
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34382e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e34382e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: mZQlorOdWRjS59WkRVHVCO7gIv3Y52ZF1vI7nVZS1+k=
Subject key identifier: E7:4B:07:37:A7:A3:3D:C7:4A:54:28:20:0C:EE:8C:BE:71:A3:68:3A
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 0DE3140A858AB00AD47314E0D71B179D0184556A
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34382e302f32342d3234203d3e203633313939.roa
Signing time: Thu 04 Jun 2026 16:38:02 +0000
ROA not before: Thu 04 Jun 2026 16:33:02 +0000
ROA not after: Thu 03 Jun 2027 16:38:02 +0000
asID: 63199
IP address blocks: 139.159.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:e3:14:0a:85:8a:b0:0a:d4:73:14:e0:d7:1b:17:9d:01:84:55:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 4 16:33:02 2026 GMT
Not After : Jun 3 16:38:02 2027 GMT
Subject: CN=E74B0737A7A33DC74A5428200CEE8CBE71A3683A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:38:f6:60:61:41:d0:44:44:bf:26:fc:bf:
16:4e:ca:3f:70:2e:e0:bf:55:45:4f:1a:22:34:51:
2a:2f:00:2a:f7:84:e2:d3:42:35:b2:a5:90:45:bd:
40:3c:11:32:dc:5d:82:4d:a5:fe:fa:db:4e:c3:47:
3f:31:3c:95:64:61:e1:18:59:88:30:8c:be:5a:5b:
f2:f8:00:b5:be:5a:33:e5:1a:0c:30:56:78:87:eb:
e0:4e:ef:bb:d8:9d:76:b8:67:4c:80:ab:17:72:6f:
2e:88:17:b3:e3:a8:cf:dd:45:f4:7f:0e:0e:ca:57:
bc:b8:a5:3c:91:4f:67:d4:61:dd:de:d5:68:cd:84:
00:38:78:4e:a0:ef:ca:f5:02:97:47:8c:0e:97:06:
cf:58:01:03:30:d2:d8:9b:1c:cc:d9:f4:41:34:37:
43:73:ff:0b:0e:df:2d:bb:c8:0c:7d:f6:10:d9:a1:
e2:b9:76:af:de:ca:87:c1:5f:4e:56:b3:6e:4e:16:
e1:d2:bc:cf:5c:4d:71:d1:47:35:2f:87:41:3e:a9:
f6:4f:c8:a7:4e:40:3b:b1:c0:26:44:7d:6a:f1:3d:
ed:8f:a4:8c:fb:1f:75:e9:28:a3:50:10:66:52:6c:
94:8e:41:9f:8a:cc:e8:88:56:93:09:d3:3a:a7:78:
00:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4B:07:37:A7:A3:3D:C7:4A:54:28:20:0C:EE:8C:BE:71:A3:68:3A
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34382e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.48.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ba:9e:2e:11:b8:22:af:7f:ae:6f:fa:d7:a5:26:d8:27:bf:
1e:ca:ae:e5:fa:ee:f5:2e:3f:3e:55:41:97:b7:a8:83:45:de:
bc:50:17:95:29:df:68:a5:62:81:51:a4:ea:46:9e:06:f9:25:
5a:7c:0a:ec:13:cb:0a:6e:d8:42:59:b0:c3:ab:17:ca:1d:90:
ce:ab:60:44:10:47:ed:1f:7f:c8:ec:21:5c:01:73:31:e8:c6:
5d:4d:51:42:5d:80:88:cb:73:dd:98:7a:65:ad:e6:f2:f9:d4:
14:b2:a7:53:bf:69:05:68:33:96:f6:7a:aa:cf:ba:85:51:fa:
4b:8c:df:ae:08:96:44:73:e8:b2:e5:d7:3d:66:10:53:fb:08:
f8:c6:93:50:b4:ad:8c:f8:0b:59:c2:06:9c:59:e7:9a:fb:54:
b4:d5:74:77:fe:db:db:b8:81:0c:eb:f6:94:b1:a1:6f:3a:65:
54:92:3b:fd:34:7e:5d:f2:ce:40:24:90:3c:be:6d:96:e7:7f:
aa:f1:e1:14:91:b3:d8:65:c0:35:15:21:9e:f3:c3:8f:8d:ce:
12:f7:10:6d:31:c2:23:72:da:c7:c1:23:8e:bd:6b:7b:69:3b:
ae:91:93:23:a8:ba:4f:65:21:a7:65:c3:ed:14:bf:86:56:93:
6e:8e:94:b8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:07:47 2026 by rpki-client