
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233352e3138342e302f32312d3231203d3e2039383038.roa
File: 36392e3233352e3138342e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: YP3gTor7CQAO9/TMt7oBlKkQ5mhEZRk35ZJ848nmL1c=
Subject key identifier: DB:B1:A2:FA:99:25:74:0D:74:31:1D:99:3C:A0:49:CD:EB:D1:6A:16
Certificate issuer: /CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Certificate serial: 6E31CEB9036ACCE01527B76B013D94B43F857059
Authority key identifier: BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233352e3138342e302f32312d3231203d3e2039383038.roa
Signing time: Wed 15 Apr 2026 02:32:11 +0000
ROA not before: Wed 15 Apr 2026 02:27:11 +0000
ROA not after: Wed 14 Apr 2027 02:32:11 +0000
asID: 9808
IP address blocks: 69.235.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:31:ce:b9:03:6a:cc:e0:15:27:b7:6b:01:3d:94:b4:3f:85:70:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA443CFDA40373E3F27A14B414EC248A46A7DF6D
Validity
Not Before: Apr 15 02:27:11 2026 GMT
Not After : Apr 14 02:32:11 2027 GMT
Subject: CN=DBB1A2FA9925740D74311D993CA049CDEBD16A16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:bf:b2:75:36:28:74:e7:e5:6a:fd:07:1a:
6f:04:76:ce:e7:12:86:80:5b:75:4a:61:c0:62:45:
f3:1d:f8:b4:68:73:3f:5e:c1:ab:93:fb:6c:9d:d7:
3a:1d:c1:ea:5d:fb:55:55:41:e6:b2:35:3b:c5:15:
67:75:b1:c7:93:fc:e7:d5:e0:3a:49:d4:50:b0:52:
11:f1:3c:95:1f:0b:fa:42:e1:e6:59:59:b5:bc:90:
ae:61:7d:ef:27:92:b9:6d:e0:6f:a1:b9:1e:da:a1:
d8:90:51:66:9b:1d:38:6b:75:3e:1f:65:8e:58:78:
6b:6e:cb:34:2d:20:af:f0:41:a0:5d:8d:6d:ac:ed:
64:a0:9f:3b:63:63:69:0b:29:5a:53:4a:37:17:a0:
ac:b8:98:bc:a6:c7:c7:02:4b:11:db:a0:a8:a0:fa:
5c:d0:b4:6e:fa:e4:b8:64:a1:dd:88:a5:f5:dc:ef:
e7:94:d5:c4:89:25:eb:98:86:2b:98:da:04:04:a2:
85:f8:07:3a:46:f2:6c:a8:18:79:55:94:6f:fa:f0:
ba:03:84:dd:ee:64:e8:1d:ca:62:51:54:22:4c:4f:
4b:f1:ec:96:45:b3:c0:36:9e:af:39:90:fd:5b:bb:
51:b2:30:ff:0f:17:d0:c4:5b:ec:d7:87:7b:7c:b0:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:B1:A2:FA:99:25:74:0D:74:31:1D:99:3C:A0:49:CD:EB:D1:6A:16
X509v3 Authority Key Identifier:
keyid:BA:44:3C:FD:A4:03:73:E3:F2:7A:14:B4:14:EC:24:8A:46:A7:DF:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BA443CFDA40373E3F27A14B414EC248A46A7DF6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/1/36392e3233352e3138342e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.235.184.0/21
Signature Algorithm: sha256WithRSAEncryption
26:de:15:4e:d7:70:54:c4:eb:f5:b9:88:df:fc:92:82:35:95:
1b:f9:d4:ae:b1:7c:ff:83:69:9d:ba:87:f5:ff:a4:f2:78:a1:
86:31:66:38:85:49:22:d6:e8:23:30:ca:57:69:44:25:82:74:
ee:f1:b7:38:54:ce:51:74:82:d4:98:87:30:d4:b1:27:81:5b:
f6:c2:5c:35:68:40:29:ab:f2:30:73:7e:52:e8:19:48:4d:d7:
3e:c7:73:e1:6d:20:08:f6:a2:fe:44:4b:fb:d4:5e:d6:2a:22:
44:07:5b:48:ce:5b:36:20:6d:f2:1d:c8:0f:05:49:8e:15:f6:
22:40:e9:d7:3a:c8:f0:42:aa:8d:65:d6:18:10:50:a9:72:f8:
8d:01:a5:6f:aa:b1:17:a4:45:a2:ad:d2:65:dd:a3:ae:92:83:
1a:04:b4:2b:3b:92:0a:10:d4:39:44:14:49:2a:38:c3:56:77:
8c:82:c9:60:5b:fb:5b:f7:6e:87:70:32:a7:b7:6b:7a:7c:66:
98:88:f1:19:d3:91:5e:90:6f:0a:9c:b9:99:45:64:77:ac:e9:
77:cf:3e:0a:85:ab:ef:f8:ae:e5:c8:06:7a:78:03:0b:75:c1:
df:86:3a:ca:25:c4:00:7a:5d:86:8a:f9:00:59:62:a6:0e:03:
01:56:44:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:15 2026 by rpki-client