
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139382e302f32332d3234203d3e203538353430.roa
File: 3138322e36312e3139382e302f32332d3234203d3e203538353430.roa (raw, json)
Hash identifier: GHQLAff3u6Ns8w54QjHDNlmnHHADtbVV4oLNeWA7SEA=
Subject key identifier: 11:5B:58:A9:49:ED:D9:32:5C:BE:10:02:5B:92:39:EF:A1:2F:3F:74
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 4EE4B12DA320E58C13869266E9E420CE17E6989B
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139382e302f32332d3234203d3e203538353430.roa
Signing time: Sun 19 Apr 2026 11:17:03 +0000
ROA not before: Sun 19 Apr 2026 11:12:03 +0000
ROA not after: Sun 18 Apr 2027 11:17:03 +0000
asID: 58540
IP address blocks: 182.61.198.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:e4:b1:2d:a3:20:e5:8c:13:86:92:66:e9:e4:20:ce:17:e6:98:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 11:12:03 2026 GMT
Not After : Apr 18 11:17:03 2027 GMT
Subject: CN=115B58A949EDD9325CBE10025B9239EFA12F3F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2a:c9:9b:6a:15:82:dc:c7:c7:34:d3:05:57:
61:a7:39:0d:74:5e:21:6f:03:fd:18:d2:84:d8:da:
08:ea:74:f8:41:cc:28:45:d2:9e:7c:bf:12:8a:bf:
a6:f4:05:b9:3b:5e:06:15:0a:0d:4d:10:85:e4:49:
4d:39:64:ab:b0:c3:be:63:de:64:fe:61:95:f7:21:
f5:c8:cd:80:fb:0b:e1:d7:7c:af:53:ed:a9:da:67:
59:b5:6a:e0:23:a8:32:8c:cd:c2:23:0f:b0:74:87:
61:ed:7c:68:97:38:02:97:bb:41:10:d5:c4:69:60:
e5:41:25:4a:95:1b:44:85:68:11:e6:d2:ad:84:cb:
e2:79:cb:3d:96:89:6f:ac:36:e8:58:11:9c:e2:3b:
b8:17:dd:b2:65:d5:83:d5:a4:e4:43:4d:d7:98:e2:
f7:36:67:67:19:e3:11:49:a2:fc:64:f5:53:4d:ea:
ea:72:20:16:ed:e4:bf:e2:fb:75:54:3a:00:1e:9d:
71:f6:57:c4:9a:fc:c8:e1:06:2a:d4:45:b4:d1:ba:
f4:9a:44:8c:59:68:26:11:19:b0:fa:dc:1e:17:f0:
e2:c4:fa:67:f3:b9:b6:29:89:b3:bc:ef:7c:cf:dc:
66:00:a7:34:3d:c4:48:b6:6d:85:5b:d9:ee:a3:89:
85:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:5B:58:A9:49:ED:D9:32:5C:BE:10:02:5B:92:39:EF:A1:2F:3F:74
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e3139382e302f32332d3234203d3e203538353430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.198.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:14:77:72:e3:ff:b2:1f:66:3a:bc:a6:0a:92:0b:f8:e1:e4:
9f:d9:67:c4:77:ac:54:20:86:1d:94:dc:4e:1b:9b:13:0a:ae:
1d:fa:80:d8:db:61:ea:4a:fd:cc:31:66:16:63:66:ac:7d:a3:
45:a9:de:99:b4:b8:61:a7:57:a3:2d:e2:e1:fe:d9:72:5a:a2:
27:e4:02:5b:26:9a:f2:76:4c:87:4e:fb:37:3d:75:db:a5:cc:
aa:d3:00:9a:ee:cd:49:ad:7f:fd:be:dd:4b:71:16:21:40:5d:
26:57:00:e3:4b:3e:86:4b:cc:0d:2b:bb:d4:f9:cd:23:54:94:
5b:30:9c:6b:34:33:0e:28:06:6a:f2:c1:9b:bc:75:57:44:31:
6a:2b:24:f3:f7:05:ac:72:39:87:1c:c7:16:e4:a6:ca:6a:a5:
86:be:bf:a8:b3:7b:90:89:dc:4a:7f:7d:48:ac:da:ed:f3:9a:
52:55:5a:ac:36:4e:cc:12:69:2f:1c:00:ff:1f:04:7a:b9:5e:
1f:f7:e7:bc:3a:80:c3:98:27:a1:81:e9:7e:ba:f5:29:8f:d1:
9d:93:7f:c6:d6:54:6e:1c:19:54:55:df:db:ee:de:7f:9b:1b:
8d:3a:cf:5e:a2:51:1c:8f:a2:e7:de:3e:94:05:c3:0c:13:89:
ac:a1:d8:30
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUTuSxLaMg5YwThpJm6eQgzhfmmJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MTkxMTEyMDNaFw0yNzA0MTgxMTE3MDNaMDMxMTAvBgNV
BAMTKDExNUI1OEE5NDlFREQ5MzI1Q0JFMTAwMjVCOTIzOUVGQTEyRjNGNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUKsmbahWC3MfHNNMFV2GnOQ10
XiFvA/0Y0oTY2gjqdPhBzChF0p58vxKKv6b0Bbk7XgYVCg1NEIXkSU05ZKuww75j
3mT+YZX3IfXIzYD7C+HXfK9T7anaZ1m1auAjqDKMzcIjD7B0h2HtfGiXOAKXu0EQ
1cRpYOVBJUqVG0SFaBHm0q2Ey+J5yz2WiW+sNuhYEZziO7gX3bJl1YPVpORDTdeY
4vc2Z2cZ4xFJovxk9VNN6upyIBbt5L/i+3VUOgAenXH2V8Sa/MjhBirURbTRuvSa
RIxZaCYRGbD63B4X8OLE+mfzubYpibO873zP3GYApzQ9xEi2bYVb2e6jiYW1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUEVtYqUnt2TJcvhACW5I576EvP3QwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzgzMjJlMzYz
MTJlMzEzOTM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzUzODM1MzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAbY9xjANBgkqhkiG9w0BAQsFAAOCAQEAnBR3cuP/sh9mOrymCpIL+OHk
n9lnxHesVCCGHZTcThubEwquHfqA2Nth6kr9zDFmFmNmrH2jRanembS4YadXoy3i
4f7ZclqiJ+QCWyaa8nZMh077Nz1126XMqtMAmu7NSa1//b7dS3EWIUBdJlcA40s+
hkvMDSu71PnNI1SUWzCcazQzDigGavLBm7x1V0Qxaisk8/cFrHI5hxzHFuSmymql
hr6/qLN7kIncSn99SKza7fOaUlVarDZOzBJpLxwA/x8EerleH/fnvDqAw5gnoYHp
frr1KY/RnZN/xtZUbhwZVFXf2+7ef5sbjTrPXqJRHI+i594+lAXDDBOJrKHYMA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:56:31 2026 by rpki-client