
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132342e302f32342d3234203d3e203538343636.roa
File: 3133392e3139382e3132342e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: /jxCu1pFvlg5JzinHgCm0VRvb4IA7vowxjU/CrqqMx8=
Subject key identifier: 2B:B5:C0:EB:C8:AC:CE:87:07:10:99:10:A5:60:7F:6B:BB:4D:3B:47
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 49DCCAC23606D3AFA2FB246DCA2B9379B8E1B7FE
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132342e302f32342d3234203d3e203538343636.roa
Signing time: Wed 15 Apr 2026 07:47:04 +0000
ROA not before: Wed 15 Apr 2026 07:42:04 +0000
ROA not after: Wed 14 Apr 2027 07:47:04 +0000
asID: 58466
IP address blocks: 139.198.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:dc:ca:c2:36:06:d3:af:a2:fb:24:6d:ca:2b:93:79:b8:e1:b7:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:42:04 2026 GMT
Not After : Apr 14 07:47:04 2027 GMT
Subject: CN=2BB5C0EBC8ACCE8707109910A5607F6BBB4D3B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:20:21:1b:24:29:e1:03:2d:7d:a5:ac:76:d5:
f2:79:18:f3:0a:2b:47:bf:95:76:18:f8:9b:5c:e0:
db:1f:f0:5c:f1:f1:d1:4d:22:c3:9c:f7:72:2b:dd:
3c:17:06:af:3c:3b:61:57:75:66:08:b1:37:e1:b8:
7f:ca:95:f6:c2:aa:68:95:6e:4d:ee:ed:88:a0:b1:
f4:2b:7e:b3:52:fb:a2:20:ff:6a:12:bd:56:f9:e1:
73:42:fd:e0:07:a7:aa:eb:7d:e7:b4:ca:7d:7b:82:
57:c8:92:a8:46:a2:c8:64:08:c1:9b:b9:3e:d1:e1:
ec:4f:a1:41:dc:1d:44:cc:d0:68:de:03:b0:67:9b:
7c:9d:59:4e:35:b8:f3:d1:76:b7:bb:bf:85:bf:97:
b3:98:7c:12:e3:85:52:d0:fd:ab:b6:79:61:e6:7c:
a6:fd:2c:e6:23:1f:50:8f:f2:97:83:55:14:d9:5c:
f2:cd:35:79:c1:00:d9:57:0e:c6:cc:47:c0:00:1b:
a6:87:f5:b5:28:43:aa:3e:86:0d:f7:df:80:a2:95:
66:c3:c2:0f:07:23:6f:6b:56:36:eb:81:22:a9:b8:
a6:2b:81:28:1b:fa:93:19:7e:82:57:fd:f3:c5:8f:
0d:13:bb:74:49:94:67:bb:4f:a9:94:0b:33:a7:bf:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B5:C0:EB:C8:AC:CE:87:07:10:99:10:A5:60:7F:6B:BB:4D:3B:47
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3132342e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.124.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:b1:39:fa:a7:cd:e9:f1:ff:71:7e:df:e2:cc:66:f9:20:53:
da:52:64:4c:fa:ef:81:ca:08:eb:4a:06:49:a6:bf:44:e4:f2:
6d:5a:3c:3e:fe:e3:0a:15:d6:f9:35:57:73:24:44:fc:ae:cc:
67:b6:da:2e:99:2d:e1:c5:c1:44:5e:24:33:7e:29:16:15:fd:
38:18:cd:85:00:5d:af:ca:52:fd:b8:46:21:29:01:6e:e3:44:
5c:67:1b:2d:89:5d:7b:22:f3:4b:8d:9f:65:7a:ea:c8:17:bd:
e8:e1:c6:5f:10:38:9a:96:b8:be:68:31:a5:1c:de:e5:94:82:
dc:3d:7d:03:a3:97:50:bc:32:a1:3c:df:c4:96:82:fb:a1:6b:
07:73:b3:47:46:f5:f1:79:c9:43:cc:69:4a:dd:4a:5f:b5:fa:
c9:fa:0b:b6:5f:4f:8c:92:29:6c:19:ac:63:d7:ab:7e:56:2d:
02:e7:a3:93:9a:7d:7f:32:6c:3e:6a:3a:da:c9:b5:19:7a:c9:
3d:70:24:09:d7:c8:33:30:00:f7:19:34:49:6f:9f:93:a1:d2:
ad:64:5b:ee:98:a8:4c:82:0c:2e:74:18:06:08:17:4b:2a:5f:
68:f4:2e:ea:80:64:fd:69:38:b1:e6:9d:b7:1f:f9:e7:ed:64:
69:bc:67:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:23:30 2026 by rpki-client