
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: v6NvPAJG+xje/O6jb6Yn0pp/mmzB9uXzfv1lAMok8EQ=
Subject key identifier: 8E:6B:C5:AB:F0:0D:CF:FF:2E:75:AF:1A:52:2D:04:CC:8B:95:57:C0
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 30B6C0848C437AD1374C16B1D1F3C66C5634F7A8
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:27:30 +0000
ROA not before: Wed 15 Apr 2026 07:22:30 +0000
ROA not after: Wed 14 Apr 2027 07:27:30 +0000
asID: 59078
IP address blocks: 139.198.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b6:c0:84:8c:43:7a:d1:37:4c:16:b1:d1:f3:c6:6c:56:34:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:22:30 2026 GMT
Not After : Apr 14 07:27:30 2027 GMT
Subject: CN=8E6BC5ABF00DCFFF2E75AF1A522D04CC8B9557C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ec:e9:3c:47:91:c3:f6:00:b4:16:53:e1:55:
b5:53:ba:a5:96:3d:97:9f:23:26:b6:7c:d4:c2:f2:
15:8c:eb:07:4a:07:32:b9:a0:93:ac:ce:9e:16:13:
27:59:cf:0c:f1:ba:39:5c:60:1d:89:f4:c2:f7:3c:
da:9b:c8:fb:3f:0f:e6:d1:12:41:62:92:51:61:d2:
1e:2c:1b:5c:37:21:83:39:b9:2c:b8:c8:09:c2:80:
30:bf:2d:78:c9:2b:3b:e2:cb:5b:65:91:a0:b3:19:
16:53:a4:2b:36:f0:9a:3e:db:18:3a:36:fc:40:43:
12:c9:e3:31:cf:84:54:52:3c:18:b7:17:e1:89:81:
70:70:62:47:ca:6e:7b:85:37:b3:0c:58:2c:6c:c2:
70:11:0c:7b:65:2b:85:9b:7f:be:ac:d5:dc:b8:91:
de:bd:5e:a1:74:ba:a3:a6:bd:ee:f1:b9:9f:b4:69:
8b:57:94:94:f6:5d:a5:86:09:6a:e8:95:16:06:db:
39:91:b7:7b:49:01:75:d2:3b:79:fc:12:1f:b7:25:
b3:48:99:18:8b:af:c2:b6:51:2a:31:c7:ef:7c:1b:
0d:c2:4e:3f:c3:53:49:82:bf:41:de:4c:ae:bd:e3:
20:67:6c:43:64:8c:1d:63:30:51:c6:58:a6:2e:44:
91:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:6B:C5:AB:F0:0D:CF:FF:2E:75:AF:1A:52:2D:04:CC:8B:95:57:C0
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131382e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.118.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:92:7f:d6:b6:87:96:9c:07:c5:da:f8:54:79:a5:b6:19:48:
0e:11:29:ab:21:80:f9:45:4a:fe:ac:05:68:9e:fd:3e:34:96:
b9:0e:21:01:77:d1:5d:83:a0:13:a4:f0:d4:db:62:8c:be:27:
0a:c7:d9:41:98:18:a9:f5:26:21:e6:cb:90:7b:43:84:d3:7b:
af:1a:e3:3a:88:a4:3b:ca:77:60:14:f2:51:d1:f4:ea:c6:0c:
c9:e9:7b:88:23:2f:87:51:7f:37:82:72:cd:7d:f8:11:fb:4d:
06:5c:29:c0:fb:34:0b:e9:cb:d8:7e:80:99:33:c5:3f:2f:c9:
72:0e:0a:ca:8e:61:0e:b1:a9:57:af:d2:cc:c7:da:e9:bf:a4:
c3:ba:8f:c5:8e:72:3b:cc:df:f9:49:c3:0f:f1:ed:16:9a:32:
08:12:09:b8:99:87:e7:d8:00:14:23:8e:3f:7c:68:d7:27:01:
00:2a:2f:81:78:f5:45:01:3d:d9:8e:21:c5:a6:09:23:8b:57:
46:b2:f3:1b:04:96:ad:25:1a:b7:a3:9d:8e:e5:e5:1e:4a:75:
2d:48:24:2a:4a:1a:4d:a5:d7:b2:d4:d9:b4:45:37:99:ea:8e:
14:f6:fd:69:d6:32:79:61:26:b7:73:13:d5:4b:3f:ab:4a:6b:
42:ab:ab:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:33 2026 by rpki-client