
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131362e36322e302e302f31362d3234203d3e203337393633.roa
File: 3131362e36322e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier: JL4sfXHpEsaOzs3NoDK1xoTbKkD+6oEUVCwWmCfTuJ8=
Subject key identifier: B5:38:2A:EF:13:24:6D:3F:1F:C4:9A:2B:82:0D:2E:D8:F8:C0:AC:35
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 658DA1E667DA129058976ECC9BEC3B168A7FB0D2
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131362e36322e302e302f31362d3234203d3e203337393633.roa
Signing time: Fri 17 Apr 2026 08:02:57 +0000
ROA not before: Fri 17 Apr 2026 07:57:57 +0000
ROA not after: Fri 16 Apr 2027 08:02:57 +0000
asID: 37963
IP address blocks: 116.62.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 11:27:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8d:a1:e6:67:da:12:90:58:97:6e:cc:9b:ec:3b:16:8a:7f:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 17 07:57:57 2026 GMT
Not After : Apr 16 08:02:57 2027 GMT
Subject: CN=B5382AEF13246D3F1FC49A2B820D2ED8F8C0AC35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:f0:fe:2e:1f:3b:43:58:c2:8d:35:8c:9d:
92:15:8e:99:21:14:91:c2:5a:39:e6:92:dc:9b:8e:
58:13:d2:a0:a5:41:af:43:5a:3f:d7:41:9b:f6:9e:
ef:31:4c:7e:51:11:84:3d:f0:a3:a3:6d:aa:86:57:
e7:9f:3b:ac:fd:59:a1:06:01:13:a8:33:f7:52:4d:
cc:07:d0:bb:50:9c:7d:25:96:46:92:4b:ee:93:bb:
a7:7a:9d:85:da:35:cb:ce:e3:70:88:26:ca:84:51:
21:49:b8:3f:f2:6c:53:e3:09:24:d5:13:00:05:89:
89:25:4b:f5:18:30:eb:9a:55:a5:db:29:cd:dc:e9:
88:a8:18:ee:12:fb:ca:f5:ad:5f:f5:75:80:49:f7:
12:f4:b7:76:9a:1b:ab:37:da:fc:f3:f9:ec:a2:ad:
1e:f0:c1:5f:5f:a6:00:82:d9:4c:e7:5b:33:44:9b:
53:e7:7e:b5:18:45:a0:7e:19:27:f4:9a:02:65:67:
3e:9e:02:1e:06:a5:71:8d:2b:05:de:95:df:ae:8b:
4c:78:b2:74:bb:c4:2e:b2:59:a5:d3:0b:ad:46:c4:
45:47:6b:aa:c7:7f:d6:07:ae:3f:cd:94:38:f7:87:
94:b9:73:bf:1a:05:dc:e0:81:3b:e9:0f:3d:11:0e:
39:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:38:2A:EF:13:24:6D:3F:1F:C4:9A:2B:82:0D:2E:D8:F8:C0:AC:35
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3131362e36322e302e302f31362d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:92:cd:95:73:74:9c:2d:e5:6d:91:4d:4a:d8:b3:fa:fb:dc:
1b:b6:b3:a3:01:b6:0c:fd:fc:8d:27:fd:fb:ca:99:2d:2e:53:
19:0a:c8:d6:7b:60:49:41:8b:d4:a3:c6:4d:63:9c:16:60:be:
08:cf:0a:24:18:bf:01:1c:0c:e6:49:1c:88:7e:0e:79:96:68:
e3:da:3d:91:b7:0d:30:7a:b2:13:71:df:1d:25:6c:9f:e0:82:
8f:02:79:f8:6b:6a:66:2c:b1:51:b5:7b:3e:8c:ff:95:ee:ff:
ae:34:ad:a2:eb:2c:c2:45:1a:99:ae:5c:8b:6c:92:91:42:49:
58:28:af:46:76:d5:ca:9b:c5:78:ab:5e:64:c1:7c:51:49:89:
cf:39:7a:82:dd:bb:64:a8:cb:69:0f:43:56:f7:bf:86:64:ec:
cd:f0:b7:f4:08:55:25:fd:8e:dd:95:ef:9d:83:8c:34:72:e8:
64:22:23:47:08:86:14:f5:8e:fc:0c:c7:29:e9:fc:c0:03:58:
25:43:d3:f7:dd:f3:c6:b4:81:46:a9:85:69:65:6c:cb:54:14:
a7:f8:83:c9:df:c8:f4:d7:19:06:ed:52:cb:40:f6:33:19:37:
de:6e:d8:a6:eb:e9:1c:f1:e0:ea:3f:ff:8a:e3:91:ff:a9:f5:
17:a1:b9:b2
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUZY2h5mfaEpBYl27Mm+w7Fop/sNIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx
NTdEMEM4RTAeFw0yNjA0MTcwNzU3NTdaFw0yNzA0MTYwODAyNTdaMDMxMTAvBgNV
BAMTKEI1MzgyQUVGMTMyNDZEM0YxRkM0OUEyQjgyMEQyRUQ4RjhDMEFDMzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01/D+Lh87Q1jCjTWMnZIVjpkh
FJHCWjnmktybjlgT0qClQa9DWj/XQZv2nu8xTH5REYQ98KOjbaqGV+efO6z9WaEG
AROoM/dSTcwH0LtQnH0llkaSS+6Tu6d6nYXaNcvO43CIJsqEUSFJuD/ybFPjCSTV
EwAFiYklS/UYMOuaVaXbKc3c6YioGO4S+8r1rV/1dYBJ9xL0t3aaG6s32vzz+eyi
rR7wwV9fpgCC2UznWzNEm1PnfrUYRaB+GSf0mgJlZz6eAh4GpXGNKwXeld+ui0x4
snS7xC6yWaXTC61GxEVHa6rHf9YHrj/NlDj3h5S5c78aBdzggTvpDz0RDjk9AgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUtTgq7xMkbT8fxJorgg0u2PjArDUwHwYDVR0j
BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5
MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzEzMTM2MmUzNjMy
MmUzMDJlMzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwB0PjANBgkqhkiG9w0BAQsFAAOCAQEAYpLNlXN0nC3lbZFNStiz+vvcG7azowG2
DP38jSf9+8qZLS5TGQrI1ntgSUGL1KPGTWOcFmC+CM8KJBi/ARwM5kkciH4OeZZo
49o9kbcNMHqyE3HfHSVsn+CCjwJ5+GtqZiyxUbV7Poz/le7/rjStousswkUama5c
i2ySkUJJWCivRnbVypvFeKteZMF8UUmJzzl6gt27ZKjLaQ9DVve/hmTszfC39AhV
Jf2O3ZXvnYOMNHLoZCIjRwiGFPWO/AzHKen8wANYJUPT993zxrSBRqmFaWVsy1QU
p/iDyd/I9NcZBu1Sy0D2Mxk33m7YpuvpHPHg6j//iuOR/6n1F6G5sg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:01:49 2026 by rpki-client