
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3138342e302f32312d3231203d3e203539303738.roa
File: 3133392e3139382e3138342e302f32312d3231203d3e203539303738.roa (raw, json)
Hash identifier: eFb2K/tyPzsfuSiimn1TG4OnQ1WmIHnP8c5mpvmGDE8=
Subject key identifier: 6C:5C:D5:FA:07:FF:5C:A0:7D:B9:5B:85:76:A5:7F:84:2D:0D:CF:A5
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 2A62B0A09287504E74ED2AAAE865FCEE2B5FD6D5
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3138342e302f32312d3231203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:27:30 +0000
ROA not before: Wed 15 Apr 2026 07:22:30 +0000
ROA not after: Wed 14 Apr 2027 07:27:30 +0000
asID: 59078
IP address blocks: 139.198.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:62:b0:a0:92:87:50:4e:74:ed:2a:aa:e8:65:fc:ee:2b:5f:d6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:22:30 2026 GMT
Not After : Apr 14 07:27:30 2027 GMT
Subject: CN=6C5CD5FA07FF5CA07DB95B8576A57F842D0DCFA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:17:7f:06:e4:d3:40:34:a3:c5:98:9c:ab:
ef:50:fa:94:98:96:91:39:e0:07:aa:01:4b:6e:ce:
72:75:d0:19:a1:53:f6:59:84:28:27:20:fd:e0:15:
23:a3:22:8a:af:35:15:94:82:eb:46:68:24:f9:d3:
2f:21:80:af:ed:75:89:85:9f:ab:6c:9c:5e:26:9a:
b1:c1:10:97:ec:23:d5:0e:1c:e7:20:35:a4:f6:94:
e0:61:2d:3d:70:c3:8a:2a:e6:6f:b6:23:2f:c6:34:
c4:8e:9a:1b:4a:bc:d0:78:94:10:55:f9:d7:ef:c4:
a2:df:a6:d7:91:51:49:e0:33:46:dc:2c:44:06:4b:
b8:62:10:dd:58:e9:d2:ed:11:ef:43:54:34:89:d1:
28:28:56:1b:4c:ed:9b:2a:37:5e:bc:b3:e1:ca:1a:
da:4f:2d:9c:98:30:6d:3c:fa:80:44:f9:0b:a2:d9:
86:97:8c:5b:16:33:53:90:7a:94:60:24:8b:32:54:
52:68:7f:24:2e:7c:ec:d1:69:63:2a:55:31:95:54:
e0:40:bf:cf:1d:60:c1:cd:57:73:6b:9b:5b:1c:c3:
e5:a4:ef:42:20:34:8a:c6:5e:44:16:94:15:ae:87:
27:64:18:1e:50:02:f3:31:8a:17:d4:64:6f:c1:4f:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:5C:D5:FA:07:FF:5C:A0:7D:B9:5B:85:76:A5:7F:84:2D:0D:CF:A5
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e3138342e302f32312d3231203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.184.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:b1:30:79:68:b6:ab:ab:4f:8a:4b:a1:8c:6d:da:fc:81:c3:
c2:99:a8:16:34:37:b8:92:6d:f8:09:7b:ca:f0:1a:25:cc:80:
4c:da:7b:8b:29:e5:61:4a:a2:1f:03:f3:2d:6b:5f:1b:6a:8b:
05:2c:c3:05:94:d4:f8:38:ec:aa:8a:3b:07:8d:cb:cf:5d:bd:
c9:ba:dc:ac:54:06:78:fd:5d:aa:c6:73:a8:e0:c3:f8:12:15:
54:fc:2d:7a:2f:a9:d6:f9:5b:7f:8d:91:3b:1c:d1:82:4c:1c:
5e:7d:d9:c2:50:20:a9:f9:52:f1:e2:ee:57:df:14:f0:4f:25:
12:96:98:9a:58:1e:7c:bd:54:7f:aa:01:cd:78:34:18:fc:5b:
88:f8:4c:0f:97:df:ed:e9:e6:28:54:f2:b2:9c:46:86:b4:7a:
e3:2d:33:09:1c:37:ff:8e:72:95:93:48:6e:f5:51:be:af:e8:
d9:aa:70:be:f4:6b:14:64:9b:a8:8c:6d:6d:86:80:da:94:d7:
c2:c6:96:0a:53:35:bf:83:a8:7f:da:7d:07:30:c6:fa:45:8d:
93:72:50:30:6d:da:e6:a7:28:fe:c3:47:06:6a:f7:e9:8f:96:
e9:15:9e:94:e9:0b:b0:78:ba:01:8e:ec:53:64:0a:a8:e5:b3:
bc:0a:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:30:08 2026 by rpki-client