
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e203538343636.roa
File: 3133392e3139382e3131332e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: Mr8UJoPToeJH9aw+UfhQtmc2lqaPAvh8rw1OmJqKOJ4=
Subject key identifier: BA:C8:75:01:3A:1C:77:9A:7A:80:E6:DF:40:BE:D7:E7:5F:96:38:0F
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 4F9FA79A1E9CE3E2DC6B022D6F9AC8DEC3868DDC
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e203538343636.roa
Signing time: Wed 15 Apr 2026 07:43:15 +0000
ROA not before: Wed 15 Apr 2026 07:38:15 +0000
ROA not after: Wed 14 Apr 2027 07:43:15 +0000
asID: 58466
IP address blocks: 139.198.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9f:a7:9a:1e:9c:e3:e2:dc:6b:02:2d:6f:9a:c8:de:c3:86:8d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:38:15 2026 GMT
Not After : Apr 14 07:43:15 2027 GMT
Subject: CN=BAC875013A1C779A7A80E6DF40BED7E75F96380F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:13:89:d1:55:15:a1:cd:c9:89:a4:1a:e0:3b:
1c:77:47:cc:ee:70:77:c0:1d:87:27:93:9f:25:47:
e5:64:44:65:1e:a6:1b:ca:38:09:ab:74:a9:1d:6a:
5b:17:6a:a9:34:b5:67:48:0c:04:e0:bb:8d:c4:a1:
07:ea:13:d2:6e:ae:5f:e7:46:ef:1b:71:d6:db:cb:
b5:c4:51:97:8c:bd:3d:7a:a6:7a:97:a2:d2:fa:0e:
cf:55:be:f0:ab:38:ed:12:d4:15:ac:19:39:3e:61:
f9:bc:8c:e5:e8:1b:24:4f:d6:a7:4d:9e:9e:61:5c:
db:34:86:a6:c0:17:f5:b8:36:f9:3f:b6:9e:97:62:
4b:fe:1e:c2:c0:16:18:5c:65:e4:09:a0:92:aa:1b:
09:94:11:e1:81:1b:5c:08:f6:98:a4:3f:80:ba:0b:
4d:14:38:a1:c4:0c:fe:12:d4:54:e7:06:56:49:7e:
59:94:0b:f8:76:9d:c9:fb:e5:2c:da:9d:5e:2b:51:
01:c9:b7:14:1c:ee:08:78:b2:4c:9e:53:68:0e:60:
a6:7b:f6:24:3b:dd:03:ed:73:fe:d9:f6:57:4d:47:
f3:78:5a:fa:d3:4b:60:2d:83:b8:a5:ce:42:3b:2b:
03:63:d4:1e:49:4b:4a:78:fc:29:4a:e7:44:ca:ad:
01:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C8:75:01:3A:1C:77:9A:7A:80:E6:DF:40:BE:D7:E7:5F:96:38:0F
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131332e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.113.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:a5:ae:20:a5:92:1c:94:16:2e:98:f7:72:2d:dd:7f:da:d0:
c1:e7:f1:b5:f9:f2:d9:80:b0:bf:90:43:03:cf:dd:75:a0:27:
1c:b6:81:eb:5d:8d:f3:cc:66:b7:b8:a5:a4:e4:28:99:52:8d:
15:0a:5e:4f:f1:8f:e7:db:fc:6b:e1:ad:38:0c:fa:42:4c:55:
62:fe:f5:87:ae:98:1b:de:7a:eb:e2:29:94:8f:44:28:8a:18:
17:b7:0e:b8:78:6a:9f:c0:d2:3d:21:06:dc:1f:c6:37:29:ac:
79:49:a7:36:3c:49:44:fe:ad:d6:a7:a2:d9:19:fd:8b:ed:75:
c5:7a:ba:16:71:82:2a:6c:2c:79:54:95:5a:e2:ed:ec:4b:22:
a5:16:29:01:69:c4:05:e8:fb:1e:d6:1a:e2:96:05:2f:45:e3:
61:69:69:b8:92:3b:40:c6:bd:f1:d8:77:f6:7a:4e:cc:87:fd:
43:fa:9e:04:42:70:83:e3:59:a7:4f:dd:bc:1d:ca:2f:5c:4f:
f5:41:c7:76:35:0b:f6:31:9c:04:0d:8a:66:0c:18:8e:6e:bb:
f5:ff:af:b9:c5:88:a6:89:f4:b5:64:31:1c:cc:e3:3d:99:84:
78:0e:1f:7c:f0:36:06:45:aa:90:35:10:a9:8a:45:1c:06:b9:
44:92:47:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:20:22 2026 by rpki-client