
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131392e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e3131392e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: w/+KbzSbHqZAjFdRvUKX+JLHx1YAcJ/gi9z2dEaOEJk=
Subject key identifier: 1E:01:84:2B:CF:B9:A8:28:50:3B:35:36:9C:54:B4:29:93:5D:66:22
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 3EBE70C8EA8C64FF48E2714D9A7D7C0A3080B353
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131392e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:27:30 +0000
ROA not before: Wed 15 Apr 2026 07:22:30 +0000
ROA not after: Wed 14 Apr 2027 07:27:30 +0000
asID: 59078
IP address blocks: 139.198.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:be:70:c8:ea:8c:64:ff:48:e2:71:4d:9a:7d:7c:0a:30:80:b3:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:22:30 2026 GMT
Not After : Apr 14 07:27:30 2027 GMT
Subject: CN=1E01842BCFB9A828503B35369C54B429935D6622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:9e:ad:19:dc:0b:b2:08:6c:bc:1c:b7:b8:
ce:e8:b4:d7:00:70:59:21:50:b4:f6:48:62:24:2d:
d4:a2:38:36:e3:67:e2:bb:b0:f0:3a:29:2a:58:a2:
3b:4d:a7:3f:80:5c:f8:81:d3:89:dc:eb:73:a1:48:
41:d9:49:c7:c6:b3:3f:21:5f:ee:ce:8b:56:64:42:
91:8a:10:e9:1b:07:c8:ad:ce:8d:42:b3:79:77:3c:
78:2b:4d:11:9c:20:4e:39:07:90:f7:7b:76:d0:80:
58:e7:b1:56:1d:6a:18:d7:c4:16:83:8a:2f:3f:d5:
d2:6b:79:5b:83:ee:f5:2b:27:e0:82:48:8f:07:cc:
8d:7e:ea:da:a7:52:b0:f7:ae:fd:59:2c:8e:a3:75:
6f:bd:85:f4:fd:4f:1c:52:c2:5b:c5:5c:fc:e5:46:
61:01:fa:f8:99:10:8c:1a:ed:e5:90:62:66:c7:cd:
4d:a7:b6:eb:ab:aa:cf:d2:69:38:0d:ec:2f:8f:dc:
9d:f1:59:68:12:46:e1:65:ee:23:35:74:99:95:d5:
6c:b4:b5:39:b2:39:27:da:9b:b0:6e:2e:ca:e3:f6:
3b:52:18:5a:37:a2:07:ec:96:c3:b8:81:13:c6:96:
3c:4b:0b:ee:1b:08:8f:e9:77:56:8e:82:c6:07:79:
02:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:01:84:2B:CF:B9:A8:28:50:3B:35:36:9C:54:B4:29:93:5D:66:22
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3131392e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:d9:ac:c9:e4:3b:f1:47:48:be:f0:99:ec:9b:c9:78:53:69:
c9:0e:db:91:9e:d7:6c:95:21:20:26:e4:bf:e1:e2:d6:70:1b:
6d:ff:a2:d3:ff:34:89:5b:84:00:33:2a:53:43:98:a0:3b:c3:
ce:8f:34:fd:16:52:4a:38:7e:70:40:f5:17:28:c1:a0:0b:0c:
94:80:29:64:21:3e:73:16:d4:3a:3b:e6:1e:b0:47:f8:96:23:
48:c7:c9:99:1f:b0:5c:f6:60:ac:8b:91:e7:e2:ab:5b:e3:77:
92:fc:e9:b7:72:bd:16:08:69:ce:98:90:11:6a:bc:f8:97:46:
0e:76:bb:8d:bb:ff:8e:06:01:d7:49:91:7c:7f:38:47:f3:0c:
1b:e6:0f:6a:f5:1e:71:32:b0:02:8c:89:ac:a3:35:f4:b6:8a:
65:b0:bf:00:ea:a4:20:e7:d3:5b:8f:dc:17:78:c5:7f:4d:eb:
b9:5a:a9:4d:39:03:65:2d:71:fd:1a:9e:a5:a5:c7:95:b9:70:
e0:b2:4b:a2:08:f9:8a:c7:28:fe:7a:f2:c0:1c:32:12:5f:7b:
f6:f2:a8:d7:dd:a3:6d:ce:76:66:e2:c9:55:62:2b:04:54:d8:
a6:9c:b9:5d:7b:44:e6:78:37:9e:68:35:bb:2a:3a:f2:c6:5f:
a0:64:9f:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:12:44 2026 by rpki-client