
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232312e302e302f31362d3234203d3e2030.roa
File: 3133392e3232312e302e302f31362d3234203d3e2030.roa (raw, json)
Hash identifier: A3/3svz8ZVlEUrpbhDtDBNLSQOnMdWuy39azscZxYW0=
Subject key identifier: 72:47:5D:8A:61:12:A4:CA:87:4E:05:3E:5E:4E:B0:52:6C:96:F6:0B
Certificate issuer: /CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Certificate serial: 6A995BB37AC95998585C43299ABB8085EF390E78
Authority key identifier: 16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232312e302e302f31362d3234203d3e2030.roa
Signing time: Thu 16 Apr 2026 07:16:32 +0000
ROA not before: Thu 16 Apr 2026 07:11:32 +0000
ROA not after: Thu 15 Apr 2027 07:16:32 +0000
asID: 0
IP address blocks: 139.221.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 10:11:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:99:5b:b3:7a:c9:59:98:58:5c:43:29:9a:bb:80:85:ef:39:0e:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16B72C37618BD84AE412DE28AC3254DA737FB3EC
Validity
Not Before: Apr 16 07:11:32 2026 GMT
Not After : Apr 15 07:16:32 2027 GMT
Subject: CN=72475D8A6112A4CA874E053E5E4EB0526C96F60B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:01:15:2f:d7:5e:3a:83:28:5a:2f:07:6e:f8:
73:59:70:1a:e0:63:be:d1:a5:ba:43:35:43:c6:cb:
0b:87:f1:2b:01:16:11:c5:7f:12:dc:00:64:d6:67:
60:6b:4a:75:4c:51:21:a5:41:92:68:fe:8a:5a:3b:
6a:b7:30:62:2d:d1:05:69:fc:e5:ec:29:71:bd:91:
3b:cf:4c:93:2d:06:56:2f:d4:22:a1:9c:c6:b8:95:
29:00:1b:4c:49:cc:66:4d:42:01:b7:a2:1d:16:76:
b3:03:45:01:a5:8f:e2:34:20:e5:95:c7:79:d0:8a:
41:c9:9f:4f:d2:94:6b:20:8e:41:14:f4:2a:5d:16:
52:57:42:b7:21:f3:62:79:ba:1e:18:e6:34:b1:af:
eb:30:5f:76:2d:7a:f8:a0:97:3d:19:b1:16:a1:c4:
61:2c:8d:6c:c3:8b:31:87:9a:95:23:bf:08:d1:46:
76:7a:2a:bc:d4:bd:11:09:41:5b:aa:01:d4:b8:34:
91:8b:77:b0:ea:cc:2b:83:7d:81:41:75:37:20:0b:
ce:cb:68:24:44:c3:2f:14:7b:3c:e2:21:f3:fe:f0:
7f:6c:63:e4:f3:3b:e5:7c:51:bc:28:ac:29:5d:3b:
d8:38:53:91:fe:79:72:29:21:e1:a2:dc:da:64:41:
c4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:47:5D:8A:61:12:A4:CA:87:4E:05:3E:5E:4E:B0:52:6C:96:F6:0B
X509v3 Authority Key Identifier:
keyid:16:B7:2C:37:61:8B:D8:4A:E4:12:DE:28:AC:32:54:DA:73:7F:B3:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/16B72C37618BD84AE412DE28AC3254DA737FB3EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/16B72C37618BD84AE412DE28AC3254DA737FB3EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948271619/1/3133392e3232312e302e302f31362d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.221.0.0/16
