
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa
File: 3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa (raw, json)
Hash identifier: NdCjlB6B9YgZJoZ1Uw/3JvnFwjpegaTv9nvgtsFFe1c=
Subject key identifier: C2:CE:25:AB:C0:28:96:ED:CA:BE:9C:21:D4:0B:7A:53:0F:FB:DE:58
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 67BDA1A690CAE7989DB1B682D9C30F63BA99EC51
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa
Signing time: Sun 28 Jun 2026 13:52:12 +0000
ROA not before: Sun 28 Jun 2026 13:47:12 +0000
ROA not after: Sun 27 Jun 2027 13:52:12 +0000
asID: 134764
IP address blocks: 160.19.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:bd:a1:a6:90:ca:e7:98:9d:b1:b6:82:d9:c3:0f:63:ba:99:ec:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:47:12 2026 GMT
Not After : Jun 27 13:52:12 2027 GMT
Subject: CN=C2CE25ABC02896EDCABE9C21D40B7A530FFBDE58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:d7:88:14:b4:5a:33:d7:98:53:4d:fd:90:
8f:96:9e:4d:b6:e3:54:b5:dd:36:e1:92:3d:7b:7b:
ab:77:12:27:b9:13:cb:89:af:d4:44:8b:db:12:8b:
80:1c:87:3b:49:6c:44:35:d1:b2:03:f5:7d:da:14:
a2:e6:00:04:8d:90:47:12:d8:a3:e4:1d:fe:7a:e7:
45:4f:95:5e:36:11:c0:13:88:ed:ee:a5:34:38:79:
95:94:cc:bf:81:57:b1:73:d9:72:89:ff:3d:4a:6c:
ea:90:ee:2a:81:ad:c7:ed:3e:52:18:17:01:3a:28:
84:8b:b3:71:fc:a2:3c:1d:0c:3d:eb:dd:9a:7e:de:
a9:9f:15:f2:81:4d:c9:26:ca:92:b7:89:49:6d:19:
30:e9:41:7f:3e:c1:a7:65:65:8a:e0:45:b1:6e:df:
4a:7c:52:d6:4d:0f:01:14:c7:78:82:07:81:26:62:
b7:cf:71:d5:ff:7f:9a:54:b6:2a:8d:fb:66:5c:18:
d8:96:15:91:2e:6f:ef:69:47:48:9f:9f:05:4d:34:
ad:e9:9c:c5:e6:4f:91:5b:d9:31:e5:16:c4:b9:62:
91:3a:0d:1b:c1:51:82:a4:84:b2:e7:e5:3e:60:a1:
18:2c:44:6e:a5:9b:26:1c:61:b5:54:a4:75:18:3f:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:CE:25:AB:C0:28:96:ED:CA:BE:9C:21:D4:0B:7A:53:0F:FB:DE:58
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136302e31392e3230382e302f32342d3234203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.208.0/24
Signature Algorithm: sha256WithRSAEncryption
68:61:dd:97:c6:f4:de:67:36:b2:3f:e2:ff:b2:5c:07:2e:d8:
87:05:d2:8c:9b:02:ac:88:8e:ec:eb:83:c1:62:b8:e4:33:63:
3d:3e:e1:bd:5a:68:b6:c8:28:01:78:ab:73:1a:60:55:64:ca:
77:79:d6:aa:a0:44:e8:f8:72:30:d8:e4:95:0a:58:33:f0:50:
2a:33:f3:68:ac:e7:77:53:a6:8f:7a:79:fc:e2:bb:9e:ec:a3:
fb:e8:7d:f4:03:6f:1f:1d:53:ad:90:40:73:a3:58:aa:1e:ce:
49:d8:e3:3a:ce:7d:52:55:81:e0:68:6f:e4:45:5b:06:55:eb:
ca:38:5b:4d:d0:95:00:93:db:06:a3:bb:0d:59:ab:0c:aa:a7:
74:3d:ac:8a:e9:02:51:85:91:e4:96:9b:9d:0f:02:91:12:a8:
79:f5:8d:13:b9:6a:04:3c:a5:a0:b1:98:90:19:72:77:38:5c:
42:2a:6b:28:27:31:82:8e:17:46:57:c4:ed:ec:69:c8:21:ef:
3e:ca:90:ae:f3:8f:a4:17:fd:cd:03:d7:1d:3e:b4:fb:64:0b:
3c:7a:99:1a:29:70:7b:ce:4b:93:d6:e0:5f:74:ac:19:95:fd:
f1:38:0b:85:67:58:62:c5:3a:8d:ec:45:7e:f6:bc:25:29:50:
1e:c0:ea:ae
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUZ72hppDK55idsbaC2cMPY7qZ7FEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw
NEZENjlERDAeFw0yNjA2MjgxMzQ3MTJaFw0yNzA2MjcxMzUyMTJaMDMxMTAvBgNV
BAMTKEMyQ0UyNUFCQzAyODk2RURDQUJFOUMyMUQ0MEI3QTUzMEZGQkRFNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsO9eIFLRaM9eYU039kI+Wnk22
41S13Tbhkj17e6t3Eie5E8uJr9REi9sSi4AchztJbEQ10bID9X3aFKLmAASNkEcS
2KPkHf5650VPlV42EcATiO3upTQ4eZWUzL+BV7Fz2XKJ/z1KbOqQ7iqBrcftPlIY
FwE6KISLs3H8ojwdDD3r3Zp+3qmfFfKBTckmypK3iUltGTDpQX8+wadlZYrgRbFu
30p8UtZNDwEUx3iCB4EmYrfPcdX/f5pUtiqN+2ZcGNiWFZEub+9pR0ifnwVNNK3p
nMXmT5Fb2THlFsS5YpE6DRvBUYKkhLLn5T5goRgsRG6lmyYcYbVUpHUYP9M3AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUws4lq8Aolu3Kvpwh1At6Uw/73lgwHwYDVR0j
BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF
RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODAwNTUxMjE1NTk1NTQvMC8zMTM2MzAyZTMx
MzkyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzNDM3MzYzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAKAT0DANBgkqhkiG9w0BAQsFAAOCAQEAaGHdl8b03mc2sj/i/7Jc
By7YhwXSjJsCrIiO7OuDwWK45DNjPT7hvVpotsgoAXircxpgVWTKd3nWqqBE6Phy
MNjklQpYM/BQKjPzaKznd1Omj3p5/OK7nuyj++h99ANvHx1TrZBAc6NYqh7OSdjj
Os59UlWB4Ghv5EVbBlXryjhbTdCVAJPbBqO7DVmrDKqndD2siukCUYWR5JabnQ8C
kRKoefWNE7lqBDyloLGYkBlydzhcQiprKCcxgo4XRlfE7expyCHvPsqQrvOPpBf9
zQPXHT60+2QLPHqZGilwe85Lk9bgX3SsGZX98TgLhWdYYsU6jexFfva8JSlQHsDq
rg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:42:02 2026 by rpki-client