
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131342e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e3131342e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: +1mC8KD/oi/Uqn1dtzAjgn8xMHGsBKpBB+ZmK5LcfuU=
Subject key identifier: B9:0D:FE:0A:55:E0:84:34:C5:61:4B:BA:92:F8:23:02:24:89:1A:BB
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 2B0456324D59FB32B349053D903198FC7D7687B0
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131342e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:27:30 +0000
ROA not before: Wed 15 Apr 2026 07:22:30 +0000
ROA not after: Wed 14 Apr 2027 07:27:30 +0000
asID: 59078
IP address blocks: 139.198.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:04:56:32:4d:59:fb:32:b3:49:05:3d:90:31:98:fc:7d:76:87:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:22:30 2026 GMT
Not After : Apr 14 07:27:30 2027 GMT
Subject: CN=B90DFE0A55E08434C5614BBA92F8230224891ABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:21:30:36:bf:49:a8:8c:8b:e2:78:63:40:1e:
0e:38:11:fa:07:bc:fa:00:99:c4:06:33:78:e1:d9:
7a:43:e5:e7:21:79:85:c6:a1:05:4a:b6:73:6f:86:
5b:0d:5d:ee:04:64:2a:86:e8:c9:b9:ba:f6:37:41:
90:39:ef:97:ec:0a:0c:b9:60:1d:2e:b7:44:e8:02:
86:0e:36:9a:63:b4:7c:9c:1d:23:7f:d3:20:29:79:
4c:56:58:83:b7:98:98:fa:2a:1a:b0:9f:67:3b:50:
b7:8a:b6:f3:45:3f:70:88:54:4c:b9:14:6a:50:78:
01:ed:58:98:07:ed:14:3c:ed:3a:e1:37:62:f7:cf:
07:02:cf:87:43:14:7f:14:e5:b0:76:ef:d9:25:a8:
43:a3:72:64:d5:e6:0b:24:16:d9:88:89:ce:b8:10:
38:2f:44:10:dc:13:4f:c8:50:d0:93:42:94:09:27:
c7:d4:f4:f7:63:27:b4:6b:a7:c1:7a:3e:65:83:cb:
5f:70:c1:9c:d1:5b:f4:14:47:0e:ce:ab:2b:b4:10:
2c:3f:e1:a2:33:32:eb:92:82:24:5c:fe:0b:2b:71:
25:06:50:1d:08:8f:21:9c:c9:a3:d4:5b:f3:34:fd:
d1:63:9e:99:7e:8b:42:91:ff:09:4f:7d:c5:f8:54:
05:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0D:FE:0A:55:E0:84:34:C5:61:4B:BA:92:F8:23:02:24:89:1A:BB
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131342e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:f3:cc:76:ec:c1:c4:a2:6d:64:20:f4:b0:18:a5:7a:31:51:
19:a5:e0:d5:c3:1e:d0:fd:b8:b6:50:e3:7d:74:10:7c:3d:fc:
4e:34:92:1b:a6:a6:95:69:e3:05:d8:9a:8e:83:92:21:56:d3:
d2:1f:f9:80:58:8b:3a:1b:25:a8:18:a5:79:bf:d6:4f:a1:e9:
ad:a6:ca:ca:55:1e:7a:e5:a5:71:a0:37:ee:8b:75:cb:8f:86:
3c:19:00:f2:1f:1a:70:0b:09:b5:eb:38:a2:d8:3e:92:85:b5:
62:7c:3e:fa:08:27:06:c6:bd:df:e3:e1:62:fd:28:1d:fa:e7:
6e:2c:e2:b1:8e:ef:22:4e:d4:77:f9:6e:ed:c9:70:e3:39:47:
ff:c5:19:8f:7d:41:02:54:db:b5:17:c6:af:40:16:9c:d1:4a:
43:72:2a:b2:55:79:b3:e0:c5:a2:17:a1:c8:0d:e4:d8:d8:08:
59:38:eb:64:18:e9:c8:d5:7b:40:9e:46:17:25:6a:1f:f6:45:
b3:8e:c4:33:b0:05:4a:47:76:0e:d1:96:51:b8:df:3e:f5:dd:
0d:6f:55:f8:37:99:83:e2:b6:d4:ca:ac:ed:4a:41:04:62:78:
86:82:79:05:39:f6:de:f5:ca:20:60:2a:98:0c:fd:e5:86:fb:
80:ac:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:23:49 2026 by rpki-client