
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131352e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e3131352e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: c30GtkwEelrGm/wEXfWLR+1CPjDqfMywcDExT4E3ZR8=
Subject key identifier: 1D:B6:A0:55:B4:EE:A5:A2:70:B0:B9:C7:38:67:15:02:D1:DD:C7:3E
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 229688B3D669E9EB7FF7AB676E3AFAF1849EB18F
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131352e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:27:29 +0000
ROA not before: Wed 15 Apr 2026 07:22:29 +0000
ROA not after: Wed 14 Apr 2027 07:27:29 +0000
asID: 59078
IP address blocks: 139.198.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:96:88:b3:d6:69:e9:eb:7f:f7:ab:67:6e:3a:fa:f1:84:9e:b1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:22:29 2026 GMT
Not After : Apr 14 07:27:29 2027 GMT
Subject: CN=1DB6A055B4EEA5A270B0B9C738671502D1DDC73E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e4:9a:58:25:db:ee:30:f5:41:8e:c9:4b:c5:
f8:60:73:75:c9:56:91:85:7e:b3:99:c5:ed:24:1e:
65:e8:38:7f:05:48:fd:19:cb:1a:ee:b1:b0:45:6c:
15:1c:d7:c1:d6:3c:10:56:6c:17:33:68:e4:4c:e0:
40:bb:fd:5e:80:39:50:cd:0f:06:f7:40:51:8d:b9:
dd:50:8a:6c:12:4d:8f:7a:49:78:b2:27:f3:71:1d:
d5:02:13:ba:85:19:a5:14:19:54:a3:e3:98:18:2c:
dc:e7:f3:58:8a:fb:55:0f:85:32:6f:77:43:6b:83:
3b:6f:3b:31:36:35:af:51:3e:27:d2:28:89:0b:8f:
2a:e3:cd:af:ae:e2:6e:90:f3:14:83:d9:87:56:af:
9b:c0:31:fa:0e:68:a3:3e:0c:e8:d5:83:8b:79:da:
56:ed:9a:30:3c:36:31:03:0e:a7:1b:3a:75:c8:a5:
53:30:f2:a7:0e:39:e4:ff:05:27:15:28:a4:c0:f7:
f4:3b:4a:8b:db:70:b0:cb:34:47:3c:fe:dd:d2:ff:
7d:4d:6e:89:46:86:01:22:e7:34:5a:ad:80:7e:d5:
03:d0:4d:ba:bd:54:ae:5b:ae:ff:db:3f:c5:cd:76:
a6:37:ea:b6:47:25:d3:c7:f8:1d:52:41:c6:d5:86:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B6:A0:55:B4:EE:A5:A2:70:B0:B9:C7:38:67:15:02:D1:DD:C7:3E
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131352e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.115.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:96:29:f2:78:ea:27:39:66:e7:b0:de:26:73:f5:ef:79:e9:
3a:61:6b:2a:b4:8b:b8:ce:45:df:0f:6b:16:8a:5c:c8:3d:9d:
31:2d:d4:2d:09:d1:dc:09:35:11:b0:ec:bd:64:f0:7f:ea:84:
27:41:82:48:c9:3d:9d:9f:31:5d:bc:00:dd:70:42:01:80:ad:
aa:ab:f9:5d:72:4e:91:30:b7:95:ff:91:ef:9a:f7:08:fc:7f:
2a:27:d3:32:fe:4c:02:d6:f8:bd:0e:7c:08:b1:05:1e:17:dc:
3c:22:11:c2:45:bb:1c:e6:f4:70:1f:87:64:44:fd:54:a4:fe:
12:23:2b:26:96:d5:d6:5f:c4:78:b1:5d:d3:17:53:ce:bf:d5:
99:3e:ae:25:5d:e6:4f:dd:9c:cc:cf:2e:03:f1:4f:4c:b7:91:
e3:35:75:63:80:7f:4a:46:12:a0:d6:3d:2e:7e:ff:73:18:04:
b7:9f:07:dd:fe:b8:4b:ea:d2:85:f1:7b:08:ef:0c:7e:35:c4:
fa:19:b1:d6:0b:86:12:ee:c6:13:94:b4:ea:25:de:e5:2c:a1:
47:a9:05:02:62:64:6e:e4:fe:ce:4f:a4:ce:b8:a8:9e:af:2b:
ae:8b:59:b2:c5:9c:93:83:30:b3:31:27:37:a9:9d:d0:f3:f8:
fe:80:51:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:24 2026 by rpki-client