
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203535393838.roa
File: 3133392e3232302e3139322e302f31382d3234203d3e203535393838.roa (raw, json)
Hash identifier: oSLM0UEWi8J3WYW3KL7E83D0XovMgE5hbPIMNGhSehA=
Subject key identifier: 98:D1:C6:50:C2:D1:2B:9D:2D:6C:60:9A:60:B0:FB:25:D0:B3:50:FF
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 766DFA2E1E5B00EE507DD055C1FE8DC852CFA87D
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203535393838.roa
Signing time: Wed 02 Sep 2026 03:55:20 +0000
ROA not before: Wed 02 Sep 2026 03:50:20 +0000
ROA not after: Wed 01 Sep 2027 03:55:20 +0000
asID: 55988
IP address blocks: 139.220.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 10:41:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:6d:fa:2e:1e:5b:00:ee:50:7d:d0:55:c1:fe:8d:c8:52:cf:a8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Sep 2 03:50:20 2026 GMT
Not After : Sep 1 03:55:20 2027 GMT
Subject: CN=98D1C650C2D12B9D2D6C609A60B0FB25D0B350FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f9:fa:04:f6:a4:4b:cb:59:86:b2:b8:da:dc:
fb:8e:1c:51:21:15:da:5a:4d:fd:bd:01:60:93:85:
1d:16:01:5e:9e:a1:8b:a4:5a:c7:8b:23:e2:02:8d:
6a:6e:27:0c:e4:96:66:08:86:4e:7c:0d:b3:91:8f:
9a:c6:a2:5a:05:0f:01:8c:17:d5:f7:31:ab:0b:8b:
b6:11:23:14:a6:bb:c3:1e:18:5a:bd:dd:ed:80:75:
1b:69:41:1f:ba:00:e5:b3:31:47:87:23:04:4b:9d:
7e:99:61:a5:de:81:54:24:f6:b0:6a:bf:5a:b5:f8:
7c:85:e5:40:8f:d6:ee:25:e2:eb:0d:ec:da:04:dc:
e2:85:11:d1:57:35:64:37:4a:f9:63:77:98:c1:8d:
17:4b:6e:97:cc:95:aa:8b:bb:d2:d1:8c:6f:be:fc:
55:d1:d3:15:db:2b:81:6f:53:45:bb:35:b9:bb:3b:
42:e7:4c:ca:03:17:f1:cf:db:3a:bf:45:5b:0d:5d:
82:29:08:c4:95:95:23:8d:4a:61:95:2c:eb:5f:cd:
d2:c8:64:e8:37:18:79:02:c9:6f:d8:43:a2:18:c1:
ba:8b:13:2a:0c:35:c1:fb:d8:71:6d:7a:91:45:a3:
63:39:6e:86:6c:28:23:3c:e7:a8:0a:eb:84:a5:05:
3c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:D1:C6:50:C2:D1:2B:9D:2D:6C:60:9A:60:B0:FB:25:D0:B3:50:FF
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f31382d3234203d3e203535393838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/18
Signature Algorithm: sha256WithRSAEncryption
54:ea:1f:03:bf:2e:fd:77:8a:6a:1a:cb:36:08:b9:7c:cb:1a:
74:1a:77:31:b9:32:22:fb:b1:cb:23:b8:95:a8:99:1b:13:5d:
7e:f9:ca:dd:84:c4:c1:14:06:8f:8f:eb:c5:11:8e:a1:2b:80:
91:da:f7:57:79:ee:c0:fa:54:b0:30:bc:63:57:20:1a:39:0c:
54:50:5a:0b:3a:8a:ca:89:5d:26:a7:80:38:1e:a0:b2:26:a2:
20:78:7e:a7:04:f0:85:55:fa:2f:36:85:05:72:03:a0:58:c9:
9e:2c:cc:84:1c:ba:13:e4:4e:22:4f:12:8c:de:fb:6a:f6:60:
35:19:28:8c:ac:1a:f8:48:64:ac:86:a2:1d:9b:bd:f9:d6:aa:
29:f3:9b:f2:a7:9a:b4:4a:6a:3b:95:33:47:1b:2d:bf:a1:57:
df:87:14:2c:d6:43:68:81:13:54:a1:8f:64:29:22:71:69:fa:
52:0b:85:26:c3:ee:55:51:c6:67:fb:bb:81:2b:a1:46:d0:f5:
ab:70:7d:d4:7b:fe:c8:27:7a:fc:dc:bf:a9:76:5e:1c:ce:1c:
f4:fc:8c:b3:0d:30:2e:1c:ac:61:13:db:42:89:7b:83:f1:15:
36:5c:0e:5b:70:12:cb:3f:8e:7a:00:8f:1d:3c:5b:3e:83:5c:
4f:eb:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 07:14:31 2026 by rpki-client