
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e302e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: 72FLwimIIFYfkGoKewngDOlF+BeuOiFN/znvSvt+fvc=
Subject key identifier: BF:A8:2B:45:0A:77:2D:77:78:ED:E5:54:31:7C:82:EA:44:8A:99:00
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 1AAAEC2BA24BE2B9762BE2CD229C468FB77D2CA1
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:28 +0000
ROA not before: Wed 15 Apr 2026 07:16:28 +0000
ROA not after: Wed 14 Apr 2027 07:21:28 +0000
asID: 59078
IP address blocks: 139.198.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:aa:ec:2b:a2:4b:e2:b9:76:2b:e2:cd:22:9c:46:8f:b7:7d:2c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:28 2026 GMT
Not After : Apr 14 07:21:28 2027 GMT
Subject: CN=BFA82B450A772D7778EDE554317C82EA448A9900
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:00:42:b3:e1:bf:54:41:ef:4b:80:d1:e1:a7:
79:2c:89:06:5e:2a:2d:1b:00:44:d6:a9:aa:6f:d2:
f7:f6:db:8c:b0:00:8a:13:ff:f5:f3:2b:85:80:63:
09:31:53:5a:4f:6e:98:00:9b:a9:29:ef:a6:0c:92:
f0:01:4e:75:7a:90:62:7c:e8:1d:88:1f:ed:04:fa:
e9:eb:31:99:21:df:cd:d6:26:95:1d:22:14:a8:47:
22:dc:37:6c:f7:e1:aa:27:45:6e:01:24:9a:30:21:
31:7d:4f:28:3c:03:e8:85:9c:b4:36:95:3a:61:69:
29:3d:ca:b3:eb:cb:ac:c4:cf:10:33:65:1e:2f:2d:
6d:87:55:cb:7b:66:c8:b0:e2:cd:7b:a5:aa:c2:b7:
d0:c0:13:94:f9:e1:9a:3e:86:3d:d1:cf:f1:62:a4:
69:ce:1c:aa:49:9e:b6:3d:3e:8f:4d:8c:a8:f8:15:
f6:f2:fb:2e:f5:d0:50:34:24:50:e4:e1:d6:d3:23:
61:ad:17:5d:d4:27:f2:43:e2:9a:b0:d7:77:e6:a4:
17:64:99:22:cd:54:68:04:a1:44:f2:d0:31:83:51:
1d:00:49:0e:96:21:95:32:6e:95:48:28:56:3d:4a:
55:4b:87:2a:55:2e:b4:53:ad:11:be:80:58:20:c1:
00:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A8:2B:45:0A:77:2D:77:78:ED:E5:54:31:7C:82:EA:44:8A:99:00
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e302e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.0.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:59:91:9f:70:24:96:ec:c9:37:6a:5c:c9:c8:dc:49:f0:67:
39:63:ee:d4:33:c8:78:ef:b2:11:38:29:cd:c8:83:f8:e0:b1:
ac:d2:d2:bb:d4:f4:8e:2a:b7:f7:62:e1:75:cc:a8:e9:c6:06:
d6:9e:5e:a9:ec:0e:fb:e0:47:07:02:71:0e:d5:72:4e:f0:85:
29:a6:12:3d:36:08:c8:bf:af:24:ac:27:65:06:f4:ba:da:c9:
1f:ac:5d:cc:60:2d:02:a4:ef:8c:58:06:b5:0f:59:88:a5:8b:
d9:9e:ee:de:21:cb:f9:c6:2e:8e:03:ed:e2:ca:7f:36:d2:1d:
00:42:1b:3b:9e:62:a8:91:80:5d:19:c3:7b:20:5c:ff:e5:50:
d9:17:62:35:af:9e:06:1b:63:f1:de:e7:cf:f4:ea:57:f5:0a:
85:8e:69:18:f9:67:0e:f4:0e:95:2a:67:b7:24:27:ce:09:28:
a3:95:51:ab:3d:42:89:fe:d2:b7:39:b3:ac:48:c4:c9:7e:ae:
37:6a:ae:f0:a5:fc:03:c0:dc:65:01:ef:1e:ae:73:44:6f:c5:
6a:f7:ad:36:fb:b0:02:0f:18:07:4b:e8:57:98:7f:f8:54:98:
dd:70:c0:7d:03:08:9b:3c:25:0b:5b:d4:5a:20:7d:9d:1b:90:
98:e7:4e:0b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUGqrsK6JL4rl2K+LNIpxGj7d9LKEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjA0MTUwNzE2MjhaFw0yNzA0MTQwNzIxMjhaMDMxMTAvBgNV
BAMTKEJGQTgyQjQ1MEE3NzJENzc3OEVERTU1NDMxN0M4MkVBNDQ4QTk5MDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnAEKz4b9UQe9LgNHhp3ksiQZe
Ki0bAETWqapv0vf224ywAIoT//XzK4WAYwkxU1pPbpgAm6kp76YMkvABTnV6kGJ8
6B2IH+0E+unrMZkh383WJpUdIhSoRyLcN2z34aonRW4BJJowITF9Tyg8A+iFnLQ2
lTphaSk9yrPry6zEzxAzZR4vLW2HVct7Zsiw4s17parCt9DAE5T54Zo+hj3Rz/Fi
pGnOHKpJnrY9Po9NjKj4Ffby+y710FA0JFDk4dbTI2GtF13UJ/JD4pqw13fmpBdk
mSLNVGgEoUTy0DGDUR0ASQ6WIZUybpVIKFY9SlVLhypVLrRTrRG+gFggwQBNAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUv6grRQp3LXd47eVUMXyC6kSKmQAwHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzEvMzEzMzM5MmUzMTM5
MzgyZTMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAIvGADANBgkqhkiG9w0BAQsFAAOCAQEAD1mRn3AkluzJN2pcycjcSfBnOWPu
1DPIeO+yETgpzciD+OCxrNLSu9T0jiq392Lhdcyo6cYG1p5eqewO++BHBwJxDtVy
TvCFKaYSPTYIyL+vJKwnZQb0utrJH6xdzGAtAqTvjFgGtQ9ZiKWL2Z7u3iHL+cYu
jgPt4sp/NtIdAEIbO55iqJGAXRnDeyBc/+VQ2RdiNa+eBhtj8d7nz/TqV/UKhY5p
GPlnDvQOlSpntyQnzgkoo5VRqz1Cif7StzmzrEjEyX6uN2qu8KX8A8DcZQHvHq5z
RG/FavetNvuwAg8YB0voV5h/+FSY3XDAfQMImzwlC1vUWiB9nRuQmOdOCw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:03 2026 by rpki-client