
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34342e302f32332d3233203d3e203633313939.roa
File: 3133392e3135392e34342e302f32332d3233203d3e203633313939.roa (raw, json)
Hash identifier: ql2YMOUrhPixknj30ulMUm2qmeiFYULRRWz2iWorIsk=
Subject key identifier: 93:83:5B:1E:8A:ED:0F:F0:89:3B:DB:F8:54:56:5A:10:03:77:7F:C9
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 5FDFBB1A62DCE05AF8F71E4639C7E99DEB4C4C4C
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34342e302f32332d3233203d3e203633313939.roa
Signing time: Thu 04 Jun 2026 16:38:02 +0000
ROA not before: Thu 04 Jun 2026 16:33:02 +0000
ROA not after: Thu 03 Jun 2027 16:38:02 +0000
asID: 63199
IP address blocks: 139.159.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:df:bb:1a:62:dc:e0:5a:f8:f7:1e:46:39:c7:e9:9d:eb:4c:4c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 4 16:33:02 2026 GMT
Not After : Jun 3 16:38:02 2027 GMT
Subject: CN=93835B1E8AED0FF0893BDBF854565A1003777FC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:65:26:b5:f3:7d:8f:33:a1:1a:35:c9:8c:55:
60:53:c8:71:0f:66:f9:31:35:02:f3:84:52:6b:d4:
70:a2:3e:d5:a8:3c:cb:fa:af:76:6f:95:e9:8a:3b:
81:a7:16:ac:bf:4d:8c:9b:96:8f:b9:7e:ca:5f:09:
70:43:04:49:4e:7f:71:21:ce:3d:c9:7f:d3:f0:06:
0e:00:c6:1c:4b:c7:9e:87:5b:72:59:b7:af:a6:5d:
0a:90:1c:ba:1b:e9:71:fb:cc:ab:99:46:92:f7:01:
c9:c4:4c:59:41:58:00:30:21:e2:09:3a:25:06:bb:
41:80:13:a1:3a:c8:09:d6:2c:eb:04:71:70:78:b0:
2f:ec:66:89:62:4d:45:f4:2f:5a:2f:a1:3e:2c:c7:
59:7a:39:88:55:5b:57:89:fd:75:67:69:cc:e1:10:
e1:c2:04:0c:15:8b:7a:6a:6a:76:da:1d:e5:2f:5e:
6d:b6:04:29:9e:70:ad:7e:53:ac:b8:81:f3:4d:6d:
21:63:ad:2f:d7:a8:7a:d8:ba:b9:f3:42:dd:89:90:
2e:9b:1d:46:b1:aa:0c:4b:e7:fb:ec:dc:4b:ad:b8:
54:8f:24:32:8c:f1:46:20:a8:4c:01:de:88:c4:1a:
a1:87:28:66:2d:db:fa:b8:a9:82:54:72:dc:6a:99:
f8:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:83:5B:1E:8A:ED:0F:F0:89:3B:DB:F8:54:56:5A:10:03:77:7F:C9
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34342e302f32332d3233203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.44.0/23
Signature Algorithm: sha256WithRSAEncryption
85:9a:85:b2:3f:68:7d:53:01:e7:3a:fa:52:cc:0d:57:9f:7b:
82:60:4e:4a:67:52:9f:2d:32:0b:49:60:5a:09:3f:31:dc:1a:
6b:04:f8:c7:09:60:0a:f9:55:36:3a:fd:36:46:31:76:ea:13:
66:ed:41:33:46:ef:20:06:09:d0:0a:cd:df:e9:65:c6:ab:17:
b6:8b:85:61:a0:74:8e:7c:aa:9a:03:5c:f9:b4:0c:ce:73:81:
64:6b:9e:a9:1f:1c:c7:42:61:69:eb:f1:70:25:bf:63:73:5a:
ca:04:c2:34:cb:b4:c1:21:29:5f:fa:6d:10:8d:22:a7:c6:c4:
bf:ca:70:33:40:d2:05:f3:c2:71:39:c1:4b:2c:f2:3f:82:52:
63:32:c9:5f:75:15:bc:ec:58:cf:98:c5:6a:88:31:1d:ae:d5:
cf:90:eb:1e:df:24:9c:fb:e6:73:b7:32:df:66:04:71:51:46:
1b:83:d5:3d:22:32:e4:2f:1c:fb:6f:5f:7d:14:6b:a5:f1:c5:
58:d7:54:2d:b7:be:fe:a3:fc:3a:57:95:92:4e:c5:59:59:ae:
54:44:83:e6:bf:ed:85:ae:0e:bf:9b:f0:c2:f8:15:6e:dc:56:
47:c6:bd:37:b3:02:21:ee:c7:05:69:d1:e5:d8:78:f0:4a:0d:
d3:5d:d2:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:48:49 2026 by rpki-client