
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa
File: 3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: KuR9AyrSwu2p75Chpfxj8Z25juukqc+2zlINRNUDjZI=
Subject key identifier: 47:C8:F3:0C:F0:D6:49:32:92:F3:92:E2:AE:8D:21:9E:ED:62:8E:1B
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 2B6F75D8D887695EE5426C4C0D9BB03BAD7DFD12
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa
Signing time: Wed 15 Apr 2026 07:47:04 +0000
ROA not before: Wed 15 Apr 2026 07:42:04 +0000
ROA not after: Wed 14 Apr 2027 07:47:04 +0000
asID: 58466
IP address blocks: 139.198.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:6f:75:d8:d8:87:69:5e:e5:42:6c:4c:0d:9b:b0:3b:ad:7d:fd:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:42:04 2026 GMT
Not After : Apr 14 07:47:04 2027 GMT
Subject: CN=47C8F30CF0D6493292F392E2AE8D219EED628E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2b:21:9a:b9:14:77:a2:eb:ac:68:fe:82:49:
99:3e:e4:46:6d:c8:09:1f:4e:8b:bc:83:cf:80:da:
89:10:27:f8:2b:28:55:13:42:01:11:e8:9b:cc:d7:
e4:9e:c3:87:84:67:74:3f:ea:0d:ce:b6:d7:15:d3:
cd:8f:21:91:5a:38:0b:17:31:5d:da:7d:10:4c:06:
26:37:f1:f1:9e:ec:c3:aa:bf:9a:88:bf:9c:e7:40:
1a:d3:e5:ab:f4:de:52:da:2a:eb:b7:ee:4e:ea:fe:
5b:19:b7:71:f6:30:e2:5e:f2:69:a3:30:eb:51:31:
4c:5a:4d:e4:f9:77:e7:57:75:8c:58:43:f6:95:c6:
1b:74:64:10:0c:e2:9c:7e:a5:a4:00:ed:ce:94:43:
28:2b:ee:02:ac:12:94:38:e3:eb:bf:d0:3f:37:f1:
c5:11:a3:df:68:60:98:3f:c1:e9:c0:db:26:2a:37:
16:b9:48:57:12:9c:77:a1:9e:3a:9b:52:40:1b:18:
cb:e2:28:34:46:9d:2f:29:ae:64:c8:07:41:4a:6e:
d4:d0:59:67:8e:ee:26:03:dc:b6:17:95:3a:af:57:
2b:a4:00:56:88:81:7a:04:d0:73:7c:51:f6:e9:0f:
5b:0f:28:29:90:3d:f9:2f:0f:83:24:76:ad:b2:a5:
5d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C8:F3:0C:F0:D6:49:32:92:F3:92:E2:AE:8D:21:9E:ED:62:8E:1B
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132332e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.123.0/24
Signature Algorithm: sha256WithRSAEncryption
19:fa:1e:9b:62:fb:76:8e:4d:52:5e:5f:a1:9d:f1:90:ac:cd:
82:10:3f:ee:b5:ed:9a:80:28:6e:52:30:81:1d:d9:17:0f:99:
8b:1a:e8:17:9d:37:d4:50:ba:0a:28:e3:64:c7:c3:bc:2d:d0:
bb:4b:a0:b8:7b:b6:d9:84:78:d7:f9:e0:e3:8e:3f:e0:9a:ce:
47:c3:40:48:38:b7:00:ca:12:da:d6:27:e5:67:6f:26:ca:28:
99:bb:80:b8:f2:c0:04:83:22:3d:70:df:3c:22:22:8a:57:9b:
1a:6f:a1:92:23:b9:eb:45:fa:6d:e3:cf:db:f9:d5:6e:fd:09:
a4:05:9a:6c:d0:10:8c:61:68:a6:a8:45:b0:3d:38:8c:9a:a3:
71:83:fc:34:88:e6:0f:15:8e:45:bb:39:b4:e7:11:8e:f2:c5:
53:93:f7:31:bc:1b:9f:58:1b:e2:ba:3e:8d:e3:83:fa:52:b7:
45:c5:fb:c8:2e:2f:66:6c:bf:08:b7:09:cb:2e:33:08:17:d6:
68:5e:c2:20:5a:82:e8:a2:d0:c8:9c:78:c0:fa:7e:a7:73:8c:
01:7e:a3:77:bd:7d:9b:cc:fc:6b:04:ab:6e:8a:1e:4b:4a:03:
4f:ae:b3:f1:39:30:eb:10:32:58:49:c1:e3:b6:d9:be:9c:a4:
7a:4e:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:29 2026 by rpki-client