
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e36342e302f31382d3234203d3e203338333635.roa
File: 3138322e36312e36342e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier: DVQnrFxVrBLjqYyIcb0g0Yf07T5Wkyvm0XInY61g/SU=
Subject key identifier: FD:28:E5:E0:85:20:BC:DC:44:8F:AC:2B:06:16:B8:64:93:B8:80:D4
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 19A81F86470C46855CD5C1672F6A4A6F79C38BC3
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e36342e302f31382d3234203d3e203338333635.roa
Signing time: Sun 19 Apr 2026 10:08:35 +0000
ROA not before: Sun 19 Apr 2026 10:03:35 +0000
ROA not after: Sun 18 Apr 2027 10:08:35 +0000
asID: 38365
IP address blocks: 182.61.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:09:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:a8:1f:86:47:0c:46:85:5c:d5:c1:67:2f:6a:4a:6f:79:c3:8b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 19 10:03:35 2026 GMT
Not After : Apr 18 10:08:35 2027 GMT
Subject: CN=FD28E5E08520BCDC448FAC2B0616B86493B880D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:34:b9:12:37:6d:2a:84:77:3a:4f:14:9a:
0e:f2:85:ac:9b:ef:66:56:d0:70:2e:48:15:65:d4:
9d:08:0f:93:68:b6:26:b1:91:55:49:d2:61:5c:71:
82:68:b6:7d:0c:d7:37:1a:0a:dd:14:58:5a:ab:c6:
5a:00:7c:f6:73:9b:57:25:ae:44:db:18:fd:9d:d8:
2f:ac:30:c8:e1:12:e2:61:67:e0:b9:70:a5:5c:4c:
9f:bd:09:47:0f:a9:a2:78:3d:7a:24:8a:ff:ac:cd:
42:2d:2b:ee:5a:d5:c3:5a:8b:7b:a0:91:07:40:22:
8a:e2:40:f6:28:fa:a8:4b:86:14:ee:51:65:e3:ee:
84:41:42:35:85:6b:c9:78:48:74:3b:24:54:e8:09:
91:9c:9a:64:a5:ce:71:bc:74:84:1d:e3:f7:fd:64:
ab:f5:2c:23:ea:73:7e:98:0a:31:7c:14:60:df:e5:
d8:d2:50:61:71:12:a5:65:45:a4:b4:b2:71:fa:87:
5c:7b:d8:9b:52:81:2f:c9:5e:76:d9:fb:f0:78:fd:
f4:15:6b:6d:b7:5a:01:95:22:89:b6:e3:24:a1:d9:
d0:18:2b:c1:59:3c:98:70:1a:82:33:20:dd:ee:d5:
4d:02:a8:c1:0a:51:dc:3e:29:d9:17:14:be:5a:d0:
97:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:28:E5:E0:85:20:BC:DC:44:8F:AC:2B:06:16:B8:64:93:B8:80:D4
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3138322e36312e36342e302f31382d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.61.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0d:f7:56:ff:98:60:6d:a2:d5:e1:3c:e1:ef:58:63:87:34:0b:
30:d2:90:81:f9:af:11:91:d3:3d:e4:57:cc:fb:c8:41:58:40:
84:60:c1:aa:9a:48:d6:aa:bf:d4:ca:3e:ef:00:7c:a9:1e:55:
13:eb:30:58:38:4b:5b:6d:90:a5:c3:12:60:62:8a:07:32:0e:
67:ac:a4:87:a7:4f:15:4f:0b:0c:68:98:be:ce:ad:97:bb:4b:
65:34:0d:9c:9e:ab:47:d0:92:0b:c5:ce:78:d3:9b:50:ff:4a:
ff:50:41:ba:e2:22:3d:85:42:34:1f:41:d2:69:5b:1d:8c:6f:
a4:16:1d:95:4c:95:30:fb:18:1f:8c:76:a9:a2:e4:57:48:5f:
de:d1:4e:f2:d7:be:82:55:c7:1e:78:e1:bc:dc:e1:b0:e7:83:
d8:4e:6b:aa:eb:53:53:0c:5b:af:2f:95:a3:55:49:45:8b:ce:
55:b2:46:6f:71:9e:2d:6e:af:a4:22:92:f7:3a:46:de:2b:73:
70:64:55:f3:4d:09:d2:56:d0:9d:15:2f:5b:9d:80:09:93:ae:
c1:51:d1:c3:75:06:ad:93:46:92:61:02:80:c3:fe:5a:e4:e7:
50:04:e5:56:f0:2b:61:26:ff:9f:06:84:b3:65:b1:a5:a8:ce:
af:fe:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:13 2026 by rpki-client