
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa
File: 36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa (raw, json)
Hash identifier: /uf0g79WaYYKp8U6K7QwR/TfIar6CyVBAf2iICVpTWY=
Subject key identifier: FE:A1:8E:05:CB:5E:34:AC:87:40:99:17:5B:79:C2:4D:FB:87:F3:79
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 38FA575AE7B641B720B4749A7236693E968D8837
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa
Signing time: Tue 03 Mar 2026 08:54:28 +0000
ROA not before: Tue 03 Mar 2026 08:49:28 +0000
ROA not after: Tue 02 Mar 2027 08:54:28 +0000
asID: 135629
IP address blocks: 69.230.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 13 Mar 2026 07:57:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:fa:57:5a:e7:b6:41:b7:20:b4:74:9a:72:36:69:3e:96:8d:88:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Mar 3 08:49:28 2026 GMT
Not After : Mar 2 08:54:28 2027 GMT
Subject: CN=FEA18E05CB5E34AC874099175B79C24DFB87F379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:af:da:05:d0:8d:a9:13:d0:7b:16:d3:cb:
36:a6:c6:8e:c9:e9:7a:6b:78:54:e6:f1:1f:d1:5a:
f3:72:68:f4:c4:e0:5b:8a:ac:3b:1f:b2:f2:ce:6f:
29:93:df:55:60:76:f1:c1:96:b6:44:e6:9e:d6:9f:
5d:e0:8b:d8:78:92:b0:d8:3d:80:35:ac:81:25:71:
ed:2c:d8:9a:17:76:f2:18:32:f7:54:43:e3:bb:17:
78:39:74:ac:96:66:82:55:a5:43:34:9c:d8:8e:ba:
4a:3a:5b:f7:e8:52:e5:c7:87:08:b2:20:ba:04:cb:
53:0c:bb:3e:5f:a6:66:d5:07:6e:fe:e2:87:fd:f8:
c1:d0:b9:65:34:31:f9:b1:55:43:a7:77:a3:6d:1d:
95:8b:7f:d2:15:1b:09:96:35:84:3d:b3:f3:93:5b:
75:8b:08:f9:14:3d:c4:29:f3:b7:a4:9d:95:12:13:
03:8d:17:a3:59:80:a1:45:c0:07:82:a3:5c:4e:38:
61:7f:c3:e7:29:71:d1:d2:7b:6e:93:7d:0f:c0:bb:
ea:3e:b8:02:6f:8c:fd:f8:62:0c:cf:07:db:10:71:
3e:6a:72:37:93:f9:29:3f:86:cd:fc:7f:2e:cb:4b:
f8:c7:16:fd:d1:e9:37:6e:b1:8c:eb:5d:4e:6b:12:
5b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:A1:8E:05:CB:5E:34:AC:87:40:99:17:5B:79:C2:4D:FB:87:F3:79
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233302e3139322e302f31382d3234203d3e20313335363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.230.192.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:19:1f:33:b6:1a:d8:ce:d7:06:cb:e3:6e:c1:1a:9a:93:10:
18:ba:53:58:ca:6a:a5:c4:f3:ab:79:a3:1b:3b:31:5d:11:b5:
57:2e:de:76:5b:0d:3c:ee:c2:84:19:1c:e3:ac:16:48:1a:8c:
b6:6c:bc:92:8d:41:21:54:7d:51:45:25:e1:a7:59:17:5f:fc:
c3:7e:fe:d0:a6:bb:a7:d2:bb:7d:80:d7:50:35:b6:02:b1:64:
18:88:c6:78:e1:8b:5e:3b:84:4c:e5:03:6c:42:b0:c6:d9:b8:
69:b7:02:0c:66:79:49:e4:8c:0b:f2:54:36:01:c5:2f:9c:13:
78:13:8f:dc:00:0b:ab:93:94:b7:30:3f:8b:ad:fd:06:6e:b3:
3f:c7:66:f1:67:0c:65:0b:bb:67:b3:62:39:9e:de:15:03:48:
26:6c:2a:05:0d:4f:17:80:db:0d:09:a7:dd:8c:bf:94:56:7c:
82:fa:ba:96:a9:56:7e:27:d1:5f:b8:e8:6c:30:e2:fb:f7:d8:
76:96:8a:47:81:1c:af:7f:07:4d:4b:8b:1c:da:9a:62:63:69:
bb:b9:9c:51:97:29:9b:49:59:0e:bb:48:6a:1d:8b:c2:93:5f:
11:ce:81:48:52:3c:d2:ae:ba:35:25:29:a2:7f:5c:ca:ae:3b:
bd:be:56:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 16:45:44 2026 by rpki-client