
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911217520643/1/3136302e3235302e38342e302f32332d3234203d3e2034383136.roa
File: 3136302e3235302e38342e302f32332d3234203d3e2034383136.roa (raw, json)
Hash identifier: M0wfTR/OAJBje8n+/3S62Tlg2BVD3Kl2zCHWBs3Dqbo=
Subject key identifier: 49:C7:1F:40:EC:8C:67:22:20:2F:4B:D8:3A:50:C0:9F:B6:28:68:96
Certificate issuer: /CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Certificate serial: 20AAAA5E01EEA03D4340A65AF5694A75C531B04E
Authority key identifier: 4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/3136302e3235302e38342e302f32332d3234203d3e2034383136.roa
Signing time: Wed 15 Apr 2026 13:19:52 +0000
ROA not before: Wed 15 Apr 2026 13:14:52 +0000
ROA not after: Wed 14 Apr 2027 13:19:52 +0000
asID: 4816
IP address blocks: 160.250.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 03:45:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:aa:aa:5e:01:ee:a0:3d:43:40:a6:5a:f5:69:4a:75:c5:31:b0:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4D179E5CBA2454F796FF2817FE62E20B80E9E8D5
Validity
Not Before: Apr 15 13:14:52 2026 GMT
Not After : Apr 14 13:19:52 2027 GMT
Subject: CN=49C71F40EC8C6722202F4BD83A50C09FB6286896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:8f:d6:d9:15:05:0b:b7:e0:25:1a:dc:6c:
5d:8c:1f:33:fa:04:2f:4a:f5:d8:cb:ff:50:de:44:
a9:ff:ae:f8:5a:2d:75:a2:6f:49:4d:a7:c8:e7:a3:
f7:e5:93:a6:aa:d7:36:b8:ec:58:2f:7b:23:91:b0:
0c:b8:47:bd:c1:24:43:ac:8f:8e:cd:16:76:a5:b8:
b9:a1:7d:06:20:cf:a7:22:ac:6a:39:64:bb:04:4d:
8d:a9:96:cc:2c:1b:40:d0:12:f5:e2:60:31:7f:c6:
bd:c0:4b:72:aa:84:0e:18:79:fd:d6:5d:4b:3b:f8:
58:c1:f4:2b:06:13:6c:56:fb:e5:6f:72:33:10:b9:
aa:1d:1a:cf:b9:86:4c:08:02:28:f0:b9:55:1d:15:
62:20:04:cf:6a:96:0d:a3:6a:9c:e0:a3:28:6e:37:
55:8f:46:8d:5b:86:ee:06:cf:91:de:26:51:82:fd:
8c:8e:4b:e8:26:83:c1:de:6d:5b:c0:68:26:3f:a8:
95:3d:3c:a5:ce:51:98:72:0b:e4:ce:74:94:4c:a8:
16:2f:8b:ab:47:d7:35:ea:3c:24:9c:5f:be:c1:e4:
2d:b1:8b:68:bd:0a:f5:07:b8:33:e9:e3:af:f4:78:
1a:7f:1d:f6:74:cf:ef:9c:1f:d6:90:71:83:bf:45:
72:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C7:1F:40:EC:8C:67:22:20:2F:4B:D8:3A:50:C0:9F:B6:28:68:96
X509v3 Authority Key Identifier:
keyid:4D:17:9E:5C:BA:24:54:F7:96:FF:28:17:FE:62:E2:0B:80:E9:E8:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/4D179E5CBA2454F796FF2817FE62E20B80E9E8D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911217520643/1/3136302e3235302e38342e302f32332d3234203d3e2034383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.250.84.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:9d:de:59:a7:3a:cc:90:0f:8c:27:4c:cf:08:c1:06:33:e4:
