
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e352e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e352e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: 0wYAU/U/uV/iC2a+2powuQR9yc3NFxGB/Zp0LJAz1Xg=
Subject key identifier: 54:DE:57:A3:90:3A:6D:D4:6D:77:15:69:85:D7:2F:BC:90:1A:0A:81
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 6769540B6B9796C910A0F014BC96ED63F92C8217
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e352e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:27 +0000
ROA not before: Wed 15 Apr 2026 07:16:27 +0000
ROA not after: Wed 14 Apr 2027 07:21:27 +0000
asID: 59078
IP address blocks: 139.198.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:69:54:0b:6b:97:96:c9:10:a0:f0:14:bc:96:ed:63:f9:2c:82:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:27 2026 GMT
Not After : Apr 14 07:21:27 2027 GMT
Subject: CN=54DE57A3903A6DD46D77156985D72FBC901A0A81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7d:2b:b3:c4:0c:ff:4c:b3:88:d8:8b:79:2d:
f9:4b:05:85:4c:cc:e5:2b:37:3b:af:36:3c:4c:4b:
47:da:32:96:1d:bd:f2:e4:92:37:c0:1c:e3:f5:b6:
9e:96:d1:0a:fc:9f:29:d2:5d:c3:09:c8:a5:94:f3:
bc:0a:aa:05:0b:27:7e:3b:73:1a:9b:d9:63:3d:fb:
44:80:cb:c2:10:ef:da:f9:53:6b:8b:39:41:0a:e2:
f3:fc:f7:8c:cd:34:b0:01:f4:a2:c3:42:76:65:15:
12:5b:a3:9b:f7:2b:59:50:ac:e3:80:fa:f0:36:55:
6e:92:e7:e5:da:ca:dc:18:0e:f4:32:71:3f:5a:e9:
a1:d9:9e:61:cd:96:00:f7:c6:41:2c:59:ae:97:6f:
ea:f8:51:4a:7e:43:ff:c5:53:ce:ae:aa:13:f5:b8:
7c:ba:cc:46:47:26:77:5e:4f:d3:00:70:3e:1e:97:
2c:49:6d:a7:da:be:2d:56:60:28:81:50:2b:ed:0d:
6a:e3:e6:22:36:0e:c8:e1:9c:cf:28:d4:f6:49:81:
6d:44:94:6b:33:dc:1c:3c:6d:e6:57:59:a7:67:ae:
b9:40:71:f3:ab:f5:50:f0:6a:79:df:08:8b:44:3c:
8e:ba:23:69:ba:7d:a5:ea:08:9b:f8:11:5e:87:ef:
aa:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DE:57:A3:90:3A:6D:D4:6D:77:15:69:85:D7:2F:BC:90:1A:0A:81
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e352e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.5.0/24
Signature Algorithm: sha256WithRSAEncryption
45:f9:73:cf:04:b7:ee:92:a7:5a:4a:7e:96:a7:41:94:7f:6f:
9c:7a:d0:3e:79:ee:8d:67:4b:eb:31:c9:33:41:07:f1:b2:af:
b7:87:20:9e:1e:85:34:48:14:a7:a6:8e:0b:6b:fc:9b:91:11:
db:34:10:2a:36:ea:6e:6e:af:3a:97:31:7d:f8:34:9d:7c:79:
2c:9b:8d:12:a0:2d:eb:3f:4e:f4:39:bd:82:91:ee:8e:74:70:
a3:58:31:28:7c:96:f7:53:00:7f:7c:13:d1:69:97:9a:39:14:
06:ff:76:ba:66:f7:14:8b:e4:61:60:ed:09:35:d7:95:8f:29:
f2:93:4c:ac:13:c5:f9:1d:81:78:0d:95:c5:70:d7:30:2d:79:
b6:f7:6d:07:32:fa:d8:ba:14:d9:a5:67:74:f5:d8:b2:01:9c:
40:42:c8:61:ee:c4:8d:d2:d9:cb:ab:82:fa:65:24:6b:e4:36:
c4:d8:1e:f6:9f:96:aa:7a:87:f5:92:f0:5e:0a:15:2f:43:b7:
ac:5c:c6:27:aa:c9:7c:f9:5e:41:a6:6d:b0:91:f3:a1:b9:54:
85:25:aa:ef:c4:02:42:e5:81:55:bc:c1:6c:49:c3:c7:b3:4e:
6e:15:c3:3f:89:09:c9:ad:f1:4a:98:ac:c6:b3:5d:aa:89:bc:
24:b4:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:42:58 2026 by rpki-client