:1f:db:d4:f1:9f:ae:1c:
64:9d:bb:24:10:13:7a:f6:f1:7b:45:5e:e3:99:7f:
38:c2:41:6d:82:21:0a:48:61:b7:96:f9:be:22:5c:
6f:4c:1f:08:50:2d:a4:5e:85:75:d9:3e:62:1a:cb:
29:3c:13:85:68:49:b4:f5:08:c0:b9:67:ca:b5:9b:
b9:d4:77:26:c1:36:d9:54:60:74:0e:d8:18:55:45:
2e:86:a6:65:56:03:3c:41:3f:9f:24:cb:1a:74:54:
ca:6b:60:b5:38:c7:9e:1e:03:89:33:8c:be:bc:f1:
4a:33:8f:ee:1b:c4:d8:ff:ff:23:fe:ff:4b:f2:8b:
ca:94:25:c4:22:6a:f9:30:3f:a3:61:0f:7e:d9:a1:
93:c3:05:8d:2a:27:bb:72:50:2e:1b:0e:9e:7b:5e:
74:12:14:1b:ac:24:4a:40:f7:f6:23:b3:fc:15:1f:
78:26:83:66:ec:55:92:ae:42:ea:6c:f2:d3:13:c7:
dc:54:75:fd:c4:e0:c5:14:a7:dd:80:29:dc:41:2b:
81:ce:16:4c:1a:2d:b6:0f:c7:54:a9:d9:b3:33:b6:
05:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6F:2B:08:4F:D6:AF:86:E8:28:71:12:74:A1:37:07:F0:F7:68:4F
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139382e302f32332d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.198.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:1e:87:88:f9:a9:28:81:4b:01:3b:33:31:2d:42:db:f2:1b:
32:23:06:37:98:a4:c3:77:ab:d7:0a:fc:29:81:50:b6:b4:55:
46:60:76:fd:47:1d:ba:fc:16:f6:a2:c9:88:bc:11:d5:b1:c4:
8e:6f:f1:9b:98:6b:4d:80:53:71:e0:ba:74:99:f3:0d:f4:7e:
28:2a:7e:7f:9d:2c:a3:7c:87:96:71:ee:c4:8f:f4:4e:55:59:
e5:84:cf:38:d8:4c:c8:8f:f8:0b:b6:a3:7c:a0:aa:3f:d2:91:
0f:95:e3:1d:19:58:a1:5f:0a:de:b2:f1:04:5a:ed:3f:00:4e:
6f:f2:59:9d:40:1f:e8:be:0a:8b:0f:15:7d:92:37:3b:87:1f:
e7:35:5c:0e:b1:eb:c4:91:c7:63:07:6b:e8:1c:1a:9c:5e:34:
3c:27:20:f9:93:3f:85:70:19:7e:18:f0:4e:80:99:13:3a:41:
ea:8c:4e:59:8d:7e:5a:3a:2a:c4:ca:b8:6a:dd:2c:41:5e:32:
af:76:f7:fe:ad:22:98:0e:2c:0a:03:36:b0:54:73:8f:71:74:
72:4c:d5:32:e6:db:f5:77:2e:0e:86:8b:58:68:b4:10:83:7d:
73:d3:83:96:e3:cd:ec:e8:96:7a:0f:5f:7d:61:47:77:c1:7d:
08:9f:77:9d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:07 2026 by rpki-client