
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa
File: 3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa (raw, json)
Hash identifier: 9e1JR5utTIemTqHP8y6kd3PDOckK8mDtEslp/BudJuE=
Subject key identifier: 03:D0:A4:AA:C2:66:77:54:18:5C:71:DC:24:B4:F4:B4:9C:A7:E6:2A
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 2993874C3E0E05356A7B8420D973F2B9EC19290B
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa
Signing time: Wed 02 Sep 2026 03:55:20 +0000
ROA not before: Wed 02 Sep 2026 03:50:20 +0000
ROA not after: Wed 01 Sep 2027 03:55:20 +0000
asID: 17638
IP address blocks: 139.220.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:93:87:4c:3e:0e:05:35:6a:7b:84:20:d9:73:f2:b9:ec:19:29:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Sep 2 03:50:20 2026 GMT
Not After : Sep 1 03:55:20 2027 GMT
Subject: CN=03D0A4AAC2667754185C71DC24B4F4B49CA7E62A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:aa:9d:2e:c5:62:d4:28:71:d2:5d:82:22:27:
76:64:9e:5f:1a:06:31:69:08:65:f4:5e:05:54:9e:
f2:84:02:3f:9a:5c:cf:30:49:6c:da:09:ca:4c:a0:
7e:2f:eb:1a:bf:91:5e:19:1e:9a:50:bb:fc:79:35:
84:3d:f4:59:8b:c6:d7:be:08:6b:74:9a:96:73:c6:
70:99:44:f2:2b:a5:06:16:cc:81:a2:1f:62:92:2c:
c9:ec:ff:a4:4e:cc:a6:12:52:94:de:15:14:56:d3:
bb:39:b7:12:5a:e0:89:74:f9:b5:df:24:c4:da:7b:
0b:f6:31:d2:b2:da:b8:c1:ba:1b:1c:27:ae:62:e0:
1b:bb:f0:7b:6a:c1:e6:ca:64:4b:39:48:a6:3f:0d:
00:08:79:97:ce:dd:7f:ee:51:e0:b9:5c:b5:60:ca:
44:c7:1b:11:75:80:d7:5f:4d:a8:6e:f1:1d:39:81:
b6:f8:00:fe:ca:ff:d7:ba:43:ce:f6:be:f4:a7:c2:
2f:d1:1e:b9:0a:ed:e2:d3:28:e2:58:89:a2:3f:8d:
37:b4:b1:8a:7f:5c:bc:f2:ef:49:7e:61:13:db:4b:
2d:0c:c9:23:ef:9e:f0:df:b9:9e:f2:68:f4:10:43:
b8:62:55:a6:05:b8:f1:71:26:51:15:4d:94:36:70:
1a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:A4:AA:C2:66:77:54:18:5C:71:DC:24:B4:F4:B4:9C:A7:E6:2A
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203137363338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:3a:ec:a2:be:2f:cb:dd:6a:a1:10:5c:0c:37:35:49:8d:e5:
17:2f:69:53:4b:58:31:42:2e:d6:77:d0:35:77:96:8f:83:62:
4f:ad:f8:47:94:5c:6c:0c:d1:82:ed:b4:31:62:af:9a:63:9d:
a7:e2:de:c2:97:f9:e8:2a:c0:75:9f:98:3a:eb:40:94:cc:aa:
3e:2a:38:dd:5a:a1:9a:6e:9f:12:d1:71:52:e5:1e:00:e5:90:
cd:e5:5e:15:eb:b3:7d:ed:9a:c0:87:89:f4:5b:5d:5c:e6:61:
b1:84:62:f0:02:b5:c8:bf:55:80:35:40:ac:7f:62:de:0b:e4:
99:5d:1d:9f:62:5a:d7:9c:d3:c9:69:9c:64:26:6d:67:21:01:
af:66:c0:6d:67:3e:e5:74:30:76:07:22:cf:52:8d:0a:a3:77:
c1:11:0d:71:ea:fa:d1:ad:a0:c9:b4:39:b0:a5:cd:a9:60:cf:
c3:71:74:0d:5e:d3:71:7c:94:48:21:e7:98:a6:f5:48:5e:33:
3d:08:2f:7e:00:eb:88:b9:ee:84:a4:72:96:c8:00:23:ea:5c:
06:35:6d:e1:37:6c:da:02:37:fb:51:db:63:79:6f:d1:3b:20:
07:66:b2:9c:a0:61:af:e8:9d:1b:d3:02:1e:30:05:19:0f:7f:
34:56:aa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:31 2026 by rpki-client