
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203337393635.roa
File: 3133392e3232302e3139322e302f31382d3234203d3e203337393635.roa (raw, json)
Hash identifier: VqvK8tHFeH3hqj7boSaRhK05KUSm4FwQ7F65empnMCo=
Subject key identifier: F0:E1:30:36:AB:57:AB:89:69:72:B2:62:53:C6:C5:4A:38:6E:02:3A
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 63BB664828BED20684F5D9F4F75143075DB23415
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203337393635.roa
Signing time: Wed 02 Sep 2026 03:55:20 +0000
ROA not before: Wed 02 Sep 2026 03:50:20 +0000
ROA not after: Wed 01 Sep 2027 03:55:20 +0000
asID: 37965
IP address blocks: 139.220.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:bb:66:48:28:be:d2:06:84:f5:d9:f4:f7:51:43:07:5d:b2:34:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Sep 2 03:50:20 2026 GMT
Not After : Sep 1 03:55:20 2027 GMT
Subject: CN=F0E13036AB57AB896972B26253C6C54A386E023A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:bc:6f:78:39:2b:d7:77:f7:57:76:e3:58:
77:c7:e3:8d:61:71:7a:f9:45:ca:2e:93:b9:b2:43:
70:34:c6:c8:13:1b:9c:bd:07:d7:44:cb:73:8e:ab:
f8:32:70:1f:c2:58:f2:78:30:c8:6e:9c:cd:7b:f2:
cd:0d:0b:ce:39:a3:63:62:02:08:80:27:d2:f5:7e:
55:01:f7:b1:24:4c:b9:33:d5:84:48:33:82:a5:ec:
6e:09:1d:36:bf:e8:c0:41:ab:6e:07:28:48:7d:1e:
1a:d5:c7:31:19:a1:26:c1:16:87:eb:cc:0d:27:87:
ad:8e:40:d7:e3:2b:4f:eb:71:0a:6e:8e:ce:be:3b:
dd:af:1f:63:eb:09:09:9f:32:b0:54:e9:1b:a3:e6:
1c:64:3b:c0:83:9b:f4:76:48:dc:46:4e:5c:f2:3a:
1e:9d:5a:21:d0:12:4e:f5:2f:9b:f9:bf:8a:0d:3b:
a4:38:79:a3:4a:b2:b0:1f:99:71:ee:30:79:18:2a:
14:9e:7d:d9:56:81:a8:45:db:4e:ca:97:c1:4e:22:
3d:7a:e0:16:b8:cd:9c:13:03:54:ef:b2:70:38:8f:
a5:94:e8:73:b7:5f:51:7e:49:bb:19:90:49:29:03:
af:fb:94:d0:92:81:52:a9:38:b9:11:f7:94:33:1a:
a0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:E1:30:36:AB:57:AB:89:69:72:B2:62:53:C6:C5:4A:38:6E:02:3A
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203337393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/18
Signature Algorithm: sha256WithRSAEncryption
92:19:85:0f:d0:bd:c8:6c:75:31:59:d0:32:b9:0f:62:ff:1f:
f6:95:9a:c8:3c:5c:d3:ce:7a:0a:36:14:03:8f:f9:41:15:3d:
a2:a8:b1:fc:a9:23:93:42:66:fb:e0:71:99:8a:57:5e:c4:0a:
2f:91:b3:da:81:b5:a2:2e:5d:d6:14:2e:48:73:97:21:fd:b3:
c1:2a:b3:19:67:ab:9f:e2:34:0c:16:3a:97:3f:40:29:fc:91:
e3:46:91:07:f3:f0:67:a7:2f:5b:51:46:7a:d3:84:5d:0f:64:
40:14:ff:bf:1f:27:58:89:df:c3:1f:cd:06:3c:29:ef:9c:58:
59:6e:c5:f3:c7:14:94:f7:9d:24:52:41:e4:08:b2:87:4b:60:
c3:9e:88:ca:63:71:d9:48:3c:65:1b:98:5f:2c:f1:30:72:82:
5b:1f:de:a0:ac:8f:e8:63:4e:3f:cb:00:38:22:9d:c3:ea:ab:
1a:2d:ae:cc:c3:c0:71:27:f0:42:ba:3b:74:f3:1c:fa:03:22:
85:60:f9:37:54:62:00:5b:36:2c:2c:69:9e:de:cf:fe:a2:ab:
49:40:0c:90:e8:df:14:0a:83:df:0a:3b:56:96:b0:92:fc:c9:
3e:e3:ce:94:31:09:73:cb:d3:95:31:23:c0:27:75:02:68:85:
a0:e9:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:32 2026 by rpki-client