
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa
File: 3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa (raw, json)
Hash identifier: NsU/MvBPgoz+zRTUXf02e/M2WxhIq5Ju/jaHUiP7H0Y=
Subject key identifier: F8:FF:7D:73:43:AE:BD:5B:7A:AF:5C:4A:B8:2F:4E:0E:D9:75:A7:86
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 5E4D59DD948278E55DF5CE82343C4D1FB189A09F
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa
Signing time: Wed 05 Aug 2026 02:47:06 +0000
ROA not before: Wed 05 Aug 2026 02:42:06 +0000
ROA not after: Wed 04 Aug 2027 02:47:06 +0000
asID: 37965
IP address blocks: 139.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 08:11:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:4d:59:dd:94:82:78:e5:5d:f5:ce:82:34:3c:4d:1f:b1:89:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Aug 5 02:42:06 2026 GMT
Not After : Aug 4 02:47:06 2027 GMT
Subject: CN=F8FF7D7343AEBD5B7AAF5C4AB82F4E0ED975A786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6f:00:08:1f:56:94:93:7d:85:6a:0b:33:26:
09:3b:c7:71:48:80:75:d4:a1:a6:94:12:0e:6b:e7:
3a:58:86:ec:6c:37:f3:08:ad:9d:94:d8:21:84:b1:
27:c5:95:42:eb:a4:38:76:ec:74:eb:a4:8a:09:c3:
3e:a7:29:a4:dd:15:85:63:4c:18:ae:e8:3e:f9:31:
46:5c:cc:bc:c3:54:58:95:78:69:4e:20:ce:b9:ca:
a3:94:b5:15:3a:46:35:03:4b:63:fa:fb:95:0e:2b:
0a:77:2d:da:aa:c9:a5:95:79:ff:b3:34:7b:39:30:
90:41:cd:55:92:ba:02:cc:ab:e1:8a:ef:74:99:b8:
2e:89:b8:4f:4f:e2:09:76:41:5b:b5:7e:6a:c5:ec:
5e:50:a3:27:8c:f0:be:b5:13:a0:d6:4f:50:a9:27:
80:a4:1b:7d:5a:9b:42:80:84:32:1b:98:c2:95:89:
e1:25:6b:63:73:b5:f6:b0:9a:c0:0a:ba:67:24:42:
45:b5:54:55:55:6b:0c:66:b7:db:dd:97:b4:4e:7b:
6a:8e:d5:80:6d:ca:4d:48:f5:6b:90:40:f0:03:d0:
91:a1:a2:df:40:82:a6:af:c6:d9:33:38:19:07:d6:
30:0a:13:6c:e1:57:9e:f6:00:5c:3e:45:7f:45:03:
25:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FF:7D:73:43:AE:BD:5B:7A:AF:5C:4A:B8:2F:4E:0E:D9:75:A7:86
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3132382e302f31382d3234203d3e203337393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
bc:4d:7e:44:55:2a:3c:54:0e:e3:86:4e:62:4d:9b:04:09:c4:
e7:7a:23:51:a6:10:f0:bc:e6:93:be:77:55:cf:59:f3:c4:a5:
66:73:1b:ed:fb:8a:0b:80:8f:66:45:0a:55:82:9a:b5:aa:1f:
13:ff:e3:2b:1b:b2:79:d7:20:e2:63:fa:4b:e5:0f:a3:05:ae:
5c:c9:b3:51:8d:36:ed:66:c2:a2:1a:43:db:71:9d:67:95:36:
74:31:72:14:be:15:90:95:44:e8:ef:e7:95:4b:3f:92:3f:cb:
36:de:4b:1b:1b:ba:99:c7:c1:29:e6:76:fb:b8:5b:44:52:41:
fa:d9:d7:a6:54:c1:fd:2c:eb:d4:12:d1:43:c8:8d:dc:54:f3:
7d:97:ea:fb:40:0b:b4:e9:b3:a3:e2:fd:bd:48:9a:13:63:d4:
3a:21:12:d1:dd:16:42:26:ba:15:b6:a6:b4:78:d7:dc:f3:eb:
f3:06:e8:31:cc:c1:31:3a:1a:35:93:94:51:fc:5b:29:f5:d3:
38:3d:1a:9d:8c:db:7b:df:c4:17:c8:34:77:34:bc:8f:7c:fa:
62:17:00:85:11:b9:43:03:2f:21:bc:44:be:93:8a:b7:c4:18:
d8:70:6f:bc:42:b3:12:7c:d2:d7:ae:bc:6a:e2:82:0d:30:13:
d0:73:e9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:12:18 2026 by rpki-client