
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS18207.roa
File: AS18207.roa (raw, json)
Hash identifier: o0AD3eHPCQQvw3txZJzNch2miZhCRQ0lgzH6bHZt+Kg=
Subject key identifier: F0:64:D0:BE:16:84:BA:65:30:A7:BB:54:27:30:21:7D:78:EE:C6:39
Certificate issuer: /CN=18763247046D56AAFB3D6773D049459B01F9D976
Certificate serial: 3976A0E94DD57172A5E2FE835B937A9CEE7F81
Authority key identifier: 18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS18207.roa
Signing time: Tue 19 May 2026 02:36:42 +0000
ROA not before: Tue 19 May 2026 02:31:42 +0000
ROA not after: Tue 18 May 2027 02:36:42 +0000
asID: 18207
IP address blocks: 103.118.216.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 23:23:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:76:a0:e9:4d:d5:71:72:a5:e2:fe:83:5b:93:7a:9c:ee:7f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18763247046D56AAFB3D6773D049459B01F9D976
Validity
Not Before: May 19 02:31:42 2026 GMT
Not After : May 18 02:36:42 2027 GMT
Subject: CN=F064D0BE1684BA6530A7BB542730217D78EEC639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:f6:ae:37:3a:3c:2a:06:e4:fa:bf:87:e8:
23:81:bf:7f:2b:66:49:6a:bf:27:42:db:b5:d0:2d:
a5:10:40:1d:ff:2e:59:4e:0d:55:66:53:57:e2:ad:
ed:b3:a2:5f:0f:38:71:7d:22:ac:9b:23:d1:a1:86:
c4:f2:9c:c4:1c:89:eb:71:25:97:ce:1f:4b:da:e9:
a5:f0:fb:19:f3:c5:d5:55:be:08:7b:62:16:05:84:
a0:7a:b9:c2:d7:ef:e5:77:39:e5:f4:39:9e:af:80:
46:7c:76:1c:b1:e6:cc:27:00:47:80:74:d5:a2:76:
4e:e8:0f:92:98:87:1a:06:4f:ab:d8:7e:d7:26:9a:
cd:69:97:cc:a2:6b:c0:0d:aa:37:14:90:8d:f0:72:
cc:5d:ea:ab:e9:1c:fd:17:17:3e:84:47:13:1f:26:
40:67:ac:3b:f3:33:d1:90:e9:a6:1f:e1:1e:5e:2e:
ee:c7:50:05:24:5b:d2:44:69:84:85:9a:77:84:4e:
ff:9d:1e:a5:54:4d:66:ee:49:7b:6c:ed:c1:d8:75:
da:5a:94:45:75:d9:16:8c:6e:e6:b5:1f:a3:ba:e1:
e5:e9:33:92:a1:3d:fd:44:57:4e:92:40:dc:0d:67:
45:a8:79:f9:65:20:14:20:b8:ff:7c:ea:19:a7:ac:
ff:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:64:D0:BE:16:84:BA:65:30:A7:BB:54:27:30:21:7D:78:EE:C6:39
X509v3 Authority Key Identifier:
keyid:18:76:32:47:04:6D:56:AA:FB:3D:67:73:D0:49:45:9B:01:F9:D9:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/18763247046D56AAFB3D6773D049459B01F9D976.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/18763247046D56AAFB3D6773D049459B01F9D976.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548615682/0/AS18207.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.118.216.0/22
Signature Algorithm: sha256WithRSAEncryption
70:95:99:23:86:ee:45:d5:aa:b3:89:e8:5f:4e:1b:5e:16:69:
44:9b:f7:3d:06:1b:80:f4:af:06:82:53:94:b1:90:21:ba:6d:
61:21:1c:b5:8c:4e:7d:76:f3:be:64:a2:69:61:48:4a:4e:e3:
3a:41:c8:1c:3e:05:fd:c3:8d:83:9f:f2:8a:d2:45:1b:12:4a:
de:f3:69:74:8a:b2:86:72:78:eb:c8:83:b8:53:fd:2f:2d:d3:
6d:e8:52:92:07:b4:03:f6:e6:be:a0:f0:b6:a7:ba:90:b2:be:
cb:f3:a6:a2:38:c1:a6:0d:a8:23:9a:0f:b8:29:c1:d2:31:0c:
2f:7f:f7:e2:db:69:04:ff:ea:f2:ec:3a:4f:09:a6:b3:2b:64:
99:59:0a:a6:5c:a2:94:22:15:e2:12:af:cd:cc:2e:f1:b5:62:
f6:05:82:52:f0:46:ce:ac:26:93:cb:e0:51:c4:6b:45:e6:5b:
38:79:99:fd:c4:a9:05:f0:39:c7:45:cf:fb:d4:e2:9d:d5:17:
75:6f:e7:a3:2e:b3:71:c3:18:85:68:d8:54:1e:86:0f:1e:bd:
4f:e3:56:98:d1:19:9d:a6:12:5e:e0:14:1a:d2:8f:0e:c6:b7:
0b:5f:74:27:04:cc:57:31:4f:44:1a:d8:df:4d:96:e7:4f:bd:
78:dd:b8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:18:31 2026 by rpki-client