Signature Algorithm: sha256WithRSAEncryption
84:09:90:97:d3:c6:8b:2a:4a:74:64:7d:12:71:fc:f9:fd:15:
3d:7c:03:8e:7e:15:9f:3d:45:43:62:28:f1:a7:78:fc:af:4b:
8c:39:75:a4:f4:a7:d1:b8:2a:9f:70:00:8f:91:60:14:1d:d5:
d0:dd:b5:a0:56:88:ac:bc:8e:23:7b:3e:9c:0e:e9:27:92:76:
cb:04:da:f2:c4:52:0f:a7:02:f0:72:06:8c:22:d3:46:9f:88:
e4:09:45:58:cf:7c:54:54:19:a6:0f:62:53:68:de:dd:55:61:
6d:54:e0:7c:b3:ab:e3:48:e7:ce:4e:7d:a5:09:97:e9:0a:10:
69:a3:0d:ed:2c:6c:d7:65:aa:76:4c:24:c8:ef:59:e1:87:d1:
74:d8:52:4c:84:90:72:a4:7d:17:d5:9f:8a:78:50:f4:fc:c5:
70:38:3c:e6:3f:02:e3:f9:eb:fc:48:a0:da:ce:64:b0:15:e7:
46:61:e3:15:04:75:4e:62:5d:5d:ce:ae:25:59:a7:9d:8b:10:
a0:9f:28:20:a5:4a:a0:c4:0d:c8:73:77:ea:ca:d7:21:12:e0:
12:5e:99:5f:09:04:1f:69:d6:36:fd:49:24:97:7d:c1:6b:45:
f6:61:dd:4c:e5:6f:1f:cc:a5:5f:89:e5:48:ea:5e:3c:36:f6:
fb:5b:37:68
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIUaplbs3rJWZhYXEMpmruAhe85DngwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3
MzdGQjNFQzAeFw0yNjA0MTYwNzExMzJaFw0yNzA0MTUwNzE2MzJaMDMxMTAvBgNV
BAMTKDcyNDc1RDhBNjExMkE0Q0E4NzRFMDUzRTVFNEVCMDUyNkM5NkY2MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoARUv1146gyhaLwdu+HNZcBrg
Y77RpbpDNUPGywuH8SsBFhHFfxLcAGTWZ2BrSnVMUSGlQZJo/opaO2q3MGIt0QVp
/OXsKXG9kTvPTJMtBlYv1CKhnMa4lSkAG0xJzGZNQgG3oh0WdrMDRQGlj+I0IOWV
x3nQikHJn0/SlGsgjkEU9CpdFlJXQrch82J5uh4Y5jSxr+swX3Yteviglz0ZsRah
xGEsjWzDizGHmpUjvwjRRnZ6KrzUvREJQVuqAdS4NJGLd7DqzCuDfYFBdTcgC87L
aCREwy8UezziIfP+8H9sY+TzO+V8UbworCldO9g4U5H+eXIpIeGi3NpkQcRpAgMB
AAGjggIIMIICBDAdBgNVHQ4EFgQUckddimESpMqHTgU+Xk6wUmyW9gswHwYDVR0j
BBgwFoAUFrcsN2GL2ErkEt4orDJU2nN/s+wwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODI3MTYxOS8xLzE2QjcyQzM3NjE4QkQ4NEFFNDEyREUyOEFDMzI1
NERBNzM3RkIzRUMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMTZCNzJDMzc2MThCRDg0QUU0MTJERTI4QUMzMjU0REE3MzdGQjNFQy5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MjcxNjE5LzEvMzEzMzM5MmUzMjMy
MzEyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCL3TAN
BgkqhkiG9w0BAQsFAAOCAQEAhAmQl9PGiypKdGR9EnH8+f0VPXwDjn4Vnz1FQ2Io
8ad4/K9LjDl1pPSn0bgqn3AAj5FgFB3V0N21oFaIrLyOI3s+nA7pJ5J2ywTa8sRS
D6cC8HIGjCLTRp+I5AlFWM98VFQZpg9iU2je3VVhbVTgfLOr40jnzk59pQmX6QoQ
aaMN7Sxs12WqdkwkyO9Z4YfRdNhSTISQcqR9F9WfinhQ9PzFcDg85j8C4/nr/Eig
2s5ksBXnRmHjFQR1TmJdXc6uJVmnnYsQoJ8oIKVKoMQNyHN36srXIRLgEl6ZXwkE
H2nWNv1JJJd9wWtF9mHdTOVvH8ylX4nlSOpePDb2+1s3aA==
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:42 2026 by rpki-client