
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e342e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e342e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: 4hQ4o4M1IMLKE83/4xMdvqkfPZNo56Wsx0tpR3Ox5dg=
Subject key identifier: 6D:EB:E8:93:D7:36:1C:EC:4A:49:0D:C1:7C:71:DA:42:EF:C8:0F:E1
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 0275E97778CDED3E611D66E069F190F398FC9002
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e342e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:28 +0000
ROA not before: Wed 15 Apr 2026 07:16:28 +0000
ROA not after: Wed 14 Apr 2027 07:21:28 +0000
asID: 59078
IP address blocks: 139.198.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:75:e9:77:78:cd:ed:3e:61:1d:66:e0:69:f1:90:f3:98:fc:90:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:28 2026 GMT
Not After : Apr 14 07:21:28 2027 GMT
Subject: CN=6DEBE893D7361CEC4A490DC17C71DA42EFC80FE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:9e:39:9f:32:eb:5e:94:d8:2f:66:5c:d8:
7c:47:3a:31:dd:40:6e:dd:82:e7:d5:6c:fe:ed:ef:
e4:95:19:8a:7f:55:47:f4:e5:9d:92:ce:fa:49:95:
7d:71:df:3c:9d:6a:02:f9:3b:45:74:61:a5:14:fc:
12:35:18:bb:e5:f8:2f:37:5a:ff:1e:bd:53:ce:1a:
7a:36:06:c0:90:b3:8d:82:4a:96:97:cd:6d:c1:4b:
de:d9:b0:bd:4c:a3:e2:f3:13:d7:95:2a:03:90:90:
24:e3:b1:5e:c7:55:ff:2a:5d:37:69:89:cd:31:25:
cc:ae:28:cd:89:22:e5:38:28:11:f1:ac:d0:3b:42:
f7:e2:f3:aa:f8:40:9d:51:8b:6d:9c:5c:3a:e5:42:
21:a0:b1:0b:86:2f:3a:58:2d:9d:14:e1:c9:b0:02:
55:62:1c:a0:ab:75:7e:09:14:90:41:c7:17:4f:d9:
3c:6f:6b:db:e7:60:9b:f2:7e:87:c2:09:27:d9:83:
b9:e2:d6:12:02:9f:7f:08:f6:4a:91:da:76:cc:2a:
99:75:d8:1f:d4:71:73:fa:6d:f5:de:61:93:90:25:
6c:40:19:6b:09:8c:e4:47:89:4d:09:8e:8d:48:75:
a3:3e:03:d0:e4:6b:c4:9b:fa:aa:f2:ff:ca:82:be:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:E8:93:D7:36:1C:EC:4A:49:0D:C1:7C:71:DA:42:EF:C8:0F:E1
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e342e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.4.0/24
Signature Algorithm: sha256WithRSAEncryption
48:be:9c:df:b0:32:52:89:a6:00:0a:1b:36:a2:84:c5:38:63:
ec:d2:34:27:b4:e0:ca:4e:52:8a:c1:b2:48:18:31:f8:a4:bb:
3d:2c:51:bf:d5:a3:38:cb:5d:4a:60:a7:37:9e:37:38:e1:64:
c9:9c:70:21:dd:07:f1:33:bc:57:35:88:34:a2:36:92:0b:a4:
13:bd:b1:dd:aa:41:69:d6:5d:36:fb:0a:6e:2c:60:da:44:4a:
bd:bd:b7:7a:df:ae:2c:60:5b:52:8b:3a:e4:a0:15:d3:f8:ef:
3d:d1:b6:15:0c:07:57:8b:01:5a:19:92:83:4b:bb:0d:3d:31:
95:b2:a4:8e:ca:a0:d0:b4:d1:06:fa:fc:bd:f9:d4:6c:a5:e3:
f4:da:a4:7a:44:51:38:4d:2c:cd:01:91:54:fe:4b:8f:d8:45:
2a:cf:d7:20:2b:34:60:06:29:07:9f:af:6d:ff:c8:1f:bd:32:
0b:8f:f1:37:ab:bb:d7:04:50:2b:37:a8:4c:1e:dc:3b:cc:cb:
51:fd:26:e4:98:7e:38:a1:1c:fd:98:70:45:9d:58:d2:4e:c0:
db:10:76:47:57:1f:d4:c5:da:09:9a:47:b2:34:e0:14:79:38:
44:e2:9e:b2:7e:14:7d:a8:64:20:d7:88:8a:62:96:97:96:22:
7a:98:9c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:57 2026 by rpki-client