
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3139322e302f31392d3234203d3e203338333635.roa
File: 3130362e31332e3139322e302f31392d3234203d3e203338333635.roa (raw, json)
Hash identifier: +2vUuPzDoW3FQaGr5Xe+Twtj+brfngezWskGzaEHMPo=
Subject key identifier: 0B:D1:B9:BC:2B:35:87:9C:9E:96:DA:45:5F:62:6F:8C:99:64:3D:9A
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 20A6431CD7A868F5C2F673CF2327F39E1C777427
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3139322e302f31392d3234203d3e203338333635.roa
Signing time: Fri 10 Apr 2026 00:26:33 +0000
ROA not before: Fri 10 Apr 2026 00:21:33 +0000
ROA not after: Fri 09 Apr 2027 00:26:33 +0000
asID: 38365
IP address blocks: 106.13.192.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:a6:43:1c:d7:a8:68:f5:c2:f6:73:cf:23:27:f3:9e:1c:77:74:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 10 00:21:33 2026 GMT
Not After : Apr 9 00:26:33 2027 GMT
Subject: CN=0BD1B9BC2B35879C9E96DA455F626F8C99643D9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:db:47:75:52:c9:41:cb:46:08:5a:82:80:
9a:51:17:15:51:dc:ed:79:da:ad:4f:f0:73:1c:80:
ed:64:11:c0:20:98:fc:a4:fc:73:98:fc:5e:20:bc:
2b:fe:97:db:61:56:46:5c:89:c9:53:dc:c3:8c:23:
a8:79:f9:d4:13:fc:7b:2b:2a:9b:4e:20:da:bb:92:
2c:51:96:8d:bb:2b:9b:4e:5e:c9:3d:2c:10:92:ae:
8b:fd:86:15:54:4b:07:4f:af:68:c8:83:4f:90:af:
99:bf:06:44:b1:80:9d:88:02:3c:fe:91:49:0f:0f:
85:3a:4f:6b:e3:1c:28:1c:1b:46:a3:84:c6:e5:e6:
02:d3:9b:55:ed:17:5f:30:68:71:8e:12:b8:b3:2d:
db:8c:40:80:02:ea:ad:70:af:31:ee:27:b0:93:f5:
e6:8e:6b:c6:b1:63:fd:af:70:b2:f6:f3:b2:a7:8c:
74:a3:2a:10:de:8c:68:72:eb:8d:40:6f:32:f9:c8:
0f:0a:b6:98:43:dc:66:1c:07:1c:92:be:dd:a4:d5:
4b:13:05:4a:b3:ae:55:ae:22:35:f9:c6:ba:78:85:
25:55:2c:eb:93:99:12:e2:7f:2d:1d:57:0d:9b:d9:
0b:ce:6e:bc:bf:35:2e:7c:b2:70:ac:6a:77:c1:0f:
ce:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D1:B9:BC:2B:35:87:9C:9E:96:DA:45:5F:62:6F:8C:99:64:3D:9A
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3139322e302f31392d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.13.192.0/19
Signature Algorithm: sha256WithRSAEncryption
80:8d:a1:fb:11:78:df:83:4c:0e:c0:78:cc:5e:8b:ba:e5:ea:
27:52:5f:6c:34:9b:10:47:b1:99:21:f5:58:61:12:30:2f:70:
7d:b2:0b:9e:d1:1e:cb:f2:a8:14:b7:c7:48:a5:ee:30:0e:d1:
48:45:07:da:83:cb:61:52:39:e4:53:85:d7:f2:3f:ad:d2:dd:
51:0e:ca:8e:d1:10:c2:f2:33:c4:6d:18:17:fd:15:9f:53:7f:
6a:f4:56:15:4f:2c:c8:ac:66:1d:25:47:ef:19:08:a2:00:08:
32:f9:f4:08:42:37:c4:3d:e4:55:eb:c2:0d:97:ea:38:7e:a7:
73:59:d9:e7:8d:11:72:a0:7b:cc:22:95:f3:85:75:c7:34:0d:
f1:32:95:82:c5:e8:89:68:0d:f1:7f:66:54:a1:57:92:7e:d3:
66:1d:cb:9e:e1:85:b4:c4:ba:6e:d2:31:b9:e2:e5:75:9a:04:
7c:2d:00:e1:51:71:6d:45:c3:6d:05:54:c7:95:76:f8:44:7c:
77:a8:46:eb:fb:1e:62:18:eb:1a:07:eb:87:76:b6:31:6c:8c:
98:ae:90:f5:ac:fc:80:01:21:5a:05:f7:4c:66:ae:a4:a5:5c:
c6:ea:fb:c6:be:d0:66:8c:de:0d:83:c0:12:23:cf:34:33:7a:
55:74:e4:2c
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUIKZDHNeoaPXC9nPPIyfznhx3dCcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MTAwMDIxMzNaFw0yNzA0MDkwMDI2MzNaMDMxMTAvBgNV
BAMTKDBCRDFCOUJDMkIzNTg3OUM5RTk2REE0NTVGNjI2RjhDOTk2NDNEOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZa9tHdVLJQctGCFqCgJpRFxVR
3O152q1P8HMcgO1kEcAgmPyk/HOY/F4gvCv+l9thVkZciclT3MOMI6h5+dQT/Hsr
KptOINq7kixRlo27K5tOXsk9LBCSrov9hhVUSwdPr2jIg0+Qr5m/BkSxgJ2IAjz+
kUkPD4U6T2vjHCgcG0ajhMbl5gLTm1XtF18waHGOErizLduMQIAC6q1wrzHuJ7CT
9eaOa8axY/2vcLL287KnjHSjKhDejGhy641AbzL5yA8KtphD3GYcBxySvt2k1UsT
BUqzrlWuIjX5xrp4hSVVLOuTmRLify0dVw2b2QvObry/NS58snCsanfBD87TAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUC9G5vCs1h5yeltpFX2JvjJlkPZowHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzAzNjJlMzEz
MzJlMzEzOTMyMmUzMDJmMzEzOTJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBWoNwDANBgkqhkiG9w0BAQsFAAOCAQEAgI2h+xF434NMDsB4zF6LuuXq
J1JfbDSbEEexmSH1WGESMC9wfbILntEey/KoFLfHSKXuMA7RSEUH2oPLYVI55FOF
1/I/rdLdUQ7KjtEQwvIzxG0YF/0Vn1N/avRWFU8syKxmHSVH7xkIogAIMvn0CEI3
xD3kVevCDZfqOH6nc1nZ540RcqB7zCKV84V1xzQN8TKVgsXoiWgN8X9mVKFXkn7T
Zh3LnuGFtMS6btIxueLldZoEfC0A4VFxbUXDbQVUx5V2+ER8d6hG6/seYhjrGgfr
h3a2MWyMmK6Q9az8gAEhWgX3TGaupKVcxur7xr7QZozeDYPAEiPPNDN6VXTkLA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:58 2026 by rpki-client