
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3232342e302f32302d3234203d3e203338333635.roa
File: 3130362e31332e3232342e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier: n/rBbLEGTTprd8JaCdGxGHvFpdrmU6TZQJrVvWcsvCQ=
Subject key identifier: A6:94:8E:C7:44:3D:55:EB:99:53:63:BC:88:92:34:7A:A7:E2:47:A9
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 020F3D414D1F6ACE93227B07F058F09A04CE29D1
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3232342e302f32302d3234203d3e203338333635.roa
Signing time: Fri 10 Apr 2026 00:26:33 +0000
ROA not before: Fri 10 Apr 2026 00:21:33 +0000
ROA not after: Fri 09 Apr 2027 00:26:33 +0000
asID: 38365
IP address blocks: 106.13.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:0f:3d:41:4d:1f:6a:ce:93:22:7b:07:f0:58:f0:9a:04:ce:29:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 10 00:21:33 2026 GMT
Not After : Apr 9 00:26:33 2027 GMT
Subject: CN=A6948EC7443D55EB995363BC8892347AA7E247A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:2d:64:85:9e:fd:e2:90:7a:77:81:89:08:
41:3c:9f:c4:8c:96:3f:d0:b5:66:1d:af:d3:02:c6:
50:ad:20:ae:4f:39:6b:ba:5e:61:2c:3e:33:68:ff:
80:2f:ff:76:c5:c8:0f:ec:c5:4f:d1:3d:9b:ec:d9:
4f:da:c0:12:d5:5b:5f:a6:bd:f8:ae:3e:60:d3:5d:
b7:1f:d5:2e:dc:c9:fa:54:cb:62:bf:14:c3:dd:8a:
f2:d4:49:f8:6f:9b:f5:78:1d:30:d2:1c:cb:af:96:
3d:4c:98:b1:68:db:c3:73:3d:3e:38:11:be:5c:75:
60:96:68:f4:c1:ed:90:2e:9c:6d:57:ef:90:e1:53:
b9:af:0f:d7:12:68:77:49:f7:6b:0f:8e:65:40:3f:
80:d3:b3:b1:79:55:6b:8e:a7:06:58:1b:f5:e8:e6:
6e:f9:89:5a:3c:5a:28:45:1c:b6:61:43:9a:47:47:
9b:02:01:34:8f:1c:62:54:81:47:fc:68:22:15:60:
7a:36:fc:aa:23:ed:15:0c:fa:d9:a7:e1:d8:7f:71:
69:56:6e:7f:9f:26:2f:52:0f:a2:e1:1b:a5:19:5c:
59:5a:77:55:b7:2c:4e:0e:c3:77:df:96:df:78:4e:
bb:ff:f8:3d:cc:92:df:85:95:61:56:53:64:36:5e:
b6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:94:8E:C7:44:3D:55:EB:99:53:63:BC:88:92:34:7A:A7:E2:47:A9
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3130362e31332e3232342e302f32302d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
106.13.224.0/20
Signature Algorithm: sha256WithRSAEncryption
27:8e:73:58:6b:ec:71:59:27:81:40:98:34:a1:03:23:9b:a5:
02:b1:57:a5:10:86:0a:0e:73:0a:45:43:24:a9:93:42:30:96:
30:b8:88:82:c2:97:23:65:7d:4f:dd:8a:1b:46:ad:b6:bf:62:
46:d4:77:eb:c2:4a:34:de:dc:57:b6:00:0d:9e:d9:54:cb:e4:
3f:a9:9a:24:97:93:d3:64:70:94:65:79:c3:6c:0d:ff:62:fa:
ed:3b:12:6e:ae:75:61:2b:23:2c:35:59:21:ea:f8:49:10:62:
21:71:d6:62:cd:21:07:f9:49:ab:a0:d9:e1:ea:c0:56:28:25:
1e:17:46:7f:bd:f2:4c:0d:27:d6:f4:fc:7e:84:26:9c:3f:04:
02:61:dc:f5:be:76:cc:71:ac:b1:d1:55:c7:60:c7:7f:97:e8:
47:cb:54:65:3d:81:f7:c1:a8:ef:a1:ca:0c:75:2e:f0:79:22:
98:c4:4c:97:8a:b1:7e:90:cf:17:81:e7:da:a6:6d:b8:53:c3:
c8:81:eb:7a:68:19:36:17:70:14:b7:0c:37:80:65:fe:4b:7c:
04:0b:89:25:ff:5d:22:a6:f0:2a:a5:e4:66:26:62:4c:b9:c3:
bf:81:15:f5:6c:52:7f:34:d3:e0:0e:5d:ed:c1:00:7a:5e:47:
ff:11:99:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:51 2026 by rpki-client