
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31322e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e31322e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: FVgOjPORCP81rmR6zu8DgLNOVtMzr8Ivr1T4+QtqFcg=
Subject key identifier: 12:4C:1F:B3:CD:18:A3:67:9D:99:99:0F:86:FF:F4:CD:C8:7A:E2:F5
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 15FD7A71335E35746FF6BB5D3A9D0C5243A94F70
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31322e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:27 +0000
ROA not before: Wed 15 Apr 2026 07:16:27 +0000
ROA not after: Wed 14 Apr 2027 07:21:27 +0000
asID: 59078
IP address blocks: 139.198.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:fd:7a:71:33:5e:35:74:6f:f6:bb:5d:3a:9d:0c:52:43:a9:4f:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:27 2026 GMT
Not After : Apr 14 07:21:27 2027 GMT
Subject: CN=124C1FB3CD18A3679D99990F86FFF4CDC87AE2F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:fb:2e:27:bb:36:3e:2c:be:6f:5a:fb:5d:
97:bd:bd:c7:9d:f8:e3:a8:28:4c:b8:7c:ac:c4:17:
92:e5:98:3b:c0:92:cc:7d:c5:53:bb:57:a3:59:d9:
ce:66:98:ca:17:e6:b3:bc:55:2c:0a:98:65:72:e7:
51:d0:cf:ae:05:19:f4:d3:d4:b4:43:aa:0b:40:32:
07:48:9e:9e:de:e0:12:44:29:13:e8:69:2e:cc:90:
ec:68:c0:9f:17:4f:94:ea:6e:55:50:69:21:c5:09:
36:19:68:2d:96:21:d5:f9:5c:85:4b:59:71:b4:d7:
d6:9e:6c:91:de:e3:3e:dd:99:b6:74:bd:09:bb:20:
ad:e5:5c:d0:fd:0c:4b:5f:ee:d6:1a:a3:51:b2:d5:
6c:2e:ed:4b:70:d7:90:8c:51:33:eb:55:e1:43:74:
c6:64:52:98:d1:1f:5c:3a:e8:61:63:1e:31:9a:ee:
e3:6e:0f:6f:63:d8:72:b6:5c:e0:11:fe:5f:88:45:
aa:43:f6:7c:a8:9b:99:36:88:d5:20:9b:4e:92:cb:
9e:5d:fa:fc:da:97:a0:9f:7d:c3:0c:0e:34:d3:40:
1c:f8:36:26:6a:af:e6:35:2b:c3:a4:48:f4:ae:73:
0f:5c:99:09:ef:7e:2a:86:69:50:59:a6:79:9a:76:
00:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4C:1F:B3:CD:18:A3:67:9D:99:99:0F:86:FF:F4:CD:C8:7A:E2:F5
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31322e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:50:d9:75:66:11:4c:ff:7b:11:cc:e8:d3:bb:17:c3:55:b2:
38:04:6a:09:d9:9d:00:9c:f8:04:66:9b:26:99:f5:43:c6:b4:
9e:82:e8:ad:2c:ed:8b:5a:61:4c:ae:df:e6:b9:9b:00:29:ec:
24:0b:66:15:47:b7:4d:b2:2d:97:ad:41:d8:c9:f2:1a:79:54:
b6:8a:76:0d:1b:0f:0d:15:cf:1f:97:0b:37:3e:a2:12:51:5c:
82:9c:33:32:e2:eb:68:b8:eb:b8:74:bf:3d:bc:e1:4a:22:9d:
79:fb:90:7b:b4:70:24:52:eb:18:1f:b6:14:43:2e:b7:bb:32:
8e:13:46:df:a3:0a:ab:b9:01:14:03:81:df:7d:ad:0c:7f:b7:
7f:55:a9:b7:61:d6:42:d2:0f:9e:15:0f:51:d6:b1:47:7e:3f:
21:da:13:3f:04:84:c7:20:88:51:09:0a:89:e6:e4:31:41:50:
b4:1c:54:42:a6:b9:ae:4d:21:99:8a:89:db:a9:7b:17:ff:42:
2b:12:ea:c0:5d:51:4a:9c:3b:bd:a3:b3:fd:f8:1f:cc:e3:9f:
44:0b:0e:e2:38:cb:dd:ae:f2:1a:dd:bb:4e:97:2a:9f:6e:28:
57:76:51:0d:3c:c6:d0:fa:75:e2:e8:72:7e:7e:92:e0:b7:f0:
e7:c0:5b:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:41 2026 by rpki-client