
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131372e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e3131372e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: 0eclcVFJWO6p8MEDwMj3cCBM+lFXb7/g0Er0kvvkBx4=
Subject key identifier: 0B:E9:7A:1F:AF:C4:A5:EB:48:0F:82:4B:E7:4D:73:D5:D3:5A:DC:36
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 7E881A9FC075478FE3EA548E901FB37D88B21EAC
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131372e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:27:30 +0000
ROA not before: Wed 15 Apr 2026 07:22:30 +0000
ROA not after: Wed 14 Apr 2027 07:27:30 +0000
asID: 59078
IP address blocks: 139.198.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:88:1a:9f:c0:75:47:8f:e3:ea:54:8e:90:1f:b3:7d:88:b2:1e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:22:30 2026 GMT
Not After : Apr 14 07:27:30 2027 GMT
Subject: CN=0BE97A1FAFC4A5EB480F824BE74D73D5D35ADC36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ca:46:6c:90:57:fe:c7:86:7f:98:b0:3e:fd:
ac:9a:30:cb:93:c8:d5:a6:84:5e:a7:08:df:96:23:
72:d9:3f:13:24:0d:aa:1e:9b:e4:66:24:e9:52:88:
02:3f:3f:8f:92:58:70:6e:55:ad:36:d7:7d:2c:34:
38:05:7f:51:55:28:09:d6:99:af:7c:ad:a6:e3:bb:
2e:57:24:7a:9a:36:73:51:79:0c:dc:58:71:48:20:
26:33:32:e1:dd:25:d7:49:b5:18:d0:3c:c3:f7:84:
85:24:66:d2:3c:db:6e:1e:f3:3c:05:cf:8d:4a:f7:
c5:68:d9:79:cd:d9:c8:1c:0a:78:60:c1:03:a0:cc:
3b:62:60:9a:b1:5e:c7:0c:06:d5:8d:0c:6d:dd:c0:
06:8b:91:61:fe:9a:f0:12:93:29:ab:30:c6:10:a3:
23:3a:db:6f:3e:e2:48:69:02:d6:c8:25:9c:52:12:
ef:31:07:f9:6e:5d:35:03:60:a8:67:b4:5f:ba:34:
3a:3b:a3:de:cd:24:84:89:a9:2e:04:13:f6:68:36:
7a:bb:81:46:8b:69:58:32:17:e6:7e:ed:11:f1:a0:
e9:10:75:64:06:b7:24:80:bd:75:54:07:a2:bf:4a:
04:60:5c:56:da:22:89:8d:d8:de:a5:6a:47:1f:39:
24:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E9:7A:1F:AF:C4:A5:EB:48:0F:82:4B:E7:4D:73:D5:D3:5A:DC:36
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131372e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.117.0/24
Signature Algorithm: sha256WithRSAEncryption
79:4d:0e:ce:ec:c4:19:64:11:77:8b:88:17:b7:11:59:97:9b:
f2:0d:c2:c8:2b:20:51:1f:6f:c9:1a:e6:15:84:2d:e4:99:b3:
9d:d3:79:b2:9f:7d:d5:14:f6:26:9a:6e:13:b9:a3:ea:00:23:
40:c8:30:0e:2b:38:22:b1:bc:a8:ac:6b:ce:0b:47:22:1d:08:
64:69:0c:9d:f7:d1:38:70:44:a9:6e:1d:95:cd:dd:30:c8:6b:
97:be:a5:86:27:5d:33:93:a8:e2:f5:ca:a4:ae:d2:17:f7:a7:
fe:4d:6e:7e:dc:3f:65:ae:a7:73:17:75:fe:ac:51:c0:48:93:
29:45:ae:dd:89:90:04:b0:96:cf:e1:9d:b4:36:ba:80:56:e7:
84:ad:c6:d1:dd:80:89:95:d9:89:a0:35:22:1e:c2:61:4c:4b:
d6:a0:05:59:a2:f3:a4:2f:98:2a:f1:27:6d:f2:15:9c:1f:42:
e5:50:71:ef:bd:50:8e:9f:d3:04:92:ed:d0:4a:68:9a:74:e1:
a3:f5:22:eb:a5:87:29:a2:7b:57:76:84:5a:b0:4b:49:2f:31:
42:99:ab:a6:4b:f6:42:ae:ad:ac:2d:f6:b4:c0:20:28:9a:4f:
6a:24:a8:48:f8:55:c7:ab:97:16:7e:19:1d:bc:f6:4b:61:00:
82:d2:c8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:18 2026 by rpki-client