27:83:18:b3:ab:e6:46:91:69:f8:22:a7:a0:f2:3b:c5:62:62:
cd:48:b9:02:fe:8f:61:81:88:83:07:39:25:1d:cd:41:1e:7f:
d4:ce:14:e8:10:b1:5d:88:1c:e8:25:b3:bf:6a:5f:37:2d:83:
6f:c0:62:ca:5c:ae:d0:11:5f:c6:46:30:6c:d0:2b:57:f2:85:
fd:d0:2a:27:81:2f:bc:5e:6e:79:57:1e:48:bc:e6:aa:10:e4:
87:f5:65:2a:55:d6:23:62:31:40:87:84:b6:c2:5e:eb:e6:6f:
df:f4:c2:38:85:ba:1a:98:ae:08:ea:b3:e1:5f:4c:6d:e7:0f:
e3:2e:37:02:70:01:7c:ac:3f:c8:f6:d7:3c:9b:96:6b:12:d7:
02:e5:f7:0c:3e:05:9f:9f:4d:d6:47:83:ae:cb:3c:5f:5c:f7:
aa:84:5b:0d:ab:ea:7c:7b:88:66:49:bd:d4:1e:3c:45:df:22:
09:5c:24:6b:74:e8:62:43:cc:35:2f:23:8a:23:06:fe:f6:ec:
3a:95:40:19:e8:e5:98:d3:08:e8:1e:5a:08:d4:39:84:80:27:
65:b1:8f:08:9c:19:c1:b4:1d:0c:7b:85:55:43:e3:9d:47:ea:
6a:13:12:2b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUIKqqXgHuoD1DQKZa9WlKdcUxsE4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4
MEU5RThENTAeFw0yNjA0MTUxMzE0NTJaFw0yNzA0MTQxMzE5NTJaMDMxMTAvBgNV
BAMTKDQ5QzcxRjQwRUM4QzY3MjIyMDJGNEJEODNBNTBDMDlGQjYyODY4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzG4/W2RUFC7fgJRrcbF2MHzP6
BC9K9djL/1DeRKn/rvhaLXWib0lNp8jno/flk6aq1za47FgveyORsAy4R73BJEOs
j47NFnaluLmhfQYgz6cirGo5ZLsETY2plswsG0DQEvXiYDF/xr3AS3KqhA4Yef3W
XUs7+FjB9CsGE2xW++VvcjMQuaodGs+5hkwIAijwuVUdFWIgBM9qlg2japzgoyhu
N1WPRo1bhu4Gz5HeJlGC/YyOS+gmg8HebVvAaCY/qJU9PKXOUZhyC+TOdJRMqBYv
i6tH1zXqPCScX77B5C2xi2i9CvUHuDPp46/0eBp/HfZ0z++cH9aQcYO/RXJTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUSccfQOyMZyIgL0vYOlDAn7YoaJYwHwYDVR0j
BBgwFoAUTReeXLokVPeW/ygX/mLiC4Dp6NUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTkxMTIxNzUyMDY0My8xLzREMTc5RTVDQkEyNDU0Rjc5NkZGMjgxN0ZFNjJF
MjBCODBFOUU4RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNEQxNzlFNUNCQTI0NTRGNzk2RkYyODE3RkU2MkUyMEI4MEU5RThENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1OTExMjE3NTIwNjQzLzEvMzEzNjMwMmUzMjM1
MzAyZTM4MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzNDM4MzEzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAaD6VDANBgkqhkiG9w0BAQsFAAOCAQEAoJ3eWac6zJAPjCdMzwjBBjPkJ4MY
s6vmRpFp+CKnoPI7xWJizUi5Av6PYYGIgwc5JR3NQR5/1M4U6BCxXYgc6CWzv2pf
Ny2Db8Biylyu0BFfxkYwbNArV/KF/dAqJ4EvvF5ueVceSLzmqhDkh/VlKlXWI2Ix
QIeEtsJe6+Zv3/TCOIW6GpiuCOqz4V9MbecP4y43AnABfKw/yPbXPJuWaxLXAuX3
DD4Fn59N1keDrss8X1z3qoRbDavqfHuIZkm91B48Rd8iCVwka3ToYkPMNS8jiiMG
/vbsOpVAGejlmNMI6B5aCNQ5hIAnZbGPCJwZwbQdDHuFVUPjnUfqahMSKw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:19:39 2026 by rpki-client