
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131352e302f32342d3234203d3e203538343636.roa
File: 3133392e3139382e3131352e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: 70HyIVDLFehRNGxuatAncy5GrHLqKAYn5ZBt2pI611c=
Subject key identifier: 4C:89:1A:4C:63:AE:4B:42:29:DD:10:D4:20:BE:FE:C4:1D:C2:F4:79
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 188A074FAC74187BB08BB36245E0C377155021B5
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131352e302f32342d3234203d3e203538343636.roa
Signing time: Wed 15 Apr 2026 07:47:05 +0000
ROA not before: Wed 15 Apr 2026 07:42:05 +0000
ROA not after: Wed 14 Apr 2027 07:47:05 +0000
asID: 58466
IP address blocks: 139.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:8a:07:4f:ac:74:18:7b:b0:8b:b3:62:45:e0:c3:77:15:50:21:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:42:05 2026 GMT
Not After : Apr 14 07:47:05 2027 GMT
Subject: CN=4C891A4C63AE4B4229DD10D420BEFEC41DC2F479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f9:74:b5:0f:08:34:29:60:54:f3:e6:93:44:
54:88:9a:3c:56:74:84:3f:d5:3b:b9:ba:5d:54:68:
d3:35:56:d8:90:24:93:71:0e:e6:75:2c:f1:e6:df:
86:1c:94:1f:cc:c6:ca:17:f8:c0:0e:f9:92:eb:0b:
8e:b3:8b:bb:eb:6a:39:32:1d:b1:5d:90:6d:48:7c:
33:ff:13:33:be:05:f6:ca:d0:ea:7c:21:a7:58:5b:
4e:1b:4a:83:4c:2c:37:4e:e9:c9:2a:c8:aa:0a:f1:
d3:18:e1:0e:e9:81:8e:80:60:97:dc:de:af:e9:7b:
96:75:9e:22:d0:47:5b:97:e6:38:80:33:7b:f6:45:
ee:53:10:e6:16:33:4b:55:f4:88:f2:53:f6:dd:0b:
a4:cf:64:9a:8d:26:bd:46:bd:91:81:0f:db:3a:42:
a6:3d:ce:e7:6e:6b:36:88:e4:e6:9e:d9:4b:c7:37:
8d:17:e2:12:c8:10:e6:63:4d:4a:e3:3f:32:f1:a0:
c2:2f:bc:ee:c0:73:6a:20:bd:f1:8e:f0:b8:a8:bb:
d0:70:35:9e:dc:ce:01:a8:8e:0d:e8:db:78:d5:3e:
81:09:8f:d7:2f:81:4e:93:89:55:e7:06:ac:a2:69:
97:b7:30:ce:47:28:06:ed:f6:cd:cc:23:91:1a:bf:
cf:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:89:1A:4C:63:AE:4B:42:29:DD:10:D4:20:BE:FE:C4:1D:C2:F4:79
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131352e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
82:b3:d3:9e:90:a6:8b:a1:c8:3e:ab:8b:8a:9f:54:45:1a:97:
d3:09:2f:de:66:74:ad:6f:e6:0f:02:ee:41:f7:41:c1:54:52:
db:8c:39:90:1a:41:25:79:57:ef:d7:1d:d2:4e:6a:d2:18:3a:
9e:4b:e3:55:03:35:c0:58:d3:eb:82:f3:4d:b9:cc:b2:15:0f:
02:46:a1:b7:76:ad:72:cb:ba:05:de:c1:98:31:dd:c2:af:c6:
71:02:7e:53:4b:65:d6:4c:fa:78:f2:b0:f0:74:2c:0b:8c:a3:
9e:86:ec:4c:6a:c1:7b:52:b2:c2:ca:7b:00:96:d3:14:d1:42:
87:5d:dc:7c:0c:59:5b:ae:cb:04:a2:05:26:40:42:fe:ea:b3:
70:38:01:c1:be:b8:bf:ce:52:9f:d7:eb:f3:d5:29:60:45:ee:
5e:75:6d:28:91:8a:98:fd:46:9c:9f:05:d9:a9:67:73:00:eb:
da:bb:7f:54:e1:10:ac:8a:78:cd:31:49:30:34:19:4c:99:47:
67:06:8c:c8:e6:4f:94:61:7c:57:c2:c7:46:51:fe:72:f4:78:
aa:29:20:7c:d6:7c:d9:5c:3a:95:3b:ea:cd:6a:e8:55:ee:a1:
ad:09:6f:8b:1b:7d:2a:64:06:9f:c3:77:97:e7:ab:af:16:0c:
36:dc:6c:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:46 2026 by rpki-client