
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e302e302f31392d3139203d3e2030.roa
File: 3131362e36362e302e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier: f2cz2JzSUuLpJdbOQ1lpXQ6pQJh4CE9buuubTfFQl5o=
Subject key identifier: 1A:72:D0:B5:88:AA:12:84:23:DD:0A:1E:A6:49:8D:1E:DD:BC:F8:7D
Certificate issuer: /CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Certificate serial: 4DE5161A4F923D554B5A7C3154221569E9EEA5BC
Authority key identifier: AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e302e302f31392d3139203d3e2030.roa
Signing time: Wed 22 Apr 2026 07:51:41 +0000
ROA not before: Wed 22 Apr 2026 07:46:41 +0000
ROA not after: Wed 21 Apr 2027 07:51:41 +0000
asID: 0
IP address blocks: 116.66.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 27 Apr 2026 23:41:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:e5:16:1a:4f:92:3d:55:4b:5a:7c:31:54:22:15:69:e9:ee:a5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A
Validity
Not Before: Apr 22 07:46:41 2026 GMT
Not After : Apr 21 07:51:41 2027 GMT
Subject: CN=1A72D0B588AA128423DD0A1EA6498D1EDDBCF87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:aa:0e:1d:54:28:77:f2:bf:7d:31:ec:f1:f6:
0b:48:81:cf:a9:79:fe:0d:4b:fe:cf:9d:f7:25:a5:
b0:7f:3f:e6:b8:dc:72:17:56:c9:d4:99:df:8e:10:
7c:61:c5:ea:d4:9e:e5:f7:be:05:fa:8d:de:0b:b2:
ee:c4:4d:10:7c:be:b0:76:7a:cd:cf:7c:a5:cc:4d:
1e:52:f5:d9:48:8e:59:a3:86:e7:60:8d:8d:f2:be:
1f:85:cf:2f:43:7e:99:7c:2d:a1:e4:bf:20:39:d9:
5c:0b:d0:a3:a7:c3:93:db:21:e5:0c:77:18:78:3c:
0f:e7:4e:38:2b:cc:3a:f6:96:b5:b2:91:ec:32:6b:
cb:ff:2c:cd:b2:68:f2:91:fe:de:b2:77:c6:e2:a4:
3c:ce:0e:7e:b5:0a:7e:91:da:57:99:9b:14:83:8e:
33:f8:b3:a5:4f:37:67:ba:84:0a:1b:67:77:62:3f:
93:86:41:ab:15:70:86:4a:ed:e3:53:44:c7:d6:5b:
fc:5e:de:8b:d4:7d:0d:22:64:6e:66:46:67:8a:4d:
1c:35:a6:c6:fa:0d:96:25:23:9a:a8:e1:79:86:7d:
8b:b9:e3:24:4a:bf:3b:58:f1:25:84:bf:d9:f8:a5:
df:15:58:8f:22:17:c8:6f:e9:a0:26:68:61:05:7e:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:72:D0:B5:88:AA:12:84:23:DD:0A:1E:A6:49:8D:1E:DD:BC:F8:7D
X509v3 Authority Key Identifier:
keyid:AE:B6:14:C2:4F:FC:2A:6B:E0:E2:DB:1C:7A:3E:0A:AF:64:1E:6A:8A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AEB614C24FFC2A6BE0E2DB1C7A3E0AAF641E6A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099192552394850307/0/3131362e36362e302e302f31392d3139203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.66.0.0/19
Signature Algorithm: sha256WithRSAEncryption
c6:bf:6d:c6:e8:8a:40:02:f1:f2:9c:e0:a9:f5:d9:ed:99:81:
47:4a:90:de:42:47:28:c8:7c:6f:bc:76:34:e9:b4:d3:8f:c9:
cd:62:0f:f2:78:01:1f:21:81:c8:ee:78:40:8f:8a:aa:7a:30:
73:fa:24:7b:dd:ad:4e:a3:4f:a7:c8:4d:80:6f:71:4a:b0:00:
c1:72:0d:fc:2d:92:4c:7a:f3:1d:54:40:b4:29:94:d4:08:3a:
ae:b4:81:7b:3a:0a:d6:30:46:98:6b:46:1f:2e:e3:75:0c:ab:
f8:72:bd:49:86:39:7c:7d:33:5f:a6:c9:69:9e:4e:a2:56:1a:
fa:f7:d2:6b:c7:bd:d9:e9:96:9b:cb:0a:6d:7f:24:fb:6c:78:
a8:03:37:09:7e:05:cf:9a:67:8c:44:c1:86:82:6d:76:0a:16:
18:80:1b:4c:87:1e:b6:ee:8c:a9:34:1b:f3:55:5b:7f:78:3c:
2a:dc:8e:07:c1:bd:be:3c:e9:e8:6f:bc:6c:e3:eb:74:00:d6:
c0:56:d8:73:86:42:04:60:5b:23:22:21:df:3b:c5:49:8b:d4:
8f:e9:40:25:d8:88:25:a0:af:8f:90:8a:f8:85:ef:8b:4f:33:
0d:4c:14:19:b1:b5:cb:aa:73:40:e3:53:43:65:13:73:b4:62:
c3:cb:71:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 10:59:26 2026 by rpki-client