
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136332e35332e3136382e302f32322d3232203d3e203536303436.roa
File: 3136332e35332e3136382e302f32322d3232203d3e203536303436.roa (raw, json)
Hash identifier: xxuHEP+4y2g6DiygkRZjfIA8Gg4+SAnsl/smlqxWanI=
Subject key identifier: 36:DB:E8:28:3F:56:75:1B:59:79:95:0D:89:C2:2E:C9:AB:88:B4:41
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 5241BA8FC1A7EF6018B14A7F3A962AB640A1969B
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136332e35332e3136382e302f32322d3232203d3e203536303436.roa
Signing time: Sun 28 Jun 2026 13:52:56 +0000
ROA not before: Sun 28 Jun 2026 13:47:56 +0000
ROA not after: Sun 27 Jun 2027 13:52:56 +0000
asID: 56046
IP address blocks: 163.53.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 22:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:41:ba:8f:c1:a7:ef:60:18:b1:4a:7f:3a:96:2a:b6:40:a1:96:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:47:56 2026 GMT
Not After : Jun 27 13:52:56 2027 GMT
Subject: CN=36DBE8283F56751B5979950D89C22EC9AB88B441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b8:29:db:1b:22:59:da:d9:de:e3:82:2e:12:
ed:c7:b8:c7:0e:03:2f:59:61:fd:86:c0:12:c0:59:
3e:23:3f:48:93:35:fa:ca:d7:77:aa:fa:ff:41:8f:
c3:69:53:d5:7e:c6:29:9c:1a:c4:c0:03:1a:95:39:
11:85:ea:1b:89:89:61:25:c7:16:0b:8b:ac:d9:e9:
74:7a:ad:77:01:49:6d:e4:ff:d0:c4:a5:fd:65:9b:
d6:96:bc:22:d7:64:82:b4:60:b3:c2:29:88:fd:86:
89:25:e7:e2:0a:06:1c:a3:32:d0:40:d9:da:6b:f4:
07:d5:bf:10:54:d1:03:64:00:ec:1e:00:fa:01:85:
dc:da:ec:ba:57:43:17:e0:40:ff:f6:74:77:5f:d6:
7b:96:e0:60:8e:d8:a7:2a:dc:42:49:78:fb:b1:b4:
a8:6e:42:2d:1f:fd:e5:ac:8f:e6:6f:a4:c8:4e:47:
6d:75:1a:b6:4e:78:71:2c:62:47:6e:22:23:a7:91:
80:e6:16:39:66:67:f0:4d:14:58:8d:d1:4d:62:30:
6a:fc:8c:f9:74:e0:95:0a:26:4d:d5:9b:be:f8:49:
6e:dc:14:4e:de:66:29:19:7d:59:c6:a2:9b:a6:43:
24:67:ca:dc:79:b4:75:e7:30:19:45:3c:f2:95:ee:
be:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:DB:E8:28:3F:56:75:1B:59:79:95:0D:89:C2:2E:C9:AB:88:B4:41
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3136332e35332e3136382e302f32322d3232203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.168.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:26:f9:da:ad:98:5c:68:9f:0b:2f:90:57:ac:03:5b:8f:83:
86:1d:70:56:3a:c1:dd:c8:41:a1:e5:7a:9d:1a:cc:9e:d2:38:
92:6d:c1:ae:12:be:81:c0:92:70:12:a8:a0:dd:b1:09:3c:16:
a3:2c:07:ae:35:ec:db:fb:d1:a9:4a:f0:07:73:39:ee:2c:78:
ad:0d:03:93:c5:52:b4:0e:67:80:c2:df:42:4e:c1:23:b4:6d:
27:56:cb:13:23:c9:61:05:62:cb:fb:2c:e8:c9:b1:4a:b1:05:
cd:1d:c9:d0:d2:d3:52:68:e7:a5:a8:51:9d:ec:80:a8:74:6b:
1a:1f:92:c2:13:cd:a5:29:4b:7f:9e:cd:79:74:52:eb:f1:e4:
58:8b:b6:3d:f6:aa:b7:e6:7b:96:b4:61:6a:ab:77:ee:86:e1:
21:bd:27:ad:91:37:e0:65:01:92:13:47:7c:08:8f:98:93:3d:
9e:b4:3f:76:df:de:d7:04:f7:80:7b:7d:b9:9a:7b:54:2a:b6:
2c:b4:09:7f:02:a2:33:10:18:26:c5:e7:b5:e5:e2:3a:76:99:
71:31:d7:9b:78:17:4e:8d:84:22:5d:06:51:cb:c4:b4:ce:74:
bf:26:96:18:12:b1:3a:4c:2c:4b:59:b6:50:3b:de:48:84:e9:
dd:91:3e:de
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUkG6j8Gn72AYsUp/OpYqtkChlpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw
NEZENjlERDAeFw0yNjA2MjgxMzQ3NTZaFw0yNzA2MjcxMzUyNTZaMDMxMTAvBgNV
BAMTKDM2REJFODI4M0Y1Njc1MUI1OTc5OTUwRDg5QzIyRUM5QUI4OEI0NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uCnbGyJZ2tne44IuEu3HuMcO
Ay9ZYf2GwBLAWT4jP0iTNfrK13eq+v9Bj8NpU9V+ximcGsTAAxqVORGF6huJiWEl
xxYLi6zZ6XR6rXcBSW3k/9DEpf1lm9aWvCLXZIK0YLPCKYj9hokl5+IKBhyjMtBA
2dpr9AfVvxBU0QNkAOweAPoBhdza7LpXQxfgQP/2dHdf1nuW4GCO2Kcq3EJJePux
tKhuQi0f/eWsj+ZvpMhOR211GrZOeHEsYkduIiOnkYDmFjlmZ/BNFFiN0U1iMGr8
jPl04JUKJk3Vm774SW7cFE7eZikZfVnGopumQyRnytx5tHXnMBlFPPKV7r47AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUNtvoKD9WdRtZeZUNicIuyauItEEwHwYDVR0j
BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF
RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8wLzMxMzYzMzJlMzUz
MzJlMzEzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMwMzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAqM1qDANBgkqhkiG9w0BAQsFAAOCAQEACib52q2YXGifCy+QV6wDW4+D
hh1wVjrB3chBoeV6nRrMntI4km3BrhK+gcCScBKooN2xCTwWoywHrjXs2/vRqUrw
B3M57ix4rQ0Dk8VStA5ngMLfQk7BI7RtJ1bLEyPJYQViy/ss6MmxSrEFzR3J0NLT
UmjnpahRneyAqHRrGh+SwhPNpSlLf57NeXRS6/HkWIu2Pfaqt+Z7lrRhaqt37obh
Ib0nrZE34GUBkhNHfAiPmJM9nrQ/dt/e1wT3gHt9uZp7VCq2LLQJfwKiMxAYJsXn
teXiOnaZcTHXm3gXTo2EIl0GUcvEtM50vyaWGBKxOkwsS1m2UDveSITp3ZE+3g==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:39:32 2026 by rpki-client