
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e362e302f32342d3234203d3e203539303738.roa
File: 3133392e3139382e362e302f32342d3234203d3e203539303738.roa (raw, json)
Hash identifier: nsDg9n7HmXSPSrATM2ACghp8HSHcN+OxjCW229m2zkk=
Subject key identifier: 18:4B:FA:DD:B1:93:9B:53:42:86:5F:65:79:E3:4B:41:CF:55:49:20
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 6B90B6EFC34CF2257C68C97C22E19238F7F5BCDA
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e362e302f32342d3234203d3e203539303738.roa
Signing time: Wed 15 Apr 2026 07:21:28 +0000
ROA not before: Wed 15 Apr 2026 07:16:28 +0000
ROA not after: Wed 14 Apr 2027 07:21:28 +0000
asID: 59078
IP address blocks: 139.198.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 15:28:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:90:b6:ef:c3:4c:f2:25:7c:68:c9:7c:22:e1:92:38:f7:f5:bc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: Apr 15 07:16:28 2026 GMT
Not After : Apr 14 07:21:28 2027 GMT
Subject: CN=184BFADDB1939B5342865F6579E34B41CF554920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:17:0e:ec:ff:de:fe:a1:0c:d3:8e:2b:8d:d2:
d4:9b:5e:1a:5e:d5:d9:78:96:86:85:24:b4:60:29:
cb:d2:5b:70:7c:dc:37:24:42:9b:db:1c:a1:5f:e5:
41:e7:ab:fe:12:a8:38:a5:5e:47:02:7f:63:8f:c5:
51:54:2f:e4:68:33:7b:76:c7:80:29:8a:0b:fe:62:
2f:de:9b:61:ac:d8:cd:d6:00:82:08:2f:64:1e:63:
ce:f7:6d:e4:46:bc:37:41:7b:de:51:a5:ed:16:cb:
f9:c6:76:41:65:aa:3c:f3:69:45:34:bd:bc:4d:e3:
03:ec:bb:d5:44:f4:2b:01:ec:5a:6c:11:9b:85:df:
05:8a:aa:c1:b8:13:b3:6b:1a:71:a7:61:aa:9e:1f:
15:90:c4:97:1d:13:70:87:c8:25:f6:34:d4:c1:ac:
f6:31:36:d2:ff:c7:36:79:2a:36:ae:ab:d4:e5:e6:
0a:12:84:a3:0b:3d:00:5a:16:20:b6:d4:e5:fd:fb:
fb:1a:f0:b4:2f:a9:9c:f0:bd:13:6b:2d:9e:8c:0b:
66:b7:1e:1e:1d:e3:70:38:91:5a:94:60:d7:0a:fe:
1e:a1:e9:a8:fb:64:cf:54:36:97:ef:5b:08:04:db:
e5:03:f2:41:ee:4c:53:28:b6:60:26:bf:ed:4a:75:
bd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4B:FA:DD:B1:93:9B:53:42:86:5F:65:79:E3:4B:41:CF:55:49:20
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/3133392e3139382e362e302f32342d3234203d3e203539303738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.6.0/24
Signature Algorithm: sha256WithRSAEncryption
39:77:d7:1d:5e:3f:51:c8:86:93:18:64:35:e8:e5:69:03:cb:
43:10:ab:9d:c3:d9:ed:7e:08:5b:ac:ab:79:f0:b3:aa:27:77:
54:af:6a:a5:d0:27:43:98:e3:06:3b:ca:ef:20:ff:51:f0:c6:
f2:53:69:22:eb:66:35:e6:ae:86:53:17:d2:52:90:f3:9b:48:
5c:8b:da:8a:09:51:74:c2:16:3e:36:c4:00:4e:8d:d5:10:ce:
67:ce:39:8e:4a:8d:8a:f3:49:d3:f9:d2:a9:1b:cb:a3:1a:97:
6a:b8:25:4e:20:f7:8f:0d:e2:0c:67:b3:d1:56:9c:15:64:d5:
b8:e7:ef:63:4f:b4:fe:a1:ec:53:cc:ff:d1:ac:aa:a9:63:c0:
a9:66:92:10:9a:a4:41:d5:f4:23:98:b1:e6:ef:17:1d:9c:1d:
67:f8:33:ba:a4:ab:4f:92:9b:6b:02:43:1d:40:2e:d1:c5:1c:
5b:6e:65:3e:a3:8f:45:ed:df:15:f9:59:cd:38:01:9f:a3:9c:
7c:ba:a7:c9:24:fc:cb:65:9d:4c:b5:3e:3c:12:42:60:87:08:
3c:a6:f0:c2:4b:00:7a:97:7f:f7:bc:77:13:d2:83:e3:8f:07:
52:6e:e3:87:78:21:95:a7:8b:35:61:47:12:60:2c:91:83:cf:
c6:7c:d5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:37 2026 by rpki-client