
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3131392e37352e3230382e302f32302d3234203d3e203338333635.roa
File: 3131392e37352e3230382e302f32302d3234203d3e203338333635.roa (raw, json)
Hash identifier: 5Gt+w9Y2BBJ/dpKvj3qcIx/ZcMMGVpVHDW13blWMGDs=
Subject key identifier: EB:78:9C:A4:97:AD:D0:59:BB:9A:FA:17:22:35:06:6E:57:68:F1:7A
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 193E92C0FE142F63AB8D0AC5004A6D363C33F534
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3131392e37352e3230382e302f32302d3234203d3e203338333635.roa
Signing time: Thu 09 Apr 2026 14:22:45 +0000
ROA not before: Thu 09 Apr 2026 14:17:45 +0000
ROA not after: Thu 08 Apr 2027 14:22:45 +0000
asID: 38365
IP address blocks: 119.75.208.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:3e:92:c0:fe:14:2f:63:ab:8d:0a:c5:00:4a:6d:36:3c:33:f5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 9 14:17:45 2026 GMT
Not After : Apr 8 14:22:45 2027 GMT
Subject: CN=EB789CA497ADD059BB9AFA172235066E5768F17A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:dd:65:13:6e:ec:dd:72:40:bd:76:47:2c:75:
b4:76:47:b3:33:36:39:10:c1:1a:0a:d3:b2:2f:88:
18:41:56:bf:2e:69:1d:e9:b0:a5:95:72:73:f7:b4:
93:31:a2:e5:4c:43:49:12:6f:3a:5b:81:37:74:1b:
32:03:de:36:27:1b:e2:33:14:99:a3:53:6b:64:68:
a3:00:76:06:39:63:4c:1f:46:42:47:3a:52:33:15:
b6:96:b6:b5:5f:c3:35:e4:2a:ea:72:40:14:f5:cf:
ca:53:18:4c:61:75:df:87:e6:e9:d1:3e:3d:d1:95:
de:b0:2e:04:89:2b:d4:2e:0d:d8:5b:69:79:fa:e4:
b2:91:bf:28:6a:b1:01:24:a7:73:d9:c8:4b:d3:fe:
22:b0:9d:f7:5b:4f:e3:53:b4:9d:ac:51:88:5f:48:
e9:a5:9b:95:62:62:25:49:23:ad:0d:08:44:00:5a:
d7:7a:8d:6c:87:98:2a:c2:1e:d6:1f:9a:1f:7b:40:
2b:e0:ca:93:de:2e:3d:98:96:40:fc:b2:e1:41:c4:
12:9b:57:3d:8d:5c:e9:14:23:e0:63:51:33:45:c6:
4f:98:55:9b:be:73:b9:91:f6:fc:b2:f1:f7:6d:0f:
9c:9e:6b:63:ad:17:12:d0:b1:aa:ca:0e:14:b5:95:
f7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:78:9C:A4:97:AD:D0:59:BB:9A:FA:17:22:35:06:6E:57:68:F1:7A
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3131392e37352e3230382e302f32302d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.75.208.0/20
Signature Algorithm: sha256WithRSAEncryption
0d:4a:19:9d:6b:db:47:9c:fe:42:16:a8:94:a6:c3:46:6e:16:
8e:bd:a5:9d:31:ce:f2:fe:22:76:73:83:6b:f1:32:e0:d4:0a:
e6:d4:d4:94:9d:26:88:0b:a3:34:68:34:80:90:ec:9c:b4:d5:
4e:a4:f3:7d:a1:b8:fb:ec:58:08:5e:78:3e:35:7a:e8:0b:6a:
5a:ab:3a:20:ad:8b:41:cf:8a:d5:34:f2:18:86:67:57:b2:fc:
e1:fc:c3:38:9c:b4:5e:9f:63:99:a2:e0:41:5c:06:a5:ed:66:
69:85:66:ea:ae:87:9c:c5:45:3b:bc:6f:11:e7:2c:31:65:89:
50:b1:4d:c2:47:7d:2b:25:32:e0:58:1f:01:48:1b:29:4c:53:
a4:9e:17:29:c6:14:b4:d3:45:36:83:c0:ee:22:bc:0a:65:8d:
44:fc:eb:df:c6:6b:fd:9e:82:8f:c8:ee:d5:1f:78:44:2f:a1:
f9:0c:12:39:25:20:23:fa:c9:76:20:11:85:13:16:53:6b:7e:
67:a9:c8:05:ed:86:b5:93:93:e9:bd:4e:07:97:04:5a:f3:33:
27:b3:21:99:16:82:f5:ff:cc:59:37:b3:6e:d7:a3:4b:94:8c:
48:98:a8:e8:3a:de:f1:db:01:00:12:49:35:fd:2e:53:87:f9:
13:6b:91:31
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGT6SwP4UL2OrjQrFAEptNjwz9TQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRB
OEVCQTcwRTAeFw0yNjA0MDkxNDE3NDVaFw0yNzA0MDgxNDIyNDVaMDMxMTAvBgNV
BAMTKEVCNzg5Q0E0OTdBREQwNTlCQjlBRkExNzIyMzUwNjZFNTc2OEYxN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv3WUTbuzdckC9dkcsdbR2R7Mz
NjkQwRoK07IviBhBVr8uaR3psKWVcnP3tJMxouVMQ0kSbzpbgTd0GzID3jYnG+Iz
FJmjU2tkaKMAdgY5Y0wfRkJHOlIzFbaWtrVfwzXkKupyQBT1z8pTGExhdd+H5unR
Pj3Rld6wLgSJK9QuDdhbaXn65LKRvyhqsQEkp3PZyEvT/iKwnfdbT+NTtJ2sUYhf
SOmlm5ViYiVJI60NCEQAWtd6jWyHmCrCHtYfmh97QCvgypPeLj2YlkD8suFBxBKb
Vz2NXOkUI+BjUTNFxk+YVZu+c7mR9vyy8fdtD5yea2OtFxLQsarKDhS1lfcVAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU63icpJet0Fm7mvoXIjUGbldo8XowHwYDVR0j
BBgwFoAUoZZyIGqdp99ClTbJv/ralKjrpw4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjExMzkyMi8wL0ExOTY3MjIwNkE5REE3REY0Mjk1MzZDOUJGRkFE
QTk0QThFQkE3MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTE5NjcyMjA2QTlEQTdERjQyOTUzNkM5QkZGQURBOTRBOEVCQTcwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjcyMzM3MjExMzkyMi8wLzMxMzEzOTJlMzcz
NTJlMzIzMDM4MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzODMzMzYzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHdL0DANBgkqhkiG9w0BAQsFAAOCAQEADUoZnWvbR5z+QhaolKbDRm4W
jr2lnTHO8v4idnODa/Ey4NQK5tTUlJ0miAujNGg0gJDsnLTVTqTzfaG4++xYCF54
PjV66AtqWqs6IK2LQc+K1TTyGIZnV7L84fzDOJy0Xp9jmaLgQVwGpe1maYVm6q6H
nMVFO7xvEecsMWWJULFNwkd9KyUy4FgfAUgbKUxTpJ4XKcYUtNNFNoPA7iK8CmWN
RPzr38Zr/Z6Cj8ju1R94RC+h+QwSOSUgI/rJdiARhRMWU2t+Z6nIBe2GtZOT6b1O
B5cEWvMzJ7MhmRaC9f/MWTezbtejS5SMSJio6Dre8dsBABJJNf0uU4f5E2uRMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:49 2026 by rpki-client