
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131302e37362e33322e302f32302d3234203d3e203337393633.roa
File: 3131302e37362e33322e302f32302d3234203d3e203337393633.roa (raw, json)
Hash identifier: GEmJCg1FWBS4Zq8EQZHgl+GeCc9jHAdD/syjPDLZqcQ=
Subject key identifier: 88:BB:DC:A4:8F:21:5B:CF:91:49:09:16:DE:76:D5:88:30:22:6F:C0
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 1CBA7453DD464368E9279357B93A673F52F8E5FB
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131302e37362e33322e302f32302d3234203d3e203337393633.roa
Signing time: Fri 17 Apr 2026 02:22:54 +0000
ROA not before: Fri 17 Apr 2026 02:17:54 +0000
ROA not after: Fri 16 Apr 2027 02:22:54 +0000
asID: 37963
IP address blocks: 110.76.32.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ba:74:53:dd:46:43:68:e9:27:93:57:b9:3a:67:3f:52:f8:e5:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 17 02:17:54 2026 GMT
Not After : Apr 16 02:22:54 2027 GMT
Subject: CN=88BBDCA48F215BCF91490916DE76D58830226FC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:f9:a7:9d:b6:36:d2:7e:ec:1f:b1:de:15:
e0:06:dd:fd:6a:ce:88:20:bd:81:f5:e8:bc:78:74:
91:2b:6c:21:de:f3:26:3c:d3:82:31:48:ed:ef:76:
9f:17:42:7d:68:6b:ae:a6:92:d6:91:ec:3f:7f:3e:
cc:69:ee:2a:96:a4:49:94:c4:62:6b:8d:b7:c6:54:
0d:48:42:76:c0:b6:97:f2:4f:80:0e:6c:d6:1b:28:
5a:61:f0:12:de:9f:18:b3:a9:7a:80:bc:8c:c3:e5:
72:90:4e:8b:a2:00:81:79:e7:9a:93:4d:01:e7:46:
86:6c:1f:2e:1a:72:92:38:5d:4a:1b:56:16:03:84:
a8:09:3f:20:4e:2b:61:ce:b0:c6:62:99:9f:03:98:
21:fd:15:bc:a0:ec:76:8b:80:12:c7:b2:a2:32:aa:
c9:83:38:4b:bc:bf:ea:e3:02:91:f3:21:e5:e7:19:
da:71:b2:e7:c6:73:5a:c1:5a:5f:33:a5:5f:bc:9c:
07:43:ec:04:46:33:dc:a3:6d:30:32:ce:ba:4a:f8:
2e:de:89:45:bd:78:c1:86:ff:2f:a1:e6:ae:a4:2c:
46:6f:08:c8:81:88:d8:c1:ae:fb:0c:28:db:7d:c0:
24:bf:36:ea:e7:72:e1:93:0d:39:4d:ea:23:30:cd:
bd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:BB:DC:A4:8F:21:5B:CF:91:49:09:16:DE:76:D5:88:30:22:6F:C0
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131302e37362e33322e302f32302d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.32.0/20
Signature Algorithm: sha256WithRSAEncryption
0b:a5:51:82:94:b6:65:57:74:9b:c0:2d:91:43:1e:36:d2:17:
98:55:91:05:0b:28:9d:d6:59:a2:f8:59:35:f0:fd:b2:a1:b4:
db:e7:c5:6b:e1:b4:e3:97:dd:8e:a2:aa:b4:bb:26:4a:b4:c3:
6c:06:78:0a:92:a3:ca:8f:61:0e:a2:b6:b6:9b:2e:92:0c:f0:
6f:60:f1:73:ff:9a:a8:55:61:55:61:ba:13:de:15:a3:41:dc:
d6:32:e8:55:50:15:4d:e4:0b:e1:46:b8:9a:1d:ae:c8:9f:9e:
ad:a3:fe:7c:83:67:41:97:86:b7:04:03:4b:d6:3a:c3:46:21:
a4:ef:6d:5e:73:82:fc:9a:a6:84:ef:9a:2c:a0:7c:ab:cf:da:
10:5a:f2:3e:51:f6:04:eb:57:6f:42:73:3e:84:23:2a:51:d4:
5c:d6:18:66:c3:6c:c7:b5:57:1e:4d:0b:3e:9b:93:cb:74:3e:
91:20:5d:b6:07:26:13:7b:70:38:d2:e7:07:76:1c:4f:b2:c3:
97:0c:c5:64:f0:76:36:aa:5e:6c:d8:94:6a:7f:7b:0b:29:52:
9b:82:3c:f1:ae:88:89:00:dc:b4:e4:23:c9:c2:f2:7d:f1:b3:
cd:9e:c8:d1:a1:8c:a8:93:67:bc:5b:6c:0f:67:a0:47:a5:2e:
69:ee:77:18
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHLp0U91GQ2jpJ5NXuTpnP1L45fswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjA0MTcwMjE3NTRaFw0yNzA0MTYwMjIyNTRaMDMxMTAvBgNV
BAMTKDg4QkJEQ0E0OEYyMTVCQ0Y5MTQ5MDkxNkRFNzZENTg4MzAyMjZGQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAXvmnnbY20n7sH7HeFeAG3f1q
zoggvYH16Lx4dJErbCHe8yY804IxSO3vdp8XQn1oa66mktaR7D9/Psxp7iqWpEmU
xGJrjbfGVA1IQnbAtpfyT4AObNYbKFph8BLenxizqXqAvIzD5XKQTouiAIF555qT
TQHnRoZsHy4acpI4XUobVhYDhKgJPyBOK2HOsMZimZ8DmCH9Fbyg7HaLgBLHsqIy
qsmDOEu8v+rjApHzIeXnGdpxsufGc1rBWl8zpV+8nAdD7ARGM9yjbTAyzrpK+C7e
iUW9eMGG/y+h5q6kLEZvCMiBiNjBrvsMKNt9wCS/NurncuGTDTlN6iMwzb1/AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUiLvcpI8hW8+RSQkW3nbViDAib8AwHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTMwMmUzNzM2
MmUzMzMyMmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBG5MIDANBgkqhkiG9w0BAQsFAAOCAQEAC6VRgpS2ZVd0m8AtkUMeNtIXmFWR
BQsondZZovhZNfD9sqG02+fFa+G045fdjqKqtLsmSrTDbAZ4CpKjyo9hDqK2tpsu
kgzwb2Dxc/+aqFVhVWG6E94Vo0Hc1jLoVVAVTeQL4Ua4mh2uyJ+eraP+fINnQZeG
twQDS9Y6w0YhpO9tXnOC/JqmhO+aLKB8q8/aEFryPlH2BOtXb0JzPoQjKlHUXNYY
ZsNsx7VXHk0LPpuTy3Q+kSBdtgcmE3twONLnB3YcT7LDlwzFZPB2NqpebNiUan97
CylSm4I88a6IiQDctOQjycLyffGzzZ7I0aGMqJNnvFtsD2egR6Uuae53GA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:52 2026 by rpki-client