
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31352e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e31352e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: ilx/5YF7fA/a2GlsCJe0+Wu5lcZMMzQfP0Z1hAAHMbE=
Subject key identifier: 57:41:C9:C2:70:9A:D0:00:C5:A0:68:72:D4:44:19:0A:8C:1E:59:87
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 6C8B579612CD1B5C1FD01C7DC7AD6B4A70416C38
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31352e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:27 +0000
ROA not before: Wed 15 Apr 2026 07:16:27 +0000
ROA not after: Wed 14 Apr 2027 07:21:27 +0000
asID: 59078
IP address blocks: 139.198.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:8b:57:96:12:cd:1b:5c:1f:d0:1c:7d:c7:ad:6b:4a:70:41:6c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:27 2026 GMT
Not After : Apr 14 07:21:27 2027 GMT
Subject: CN=5741C9C2709AD000C5A06872D444190A8C1E5987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a8:e8:0e:d5:15:87:d6:53:5c:62:7c:95:15:
4b:06:aa:4a:df:ca:b5:d4:1f:3e:e9:4e:b9:23:b4:
84:6c:43:3c:55:c3:03:e7:18:6e:1f:06:20:3c:b4:
ad:ec:e8:6a:12:d7:2c:74:47:24:9f:41:6d:9c:86:
3b:f1:a5:f8:7f:fe:c8:58:65:b1:68:27:c3:c1:ab:
be:80:b8:f1:a7:c4:91:8d:00:4f:b1:a8:b0:91:41:
a7:96:50:11:d2:13:07:9c:85:63:e8:2a:b5:85:a4:
31:b0:a0:a0:8d:71:ba:86:8f:a8:33:17:26:a7:26:
7b:77:0e:f5:df:ef:00:6f:f0:df:52:70:cc:cf:3f:
9e:0d:3d:29:67:8d:17:e0:3e:0b:28:33:f4:a0:6c:
a3:82:42:81:7c:65:40:ae:1e:8b:64:1c:ea:1e:d2:
9a:cf:15:97:1f:44:e1:bc:76:41:7f:0f:49:7b:6b:
1f:6c:c3:3a:40:22:49:b4:1a:5e:92:88:2b:04:dc:
ff:0c:19:ec:a9:14:09:82:32:5f:9f:84:d7:82:d3:
1f:c2:e5:ad:14:dd:40:f9:cb:ac:0d:76:39:f7:82:
30:d2:ae:24:9c:cc:50:63:0a:6d:cb:cb:9c:19:2c:
b4:a7:92:01:d6:91:2b:8a:ee:96:76:84:24:f4:dc:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:C9:C2:70:9A:D0:00:C5:A0:68:72:D4:44:19:0A:8C:1E:59:87
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e31352e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.15.0/24
Signature Algorithm: sha256WithRSAEncryption
18:78:32:2c:9d:cb:cb:27:63:c6:f7:8f:d0:59:05:46:c0:2e:
9c:5e:91:f4:cc:ad:9d:3a:2b:11:f7:7d:61:e4:33:95:4f:f4:
37:fd:f4:87:31:62:5d:24:5b:29:44:77:15:40:a9:d2:15:c3:
be:d1:c4:77:25:88:d2:88:6c:ad:f7:26:94:d6:c7:39:33:25:
20:49:93:87:3b:ca:a5:9c:f9:7e:13:d6:7b:62:55:1c:e7:7e:
65:ad:99:91:c1:18:44:e8:4d:7a:3b:83:25:74:32:d1:0c:c8:
2c:68:b6:06:1b:3a:05:d0:17:09:c8:9a:e6:d3:cb:9c:df:6d:
b6:5c:0e:fd:72:c4:b5:aa:ad:6b:03:b4:fd:4d:5b:c5:c9:93:
62:49:d0:ed:fc:96:6b:b8:8a:17:43:52:3b:c0:74:a3:17:91:
80:ff:c2:a6:39:4b:23:80:a9:6c:e6:95:18:9d:be:b9:5e:05:
b3:b8:0e:cc:23:e4:61:91:00:a5:b2:d3:bd:cc:41:ad:54:82:
cd:4a:a6:60:7c:46:08:67:ed:ff:ff:ba:cf:d8:42:10:4e:06:
c8:8d:04:4e:aa:4a:a4:a1:24:5e:0f:9b:09:55:6c:ad:2a:08:
79:ef:1f:68:51:dd:f2:c5:2e:c3:29:07:70:b3:61:20:a0:f2:
14:52:ee:ca
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:54:46 2026 by rpki-client