
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e203538343636.roa
File: 3133392e3139382e31302e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: qb/cyOtOvny5yEtGOXBkLCALA2OoEFlTfcQy4YVzwaM=
Subject key identifier: 48:F9:C3:A6:9D:4B:48:01:FA:B9:38:15:58:6A:30:AC:A7:61:52:92
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 74A719C1C868781DAB26EABC6FFADB331A55FFD1
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e203538343636.roa
Signing time: Wed 15 Apr 2026 06:58:02 +0000
ROA not before: Wed 15 Apr 2026 06:53:02 +0000
ROA not after: Wed 14 Apr 2027 06:58:02 +0000
asID: 58466
IP address blocks: 139.198.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a7:19:c1:c8:68:78:1d:ab:26:ea:bc:6f:fa:db:33:1a:55:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 06:53:02 2026 GMT
Not After : Apr 14 06:58:02 2027 GMT
Subject: CN=48F9C3A69D4B4801FAB93815586A30ACA7615292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:04:c6:3d:3d:a3:d7:fe:b5:90:44:e9:1d:f3:
d8:95:82:a7:70:03:2a:88:9f:94:63:fd:35:b0:89:
47:a3:32:d1:83:af:a2:88:f3:86:82:63:1e:66:63:
2d:f8:2b:0f:69:11:17:f2:db:7f:cf:37:7d:a5:8b:
43:7e:86:c9:dd:9f:a3:12:ff:c3:f5:68:4e:9d:e8:
37:25:65:d2:34:af:58:b0:6f:3f:be:f3:e4:40:47:
42:63:7b:de:a6:bc:80:e2:1b:a8:4d:97:d5:0a:bf:
79:ca:d2:ec:6c:be:4d:5d:ef:46:e9:76:bb:57:1f:
da:e3:73:d8:8d:48:28:5d:99:50:62:72:d2:be:45:
a9:67:74:66:86:41:7b:3e:e1:c1:a4:2a:b6:ef:f3:
76:6c:7a:f9:c9:c1:e2:3d:68:2f:18:b1:66:52:3c:
a5:84:3a:5a:26:55:0c:0b:53:c1:06:5d:dd:eb:78:
70:7c:ed:33:bd:83:a9:08:e3:0c:23:78:30:b7:86:
34:0c:73:ca:e0:58:cb:21:0d:68:52:df:67:48:03:
ae:c4:aa:44:31:dd:e4:df:a2:d7:06:2d:e1:6c:0b:
68:09:69:7e:f1:78:c5:7d:25:dd:5e:98:05:be:64:
9d:24:dd:76:50:a5:cf:4c:80:e3:fa:29:73:48:96:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:F9:C3:A6:9D:4B:48:01:FA:B9:38:15:58:6A:30:AC:A7:61:52:92
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31302e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:22:23:b3:ff:eb:3e:c8:e5:8c:fe:15:0f:62:9e:90:3f:d0:
d6:cd:80:78:79:51:11:95:dd:ac:db:35:0f:dd:f7:9d:f8:39:
57:60:b5:1b:28:45:1b:8b:b0:65:e7:47:44:ed:41:ec:43:bf:
f3:df:cc:9a:7a:4a:07:e3:45:85:d5:99:aa:13:28:ee:e5:03:
a7:7b:d2:72:ec:74:81:22:1d:c3:d0:b2:24:7d:3e:69:a8:b8:
1a:ea:0b:c6:ac:1d:a0:d4:61:7f:a2:c1:61:0f:67:81:81:1d:
02:bd:19:89:b4:5b:d1:0e:29:85:b2:70:b1:11:03:c0:32:6f:
d4:5b:55:fb:28:40:2b:46:e5:1b:32:38:39:19:8b:31:ab:d0:
d8:9b:f4:1a:65:f3:89:e3:43:93:da:47:bd:06:64:66:f6:aa:
e7:66:c8:64:85:80:eb:87:90:79:91:ee:b6:e9:3b:6f:72:95:
20:ef:f6:68:a8:a6:21:b2:28:79:b1:f9:22:47:46:af:61:b6:
54:6d:73:4a:16:bc:e1:54:19:0c:43:33:6a:8d:9d:04:72:2f:
d5:90:07:ab:16:f0:b9:0c:38:3c:1f:5d:a8:44:f8:a4:11:8e:
ce:b9:90:6c:f6:96:63:5e:2d:a9:f7:c5:c6:c3:43:50:6b:8b:
cd:1d:14:36
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:43:05 2026 by rpki-client