
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e20313334333636.roa
File: 3133392e3139382e3131332e302f32342d3234203d3e20313334333636.roa (raw, json)
Hash identifier: l6RVuQB6fCMXd7LFmCopR1DlRc8ZUx83A7rKC5cB/MM=
Subject key identifier: D8:66:53:B0:42:AB:9B:59:E1:C2:39:EF:97:B4:9E:E8:C3:E7:63:5C
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 6885B2A27E2D702FDE7CFD7CD292D0A706D0E6B7
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e20313334333636.roa
Signing time: Wed 15 Apr 2026 06:58:01 +0000
ROA not before: Wed 15 Apr 2026 06:53:01 +0000
ROA not after: Wed 14 Apr 2027 06:58:01 +0000
asID: 134366
IP address blocks: 139.198.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:85:b2:a2:7e:2d:70:2f:de:7c:fd:7c:d2:92:d0:a7:06:d0:e6:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 06:53:01 2026 GMT
Not After : Apr 14 06:58:01 2027 GMT
Subject: CN=D86653B042AB9B59E1C239EF97B49EE8C3E7635C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3b:42:ed:36:e3:20:a6:5c:d4:7f:82:d5:1f:
d9:51:06:5b:ac:ef:58:ee:22:32:11:9f:95:9a:ff:
be:41:00:13:1e:37:b6:9e:c4:99:eb:76:89:b7:34:
07:8e:6a:f6:8d:16:e0:e6:dd:d8:aa:30:0f:8a:2d:
a9:39:4b:3e:2a:83:ac:3d:6d:d8:e2:73:f3:01:79:
b5:e3:c3:5d:0e:a1:6c:8c:95:24:7f:b0:31:5d:7c:
00:c8:2e:bf:80:db:67:4b:92:90:93:5d:fe:ef:3b:
98:05:0e:f0:88:b7:01:c9:d0:7a:30:f4:26:cc:2d:
e4:54:24:9a:2b:b9:e8:a5:7b:e4:43:d3:0e:23:fc:
72:19:9c:ac:57:60:9a:b4:f2:71:90:2e:32:eb:27:
99:ab:c5:99:8f:68:c6:fd:9c:c6:38:81:57:59:29:
a8:91:f6:8e:47:0f:b8:10:35:83:42:1e:90:a1:9f:
dc:56:21:d0:84:f3:67:39:de:39:65:01:47:ff:97:
76:61:57:5c:91:dd:37:dc:f2:d4:af:45:6c:db:4e:
09:1e:1c:1c:56:f5:6d:d9:18:57:4b:9e:d5:e4:0b:
fb:5b:33:a4:52:8b:b9:87:21:42:e4:bf:6f:0d:e6:
86:f5:4c:a0:d8:0b:06:57:be:e9:b1:97:92:e1:b0:
6f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:66:53:B0:42:AB:9B:59:E1:C2:39:EF:97:B4:9E:E8:C3:E7:63:5C
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e20313334333636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.113.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:aa:48:a1:81:92:c3:64:ae:ac:95:61:3f:e7:21:39:d1:1f:
d0:8c:17:e2:76:0f:97:4a:ab:16:23:17:b9:cc:29:f1:cb:00:
fb:cb:d7:cf:96:12:8c:84:e7:33:12:58:7f:c4:4a:89:ed:fc:
0b:96:bf:b7:fb:17:47:f3:37:fb:6f:91:87:36:3b:3c:a3:a3:
fb:cf:1e:e4:76:a9:8e:8f:c9:e2:fa:46:95:ca:37:ab:ff:3b:
32:a0:f8:90:30:ab:c5:76:4f:a5:b5:9a:fd:08:a3:72:e9:11:
a6:06:72:e9:07:24:d5:00:60:20:3c:0a:c2:bb:d5:ce:94:49:
45:8a:52:0a:1e:71:56:73:b3:57:00:45:63:3d:36:58:09:9b:
c5:4a:fa:4e:63:9d:04:74:bc:29:fd:38:fe:74:68:78:3e:72:
1f:af:da:dc:9b:73:75:a1:5c:04:f7:d8:9b:06:8d:b7:25:fb:
68:d3:e0:18:93:4f:a1:d8:fe:26:39:ea:8b:7d:69:ed:0b:8c:
20:37:d7:4b:8f:22:2b:69:96:16:cf:ff:1d:70:5a:4e:e5:65:
3a:a3:13:f4:fb:ca:73:bf:a7:93:32:11:35:d0:d1:ce:ba:c8:
71:f5:99:1a:14:ee:81:ee:a3:b5:31:b6:97:a7:bb:2d:60:b7:
18:96:90:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:24 2026 by rpki-client