
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3132382e302f31382d3234203d3e203338333635.roa
File: 3130362e31322e3132382e302f31382d3234203d3e203338333635.roa (raw, json)
Hash identifier: gdnQ0MhAkG0eruJ4SOaUDbCl7vAmKhBWTrsRqhElqTE=
Subject key identifier: DA:F2:24:4E:A8:76:B0:C7:C8:F3:8E:5A:FB:83:94:84:E0:B4:B2:30
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 091E7AA22B6A851BC5DA2D14DD4E7A30B57C809C
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3132382e302f31382d3234203d3e203338333635.roa
Signing time: Thu 09 Apr 2026 15:37:31 +0000
ROA not before: Thu 09 Apr 2026 15:32:31 +0000
ROA not after: Thu 08 Apr 2027 15:37:31 +0000
asID: 38365
IP address blocks: 106.12.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1e:7a:a2:2b:6a:85:1b:c5:da:2d:14:dd:4e:7a:30:b5:7c:80:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 9 15:32:31 2026 GMT
Not After : Apr 8 15:37:31 2027 GMT
Subject: CN=DAF2244EA876B0C7C8F38E5AFB839484E0B4B230
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:64:f8:98:9f:29:e3:c9:d0:b8:49:59:c8:e4:
02:13:6c:4a:50:fc:79:0d:df:85:c5:6d:db:ac:6c:
00:f7:b5:5c:ab:c5:1c:c7:30:3f:c4:c0:08:c9:9d:
8a:e9:87:91:f6:3b:24:42:18:35:00:d6:77:e7:87:
86:32:49:e6:91:14:b2:c0:60:6e:64:e1:6a:4c:1b:
63:b8:48:40:ce:6c:45:87:e9:78:0e:72:8c:3b:fb:
0b:11:b5:8a:c3:d4:8b:2d:b5:ad:a7:06:8e:00:fc:
ea:01:fc:b5:3e:80:e6:4f:db:ca:98:01:c6:d0:48:
cd:5b:5e:22:5c:e0:f8:b0:e5:38:bd:9b:aa:ee:fa:
be:a2:e8:a6:cc:91:47:11:b6:ab:8d:31:d6:4f:d3:
57:eb:0c:c0:2a:52:8d:e0:11:18:b5:b5:9f:4f:c2:
ed:6e:5e:4d:ca:4a:65:63:28:c9:69:d9:fa:fc:23:
34:64:e4:84:1b:d1:c9:50:58:ff:5a:19:69:91:a7:
97:df:eb:ac:ed:8b:3b:61:60:40:ac:c8:40:be:64:
2f:70:5a:88:87:e4:78:f0:e9:5e:8d:6f:c0:0f:22:
73:56:eb:36:0b:a7:13:e2:1a:18:3f:d7:1a:7b:ec:
9a:1c:0f:5f:f3:51:65:75:83:0a:1f:2f:f0:50:3d:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F2:24:4E:A8:76:B0:C7:C8:F3:8E:5A:FB:83:94:84:E0:B4:B2:30
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31322e3132382e302f31382d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.12.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7c:81:a9:f0:7b:e5:51:b5:21:82:cb:08:70:29:f0:f5:fe:30:
f7:55:5b:a4:d0:b3:7e:ed:b8:90:c4:5b:89:64:b2:0b:7f:1d:
14:2a:01:3b:b4:98:93:cb:39:8d:94:bc:c5:65:e3:06:8f:23:
72:e1:82:db:b8:35:b9:5a:ef:99:9d:3a:5e:e8:3c:a2:a4:99:
32:7a:da:44:75:ea:7c:80:0d:1b:de:a1:07:06:56:de:ce:b0:
78:5c:d4:2b:03:58:94:ef:7d:08:9e:53:86:e3:ad:68:8f:f3:
db:72:10:8e:0e:cb:24:02:eb:56:69:92:7a:09:6b:b1:ba:f5:
f9:84:e1:14:d7:2c:4c:28:f1:8e:09:51:d9:cf:56:4c:3d:bf:
f8:0d:5e:43:f9:70:b8:6c:a4:8c:b2:a2:8f:cc:ac:5c:74:fa:
c6:4a:0d:0a:c0:9f:5b:8a:5f:a6:53:c2:bc:a7:5f:f8:5b:6b:
81:1e:f2:c2:24:2f:3d:e8:9f:0f:de:38:db:20:87:df:47:34:
26:b1:ef:fb:ec:68:fd:87:68:7e:36:4e:f7:81:a8:fe:87:23:
2a:a3:ee:de:4d:57:7a:34:1e:ce:3a:eb:55:12:d3:c4:a7:40:
6e:ab:b6:70:19:88:f5:bd:4f:74:7a:fa:c9:f9:6b:f0:ef:78:
23:3c:24:58
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUCR56oitqhRvF2i0U3U56MLV8gJwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MDkxNTMyMzFaFw0yNzA0MDgxNTM3MzFaMDMxMTAvBgNV
BAMTKERBRjIyNDRFQTg3NkIwQzdDOEYzOEU1QUZCODM5NDg0RTBCNEIyMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoZPiYnynjydC4SVnI5AITbEpQ
/HkN34XFbdusbAD3tVyrxRzHMD/EwAjJnYrph5H2OyRCGDUA1nfnh4YySeaRFLLA
YG5k4WpMG2O4SEDObEWH6XgOcow7+wsRtYrD1Istta2nBo4A/OoB/LU+gOZP28qY
AcbQSM1bXiJc4Piw5Ti9m6ru+r6i6KbMkUcRtquNMdZP01frDMAqUo3gERi1tZ9P
wu1uXk3KSmVjKMlp2fr8IzRk5IQb0clQWP9aGWmRp5ff66ztizthYECsyEC+ZC9w
WoiH5Hjw6V6Nb8APInNW6zYLpxPiGhg/1xp77JocD1/zUWV1gwofL/BQPdcVAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU2vIkTqh2sMfI845a+4OUhOC0sjAwHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzAzNjJlMzEz
MjJlMzEzMjM4MmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBmoMgDANBgkqhkiG9w0BAQsFAAOCAQEAfIGp8HvlUbUhgssIcCnw9f4w
91VbpNCzfu24kMRbiWSyC38dFCoBO7SYk8s5jZS8xWXjBo8jcuGC27g1uVrvmZ06
Xug8oqSZMnraRHXqfIANG96hBwZW3s6weFzUKwNYlO99CJ5ThuOtaI/z23IQjg7L
JALrVmmSeglrsbr1+YThFNcsTCjxjglR2c9WTD2/+A1eQ/lwuGykjLKij8ysXHT6
xkoNCsCfW4pfplPCvKdf+FtrgR7ywiQvPeifD9442yCH30c0JrHv++xo/YdofjZO
94Go/ocjKqPu3k1XejQezjrrVRLTxKdAbqu2cBmI9b1PdHr6yflr8O94IzwkWA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:57 2026 by rpki-client