
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31332e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e31332e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: k/lgB19C0/8Savh4Ct2yq/H2FRTSb7hUKTKRsGFRq70=
Subject key identifier: D4:D9:67:3C:84:91:78:84:B8:98:3D:D3:1C:A7:9B:AF:15:6A:CE:41
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 498745FB2AA342FC4AD7E3B34FE4D6CA800DE107
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31332e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:28 +0000
ROA not before: Wed 15 Apr 2026 07:16:28 +0000
ROA not after: Wed 14 Apr 2027 07:21:28 +0000
asID: 59078
IP address blocks: 139.198.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:87:45:fb:2a:a3:42:fc:4a:d7:e3:b3:4f:e4:d6:ca:80:0d:e1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:28 2026 GMT
Not After : Apr 14 07:21:28 2027 GMT
Subject: CN=D4D9673C84917884B8983DD31CA79BAF156ACE41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:32:e7:82:a8:b7:ff:f3:33:20:a5:1f:54:
de:31:7d:60:41:fd:0e:2d:32:f3:7a:7c:7b:b9:c2:
b2:44:ab:12:a2:d3:f1:67:be:2b:d5:5e:ec:52:aa:
37:68:0f:2a:37:08:46:c8:bd:78:99:72:00:01:73:
44:79:0b:34:0c:26:fd:d4:4e:d4:e1:44:99:90:c7:
f2:a7:aa:d9:e1:3b:ef:1d:4c:96:16:58:9e:58:3e:
b8:ed:70:95:f5:4e:38:7c:7d:37:b5:61:ea:a2:16:
24:3c:99:0b:8e:f2:a5:e5:84:6f:0d:a8:28:70:78:
52:c0:42:81:31:6f:e1:88:91:9e:1b:3f:ac:f5:00:
87:d6:ae:b5:cb:f3:70:02:9a:30:c0:8f:2f:cb:c8:
e7:3f:a4:c0:21:4b:fc:74:c1:fa:77:31:58:87:13:
97:2b:b2:9b:7e:39:41:3d:0f:49:ed:73:e6:a6:2f:
ac:92:1f:03:d2:48:ff:2f:c7:44:ff:10:cb:8c:54:
f3:bf:45:fb:16:1e:a7:88:ab:2f:97:18:68:ce:12:
e9:c9:97:21:2d:64:1f:22:10:37:50:6a:c1:0b:1e:
3c:4b:9e:a6:17:52:55:9c:e6:d7:e5:e4:e8:bd:8f:
b1:4c:b1:b9:ba:21:90:c5:6e:27:0a:d6:11:07:4b:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D9:67:3C:84:91:78:84:B8:98:3D:D3:1C:A7:9B:AF:15:6A:CE:41
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31332e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.13.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ab:f5:89:ae:b1:d0:f3:3e:cf:4e:40:a5:f3:a2:9d:34:d8:
7d:5b:00:1a:ce:b9:15:16:66:82:83:8d:b1:eb:53:7d:9b:68:
8c:2b:26:f9:29:15:20:da:64:6e:b7:e4:37:20:13:9f:4a:1c:
a5:23:7b:3e:1b:d2:77:df:57:81:e4:94:b9:1b:20:ee:3f:32:
8d:ca:6e:72:97:39:a1:83:45:b3:a3:ef:06:81:81:fa:f4:f5:
59:ad:bf:0c:85:91:14:66:a2:cf:fb:c6:eb:d9:fa:f8:55:f8:
cd:3e:96:d9:27:f9:54:1c:f9:4b:ce:17:68:b6:21:f4:0e:4b:
7c:1c:9a:c5:7f:a3:10:4b:78:8f:59:f4:b8:35:32:7a:fc:a8:
de:ce:f1:82:c2:7e:64:3e:ec:7a:ff:64:c3:57:bf:78:da:c7:
28:d6:16:b2:43:c9:a7:cb:cb:ac:c1:88:f1:36:46:cc:72:40:
79:d4:16:2e:a7:eb:ea:29:b7:5e:8c:78:68:e4:84:e9:90:84:
e8:41:0d:6b:53:67:ea:32:cb:20:77:63:34:20:be:c3:96:f4:
d4:62:52:f5:24:c1:b5:36:50:06:57:22:da:a8:6b:a2:eb:79:
a4:01:9c:24:00:df:f6:18:13:8d:71:14:36:b5:93:ab:3a:8e:
33:63:63:a2
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSYdF+yqjQvxK1+OzT+TWyoAN4QcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjA0MTUwNzE2MjhaFw0yNzA0MTQwNzIxMjhaMDMxMTAvBgNV
BAMTKEQ0RDk2NzNDODQ5MTc4ODRCODk4M0REMzFDQTc5QkFGMTU2QUNFNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXzLngqi3//MzIKUfVN4xfWBB
/Q4tMvN6fHu5wrJEqxKi0/FnvivVXuxSqjdoDyo3CEbIvXiZcgABc0R5CzQMJv3U
TtThRJmQx/KnqtnhO+8dTJYWWJ5YPrjtcJX1Tjh8fTe1YeqiFiQ8mQuO8qXlhG8N
qChweFLAQoExb+GIkZ4bP6z1AIfWrrXL83ACmjDAjy/LyOc/pMAhS/x0wfp3MViH
E5crspt+OUE9D0ntc+amL6ySHwPSSP8vx0T/EMuMVPO/RfsWHqeIqy+XGGjOEunJ
lyEtZB8iEDdQasELHjxLnqYXUlWc5tfl5Oi9j7FMsbm6IZDFbicK1hEHS/iBAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU1NlnPISReIS4mD3THKebrxVqzkEwHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDUyMzY1MS8xLzMxMzMzOTJlMzEz
OTM4MmUzMTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAIvGDTANBgkqhkiG9w0BAQsFAAOCAQEAYav1ia6x0PM+z05ApfOinTTY
fVsAGs65FRZmgoONsetTfZtojCsm+SkVINpkbrfkNyATn0ocpSN7PhvSd99XgeSU
uRsg7j8yjcpucpc5oYNFs6PvBoGB+vT1Wa2/DIWRFGaiz/vG69n6+FX4zT6W2Sf5
VBz5S84XaLYh9A5LfByaxX+jEEt4j1n0uDUyevyo3s7xgsJ+ZD7sev9kw1e/eNrH
KNYWskPJp8vLrMGI8TZGzHJAedQWLqfr6im3Xox4aOSE6ZCE6EENa1Nn6jLLIHdj
NCC+w5b01GJS9STBtTZQBlci2qhrout5pAGcJADf9hgTjXEUNrWTqzqOM2Njog==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:16:53 2026 by rpki-client