
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa
File: 3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: S7LRAwbGKLkJKPvLSEHaE2z2AJftYhJsjowcTFy8qjE=
Subject key identifier: E2:64:0C:3B:5A:E2:F7:5A:19:F9:27:89:B1:D4:B9:83:D2:1A:0E:15
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 755801060F253C3161BAFDE0A9FCAD426039C0D8
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa
Signing time: Wed 15 Apr 2026 07:47:04 +0000
ROA not before: Wed 15 Apr 2026 07:42:04 +0000
ROA not after: Wed 14 Apr 2027 07:47:04 +0000
asID: 58466
IP address blocks: 139.198.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:58:01:06:0f:25:3c:31:61:ba:fd:e0:a9:fc:ad:42:60:39:c0:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:42:04 2026 GMT
Not After : Apr 14 07:47:04 2027 GMT
Subject: CN=E2640C3B5AE2F75A19F92789B1D4B983D21A0E15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a2:43:11:5b:a7:0b:9d:90:74:95:29:1e:5f:
ad:2e:a3:71:99:53:d7:8e:c1:42:49:fb:2a:90:4d:
15:a4:0b:d2:1d:e1:ec:ed:17:55:bb:c6:65:2f:02:
24:77:c5:88:d4:21:1c:4e:a1:8e:d7:f9:59:e2:8b:
5b:14:33:a8:4c:f5:af:1b:93:0a:ea:95:39:ac:49:
56:bf:3b:9a:95:c8:4b:02:dd:f7:ed:29:22:c2:3a:
86:7b:41:32:fb:b2:f3:bd:7d:a0:32:01:bc:72:01:
f0:a4:df:b2:11:74:86:4d:db:d0:6b:a5:91:42:e9:
1c:95:47:55:25:cf:d3:43:59:fd:91:61:6b:9d:3f:
13:d1:7d:f4:27:39:79:c7:b8:b5:08:60:8c:65:cc:
b3:9d:ca:a8:de:18:a9:69:50:84:03:ee:21:70:d0:
9c:1f:2d:8e:41:f6:de:c1:ab:93:a6:6c:56:50:13:
bc:27:3b:32:fc:60:98:38:c1:97:5c:36:c5:a0:17:
41:f4:87:ce:4d:c6:53:8d:f3:db:ab:af:65:6b:3a:
76:85:0d:94:89:0d:6d:d7:7d:e5:fd:64:9b:d3:79:
63:d3:ba:e4:15:3e:1d:e0:40:51:61:0f:e9:bc:22:
13:ca:d6:6c:1f:dd:24:d4:5a:3e:c5:fc:68:6b:63:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:64:0C:3B:5A:E2:F7:5A:19:F9:27:89:B1:D4:B9:83:D2:1A:0E:15
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.118.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:da:63:d2:58:5a:81:3e:92:35:e0:1c:95:c2:b0:39:8a:df:
c7:f6:32:09:1f:a0:e7:f0:7a:6e:d9:69:57:6d:8b:06:11:12:
ce:50:de:10:3c:70:e1:bf:79:5e:09:38:14:ba:b8:23:fe:8b:
17:1d:92:09:f8:cd:ff:2c:e2:9d:e2:b7:25:4a:23:73:17:90:
f9:88:a0:d2:da:21:a9:f4:d1:bb:87:ea:bf:8d:10:48:d2:b7:
cd:ef:66:41:ca:e0:eb:b8:85:5d:78:b1:29:3c:85:bf:1f:fd:
a6:5e:32:48:93:56:d6:67:e3:e8:d9:b3:e0:30:01:4d:7f:31:
4a:e1:5c:01:ee:e0:22:b1:ec:9b:97:d0:0a:f1:4f:8e:9a:f6:
00:36:2c:eb:d8:64:19:ac:a6:46:3c:38:33:f1:67:05:5c:4d:
e5:02:ca:30:15:f6:85:ad:e0:e4:f9:48:41:74:35:f4:c8:2a:
a8:37:51:00:7f:12:2b:67:a8:e8:5d:8d:25:61:89:83:78:25:
81:7a:af:18:0e:d2:6e:63:71:e7:b5:cc:11:ec:5b:c9:68:bd:
af:37:e4:d8:e4:26:a8:5a:67:5b:a0:e0:0e:8f:69:86:90:19:
cf:53:3b:7a:90:7e:6d:8a:cb:30:48:76:ff:48:c6:06:ff:68:
96:15:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:26:58 2026 by rpki-client