
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34362e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e34362e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: KLRaRCxKwuySVhP/zhUVsdiNoqPd6Ho1oK/uMe/P3Tg=
Subject key identifier: 12:E5:6A:11:2A:F0:9D:B3:99:74:D6:70:86:90:DA:01:B0:E0:AF:6F
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 39B091E0F62818E9025A602BF2AB93995436A924
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34362e302f32342d3234203d3e203633313939.roa
Signing time: Thu 04 Jun 2026 16:38:01 +0000
ROA not before: Thu 04 Jun 2026 16:33:01 +0000
ROA not after: Thu 03 Jun 2027 16:38:01 +0000
asID: 63199
IP address blocks: 139.159.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:b0:91:e0:f6:28:18:e9:02:5a:60:2b:f2:ab:93:99:54:36:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 4 16:33:01 2026 GMT
Not After : Jun 3 16:38:01 2027 GMT
Subject: CN=12E56A112AF09DB39974D6708690DA01B0E0AF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:2b:51:e2:fa:1a:71:c5:5e:99:43:4a:20:
06:e2:ab:34:8b:d0:08:86:4a:19:b1:6f:a0:23:f7:
b6:27:82:75:73:9d:18:10:8e:12:6e:7b:49:dc:e3:
7c:13:e7:c7:46:1a:59:76:7d:21:f7:92:9c:49:02:
35:02:9e:48:fe:9a:fc:59:eb:97:79:bf:02:04:52:
73:f7:d7:0e:38:2c:b8:7e:c0:a6:0e:fe:cb:8f:31:
73:8f:7e:41:21:64:31:33:25:f9:60:63:e5:97:01:
35:d8:c3:a5:50:e6:49:24:31:73:c7:5f:95:1c:04:
6a:6a:bc:7d:2b:7f:ea:11:2c:37:97:e4:01:1f:4f:
61:3a:04:85:ef:18:40:b4:94:7b:c3:7b:19:99:0d:
c6:c3:53:13:57:f2:38:45:bb:62:a7:31:5c:45:95:
dd:c8:9a:ab:3b:7f:a3:e3:49:12:6e:20:a2:a9:a5:
52:70:94:6b:8f:63:29:dd:05:66:56:07:ee:e7:8a:
cd:5d:69:aa:c5:ed:ee:92:2f:27:4d:f4:bd:48:4d:
7a:99:c4:f7:b0:03:c4:fc:e8:da:60:02:df:ea:3e:
41:58:1b:92:6f:91:74:88:76:59:52:17:90:2f:f1:
30:85:09:05:72:ef:87:10:d3:17:f0:00:a3:f7:98:
52:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E5:6A:11:2A:F0:9D:B3:99:74:D6:70:86:90:DA:01:B0:E0:AF:6F
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34362e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:f3:7b:66:66:ed:ec:1c:1f:3b:50:23:cc:5f:18:0c:f7:19:
bf:3a:8e:b0:9a:71:2c:fb:38:b8:59:c2:f7:f0:97:bb:62:0c:
27:21:d9:69:23:76:f5:86:7e:d5:6c:0d:a2:8f:e3:67:28:35:
e7:af:2a:e1:c4:10:54:ba:da:6e:43:92:96:d8:14:c1:5d:7d:
1e:d2:f6:5b:fb:0f:7b:09:4e:06:91:96:c9:63:cc:34:6f:15:
6d:a0:bf:c8:59:a4:8c:a3:5f:04:be:48:f2:ed:8d:85:43:2f:
86:35:df:f5:48:cc:b4:00:31:8d:56:2c:f1:4a:be:63:8b:8f:
a4:34:ee:aa:45:98:71:a5:73:11:34:dc:ac:af:eb:3f:50:a9:
b7:c6:ce:ae:fe:da:09:b5:69:76:5d:fc:5e:39:96:b5:f9:09:
92:66:06:96:42:18:c1:a5:8a:71:f1:8a:8b:0a:c8:32:d4:d7:
6c:84:75:21:07:e5:5e:98:42:86:f3:10:30:9e:98:4f:96:69:
c5:d8:ae:97:a0:cd:ab:2b:d3:38:fb:fc:9d:9f:5b:13:d9:8d:
df:e2:e1:fc:85:ed:4c:3d:71:91:6e:88:26:d4:17:01:f4:9e:
e5:e0:b2:be:aa:f0:e0:d4:bc:ae:84:40:14:ed:d7:63:7f:f3:
8d:e1:c9:6d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:49 2026 by rpki-client