
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e332e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e332e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: k83lSWEbiSxa9JL5mntJJVJLzpaK1PIAoLrEeFvXsyQ=
Subject key identifier: 10:D0:0C:12:86:1D:87:59:5D:FC:68:45:42:45:D2:BC:81:36:14:6E
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 10F1421DD92B42CBAEBF7FFDC739CE14C9CE9C20
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e332e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:28 +0000
ROA not before: Wed 15 Apr 2026 07:16:28 +0000
ROA not after: Wed 14 Apr 2027 07:21:28 +0000
asID: 59078
IP address blocks: 139.198.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:f1:42:1d:d9:2b:42:cb:ae:bf:7f:fd:c7:39:ce:14:c9:ce:9c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:28 2026 GMT
Not After : Apr 14 07:21:28 2027 GMT
Subject: CN=10D00C12861D87595DFC68454245D2BC8136146E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:18:2c:6b:e0:af:f3:6c:b8:85:2f:2a:70:
53:10:61:83:bd:70:fc:c7:5f:41:dc:7b:c4:3a:2e:
19:84:a1:03:d4:7b:bf:62:e3:e7:c0:ac:7e:b0:31:
fd:55:27:47:35:75:26:a8:40:49:41:95:56:6a:6c:
7d:9b:46:88:51:d8:73:6c:0b:6f:a4:a4:b4:dc:44:
9a:26:7e:03:4f:af:45:93:17:6e:f3:1d:d4:03:ac:
6f:80:14:e3:c9:95:55:79:62:fa:9e:ad:30:39:f2:
24:3d:b9:5a:4a:b8:ed:72:59:94:e0:67:08:7c:00:
d5:9e:e6:97:02:0d:69:f6:0e:dd:5e:3d:a3:0d:51:
97:40:64:7e:6b:e3:89:a8:e0:c7:fe:f0:b6:1e:63:
33:5b:d6:5b:5a:80:d9:d8:51:7b:93:8f:34:b9:a1:
49:c0:0c:93:79:5e:37:6f:7e:52:df:61:ba:05:97:
ac:cd:24:05:8c:2b:30:ef:02:94:41:7b:2c:ba:97:
08:65:49:26:c5:00:22:cc:b7:d6:46:7c:99:eb:ba:
ce:04:ca:e6:55:21:5a:f9:e9:5f:0a:0c:fd:37:87:
fa:67:4f:e8:bb:ff:75:62:6c:8f:a8:e2:21:4e:73:
df:5e:7a:63:b2:cf:31:09:13:b1:44:de:90:eb:a7:
a2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D0:0C:12:86:1D:87:59:5D:FC:68:45:42:45:D2:BC:81:36:14:6E
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e332e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:73:71:f6:43:ce:1b:78:1e:0b:b5:9b:17:12:ed:06:05:f0:
b6:3c:e9:a8:02:b5:ff:68:a9:04:c9:bd:4f:e2:35:57:aa:34:
78:5a:54:0d:ef:ad:71:44:30:59:b9:09:cf:05:59:ac:6b:33:
b2:4f:22:a6:a0:b1:53:54:59:90:00:6f:5e:4b:eb:ac:1b:77:
fd:bb:99:4c:36:81:7f:bf:05:75:d8:9d:a2:c6:aa:9c:7a:de:
4f:1f:01:bc:7c:e7:bc:f4:10:7b:d5:6a:5c:3a:0c:39:fc:d4:
55:38:eb:b2:b0:f0:e2:f4:d6:27:d6:27:a8:b7:2e:d7:82:ce:
25:0c:9b:84:9b:32:9e:07:78:94:44:cc:cd:06:ff:b8:12:41:
91:26:d2:14:46:c3:30:aa:d2:8c:36:60:03:06:98:11:df:07:
c0:21:64:8a:36:90:1f:7b:df:a4:6d:1d:33:e6:1d:49:3f:a0:
76:85:32:65:78:f2:f2:c7:54:64:9f:3a:39:28:cd:c6:7d:b9:
a3:93:6b:d5:c7:8e:70:7b:c2:df:05:82:c7:26:d8:0c:c2:a1:
80:2f:f2:5b:cf:73:80:4e:d2:48:aa:51:0a:f6:e9:ca:a4:b2:
b0:84:b2:07:28:24:f6:07:29:ff:00:46:aa:18:a3:5d:8b:89:
a3:bf:b7:5e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUEPFCHdkrQsuuv3/9xznOFMnOnCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIz
RUJEMTBDQTAeFw0yNjA0MTUwNzE2MjhaFw0yNzA0MTQwNzIxMjhaMDMxMTAvBgNV
BAMTKDEwRDAwQzEyODYxRDg3NTk1REZDNjg0NTQyNDVEMkJDODEzNjE0NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0xBgsa+Cv82y4hS8qcFMQYYO9
cPzHX0Hce8Q6LhmEoQPUe79i4+fArH6wMf1VJ0c1dSaoQElBlVZqbH2bRohR2HNs
C2+kpLTcRJomfgNPr0WTF27zHdQDrG+AFOPJlVV5YvqerTA58iQ9uVpKuO1yWZTg
Zwh8ANWe5pcCDWn2Dt1ePaMNUZdAZH5r44mo4Mf+8LYeYzNb1ltagNnYUXuTjzS5
oUnADJN5XjdvflLfYboFl6zNJAWMKzDvApRBeyy6lwhlSSbFACLMt9ZGfJnrus4E
yuZVIVr56V8KDP03h/pnT+i7/3VibI+o4iFOc99eemOyzzEJE7FE3pDrp6LFAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUENAMEoYdh1ld/GhFQkXSvIE2FG4wHwYDVR0j
BBgwFoAUAftWCf0qpWetevac0gzEqz69EMowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDUyMzY1MS8xLzAxRkI1NjA5RkQyQUE1NjdBRDdBRjY5Q0QyMEND
NEFCM0VCRDEwQ0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvMDFGQjU2MDlGRDJBQTU2N0FEN0FGNjlDRDIwQ0M0QUIzRUJEMTBDQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzEvMzEzMzM5MmUzMTM5
MzgyZTMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzOTMwMzczOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAIvGAzANBgkqhkiG9w0BAQsFAAOCAQEAt3Nx9kPOG3geC7WbFxLtBgXwtjzp
qAK1/2ipBMm9T+I1V6o0eFpUDe+tcUQwWbkJzwVZrGszsk8ipqCxU1RZkABvXkvr
rBt3/buZTDaBf78FddidosaqnHreTx8BvHznvPQQe9VqXDoMOfzUVTjrsrDw4vTW
J9YnqLcu14LOJQybhJsyngd4lETMzQb/uBJBkSbSFEbDMKrSjDZgAwaYEd8HwCFk
ijaQH3vfpG0dM+YdST+gdoUyZXjy8sdUZJ86OSjNxn25o5Nr1ceOcHvC3wWCxybY
DMKhgC/yW89zgE7SSKpRCvbpyqSysISyBygk9gcp/wBGqhijXYuJo7+3Xg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:13:13 2026 by rpki-client