
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e2034383038.roa
File: 3133392e3232302e3139322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: djcJh0RK++JtgSK/uMlSq9QTz3Vfnh5cWYr4IKgS824=
Subject key identifier: 40:58:D4:3C:29:B7:F4:28:4C:B9:18:30:46:E3:E3:57:21:07:0B:37
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 527F9BD07EBCC4C153AFF44832266ABE6327B7ED
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e2034383038.roa
Signing time: Fri 24 Apr 2026 05:45:53 +0000
ROA not before: Fri 24 Apr 2026 05:40:53 +0000
ROA not after: Fri 23 Apr 2027 05:45:53 +0000
asID: 4808
IP address blocks: 139.220.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 20:43:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7f:9b:d0:7e:bc:c4:c1:53:af:f4:48:32:26:6a:be:63:27:b7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 24 05:40:53 2026 GMT
Not After : Apr 23 05:45:53 2027 GMT
Subject: CN=4058D43C29B7F4284CB9183046E3E35721070B37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:24:31:61:8c:58:2a:7e:f9:e1:ec:de:81:
ba:db:49:f9:4c:3e:43:23:79:5e:6c:af:b0:af:91:
77:f4:97:bc:b0:aa:c6:ff:5e:93:20:e9:d2:21:61:
53:25:91:16:7a:d9:99:66:98:90:34:f5:49:08:22:
16:da:e1:06:3e:03:dc:95:dd:62:c2:eb:84:96:f1:
f6:b7:82:88:62:dc:56:ce:99:a2:48:a7:40:66:d9:
87:f9:1d:04:a7:2a:23:be:5c:21:cf:99:f3:1e:77:
ce:78:d2:02:d0:26:43:00:e7:f7:5b:7d:aa:f8:02:
1f:e4:fd:cb:4a:a3:65:0d:a8:8e:f9:b3:67:07:81:
d4:e1:c6:04:be:9f:a4:70:ee:d6:2b:49:6d:27:a8:
41:97:6b:ab:2c:9f:d1:12:8b:55:aa:44:97:4e:cf:
c4:ca:71:8d:62:04:f2:42:00:fb:65:6b:0e:2b:d6:
9e:5f:d7:a4:e8:46:d2:8d:2f:ba:d5:ad:e3:1e:a4:
d8:4f:a7:3f:b8:aa:ec:a6:d2:48:33:55:fd:83:00:
70:b0:e5:2b:bd:91:e4:52:ed:ff:c4:56:3f:e5:20:
07:bd:e5:5f:21:91:b4:c0:31:59:83:5e:fd:24:f6:
91:19:75:ca:d7:37:15:41:79:a5:5a:3f:d2:e2:a6:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:D4:3C:29:B7:F4:28:4C:B9:18:30:46:E3:E3:57:21:07:0B:37
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232302e3139322e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.220.192.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:f4:02:8d:ff:5e:76:0c:e7:07:7a:9f:90:fa:84:b6:d5:38:
03:f7:eb:2e:5b:1e:85:49:61:b8:04:94:7d:60:03:29:29:5c:
2e:79:b0:84:b3:5a:cd:6f:e2:f7:0a:e9:2d:a0:59:dc:52:9e:
6a:b9:d2:a7:b7:64:fa:1b:30:58:70:1e:c8:b4:5b:7f:9a:f7:
ec:69:90:b8:c0:35:30:d0:bf:c7:c7:3b:49:95:93:d2:aa:83:
50:b9:b7:90:aa:21:74:2d:20:68:4a:03:6c:d9:2b:b4:cf:78:
a2:35:73:1a:06:7b:8f:70:b4:8d:48:7c:1f:c9:b3:f1:ec:14:
c9:cc:81:32:43:8a:8c:35:a2:46:6a:bb:39:47:1a:51:97:58:
ef:d4:09:22:2b:99:96:5b:90:dd:6f:44:3d:8e:b8:71:d1:a4:
c4:71:8b:60:79:af:8a:05:1b:05:04:d5:0d:86:b3:cd:65:2c:
3f:a6:64:07:23:de:68:b7:40:88:7d:92:e3:e5:5f:44:bd:94:
d8:85:2c:d1:9f:b1:1a:ab:10:d8:f8:89:5a:3d:16:71:a1:e7:
7c:f6:3e:49:97:ac:4c:62:b7:84:f9:3c:54:9a:ce:10:a5:b0:
af:24:75:cc:da:33:57:e8:a9:d9:de:96:66:8a:34:93:93:1b:
41:c5:d6:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 14:18:52 2026 by rpki-client