
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e3132382e302f32322d3232203d3e203536323832.roa
File: 3136332e35332e3132382e302f32322d3232203d3e203536323832.roa (raw, json)
Hash identifier: UMx7ZS0sRa8XrnOvFBjYkhBKOvStHG3fWyJfYxFmxO4=
Subject key identifier: 93:19:18:D9:9C:85:FB:A7:63:C4:CA:52:45:CC:E1:EE:72:5A:7D:97
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 3B77B9AC3227C545F668B88B8C10FA46E9135FB5
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e3132382e302f32322d3232203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:50:48 +0000
ROA not before: Tue 09 Jun 2026 06:45:48 +0000
ROA not after: Tue 08 Jun 2027 06:50:48 +0000
asID: 56282
IP address blocks: 163.53.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:77:b9:ac:32:27:c5:45:f6:68:b8:8b:8c:10:fa:46:e9:13:5f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:45:48 2026 GMT
Not After : Jun 8 06:50:48 2027 GMT
Subject: CN=931918D99C85FBA763C4CA5245CCE1EE725A7D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:d1:b1:31:fb:3b:34:15:4a:70:1d:4c:fa:
30:6f:ce:e5:f0:e3:a9:5f:1f:3b:5d:83:d1:e5:23:
5e:db:38:c3:f7:c5:59:99:0b:ac:b4:58:3a:bb:b1:
46:84:cd:7d:50:91:4e:93:28:cf:0a:a9:03:ce:ac:
d3:bf:3f:76:39:55:4e:7a:bc:76:91:24:57:e3:1f:
45:e8:51:d0:73:07:36:f6:2a:9d:83:45:63:c4:8a:
39:07:6f:dd:3c:cf:8a:36:a8:58:5f:ac:c7:c9:97:
a4:77:20:cf:18:3c:5b:5e:05:7b:5c:18:c9:90:34:
e2:f5:d8:f1:51:22:00:2f:29:cf:00:9e:69:98:5b:
db:9e:61:b2:95:03:3a:fd:e4:46:45:67:be:fb:ee:
91:1f:87:19:cf:4c:ad:22:03:e1:2d:08:43:86:32:
8e:c5:3c:a8:50:a8:0c:4d:e2:6b:34:dd:58:89:c6:
93:31:72:48:c5:a6:fb:d9:54:47:39:ae:bb:f6:d6:
3a:92:33:72:17:e8:39:2c:d7:3e:a6:6a:c9:c2:27:
66:ed:57:18:69:91:6b:2b:c3:79:66:6b:f4:0b:ab:
b6:e1:74:63:d4:e9:a4:04:11:b7:f2:9b:be:c4:5b:
c2:5b:11:be:04:10:64:02:b1:18:99:cc:09:7d:b7:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:19:18:D9:9C:85:FB:A7:63:C4:CA:52:45:CC:E1:EE:72:5A:7D:97
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e35332e3132382e302f32322d3232203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.53.128.0/22
Signature Algorithm: sha256WithRSAEncryption
49:99:ce:80:39:a4:a7:73:f0:db:83:94:9d:96:67:26:5c:ce:
9e:5d:d9:7a:1e:bf:2e:3e:41:34:24:b2:fa:87:bc:af:b0:ec:
9a:2e:d4:19:0c:c6:c1:b2:dc:8a:79:77:bd:2b:27:13:45:67:
e3:41:16:77:35:96:42:eb:14:4b:2a:4d:e1:9c:4b:1c:5b:11:
69:24:97:9a:40:ef:c1:32:57:5f:72:43:d7:f5:b7:95:82:72:
4b:f9:ad:37:fe:de:b2:55:82:64:7f:87:83:6b:93:37:99:f2:
f8:97:eb:b6:15:07:13:b8:61:ba:af:7c:8d:07:17:dc:ca:06:
29:3f:4f:62:7d:6d:6d:3c:18:ef:05:a9:8c:5c:b8:10:51:88:
5d:1a:25:34:a0:0f:4c:5b:91:aa:7d:0c:46:b4:dd:43:19:9d:
8c:f5:77:08:cb:07:2e:59:c0:89:1a:0a:e4:3a:2e:d0:ec:72:
8d:70:d8:44:e2:8b:99:a2:b4:07:37:c1:a2:93:18:cc:19:8f:
ab:12:e5:c5:a3:02:85:ed:51:e7:5a:c0:dd:ab:77:af:33:a0:
c3:67:c3:ae:da:55:05:69:bb:5a:88:47:e9:09:e5:94:e3:19:
cc:42:19:5e:27:81:c3:43:72:d4:94:45:42:7e:86:6b:3e:7c:
46:7c:98:ef
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUO3e5rDInxUX2aLiLjBD6RukTX7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJD
QUYyQkRFODAeFw0yNjA2MDkwNjQ1NDhaFw0yNzA2MDgwNjUwNDhaMDMxMTAvBgNV
BAMTKDkzMTkxOEQ5OUM4NUZCQTc2M0M0Q0E1MjQ1Q0NFMUVFNzI1QTdEOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7HtGxMfs7NBVKcB1M+jBvzuXw
46lfHztdg9HlI17bOMP3xVmZC6y0WDq7sUaEzX1QkU6TKM8KqQPOrNO/P3Y5VU56
vHaRJFfjH0XoUdBzBzb2Kp2DRWPEijkHb908z4o2qFhfrMfJl6R3IM8YPFteBXtc
GMmQNOL12PFRIgAvKc8AnmmYW9ueYbKVAzr95EZFZ7777pEfhxnPTK0iA+EtCEOG
Mo7FPKhQqAxN4ms03ViJxpMxckjFpvvZVEc5rrv21jqSM3IX6Dks1z6masnCJ2bt
VxhpkWsrw3lma/QLq7bhdGPU6aQEEbfym77EW8JbEb4EEGQCsRiZzAl9tyULAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUkxkY2ZyF+6djxMpSRczh7nJafZcwHwYDVR0j
BBgwFoAUrzgiunpYUNoGmTvyLZkLK8ryvegwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzY2ODQ4MS8wL0FGMzgyMkJBN0E1ODUwREEwNjk5M0JGMjJEOTkw
QjJCQ0FGMkJERTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUYzODIyQkE3QTU4NTBEQTA2OTkzQkYyMkQ5OTBCMkJDQUYyQkRFOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzY2ODQ4MS8wLzMxMzYzMzJlMzUz
MzJlMzEzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzNjMyMzgzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAqM1gDANBgkqhkiG9w0BAQsFAAOCAQEASZnOgDmkp3Pw24OUnZZnJlzO
nl3Zeh6/Lj5BNCSy+oe8r7Dsmi7UGQzGwbLcinl3vSsnE0Vn40EWdzWWQusUSypN
4ZxLHFsRaSSXmkDvwTJXX3JD1/W3lYJyS/mtN/7eslWCZH+Hg2uTN5ny+JfrthUH
E7hhuq98jQcX3MoGKT9PYn1tbTwY7wWpjFy4EFGIXRolNKAPTFuRqn0MRrTdQxmd
jPV3CMsHLlnAiRoK5Dou0OxyjXDYROKLmaK0BzfBopMYzBmPqxLlxaMChe1R51rA
3at3rzOgw2fDrtpVBWm7WohH6QnllOMZzEIZXieBw0Ny1JRFQn6Gaz58RnyY7w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:23 2026 by rpki-client