
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34392e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e34392e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: Yo1/H6MmoeIgIX52t8gGy0gArUkw1UHsLarfgjyU+78=
Subject key identifier: 08:32:81:D3:51:B4:09:47:74:DC:81:B5:D1:5D:D6:BD:17:AA:D5:84
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 5F3B54223B02D39861043736465A2C8B496CB8EF
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34392e302f32342d3234203d3e203633313939.roa
Signing time: Thu 04 Jun 2026 16:38:02 +0000
ROA not before: Thu 04 Jun 2026 16:33:02 +0000
ROA not after: Thu 03 Jun 2027 16:38:02 +0000
asID: 63199
IP address blocks: 139.159.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:3b:54:22:3b:02:d3:98:61:04:37:36:46:5a:2c:8b:49:6c:b8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 4 16:33:02 2026 GMT
Not After : Jun 3 16:38:02 2027 GMT
Subject: CN=083281D351B4094774DC81B5D15DD6BD17AAD584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:d5:85:86:8c:10:54:3b:98:8e:a7:01:37:
80:ce:96:bf:94:b0:75:b3:4f:93:1d:a3:5d:7e:24:
32:f7:26:fc:c6:af:38:f5:5e:23:71:53:96:f6:a0:
b9:39:6e:af:78:30:06:92:44:e2:4a:1d:6f:46:6f:
8f:7f:0c:19:24:49:62:47:42:e3:53:ab:45:38:84:
b0:a8:51:40:a6:55:a2:65:1c:0f:77:68:30:ba:37:
d4:2f:9d:ab:ba:58:20:a0:0b:99:c8:70:64:62:c9:
21:ea:5f:af:a8:a1:f2:ce:2e:04:57:af:3a:3d:8a:
45:1f:43:a5:1e:a6:30:08:00:a0:21:f3:1a:5e:4e:
91:e3:cc:0c:e2:b5:20:98:0d:24:98:b4:09:49:0d:
6b:c4:e1:63:b3:63:8a:97:4b:03:77:72:a1:29:24:
40:51:f2:71:a8:7c:60:84:b5:3c:d2:73:8e:e0:10:
49:55:91:83:01:f1:48:0d:71:6f:5d:24:17:bd:bc:
7f:d2:91:0f:b5:44:44:a9:f8:b8:ff:59:3a:b9:c0:
5d:50:da:a1:65:cb:78:61:7e:52:84:eb:47:35:29:
34:ea:4d:0d:b6:82:16:0a:80:cf:ef:86:fb:f6:d1:
24:c2:0a:71:e7:9f:3a:42:2e:84:37:e6:81:04:7c:
19:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:32:81:D3:51:B4:09:47:74:DC:81:B5:D1:5D:D6:BD:17:AA:D5:84
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e34392e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.49.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:4f:56:2f:9a:b8:4d:be:49:58:1a:fd:b2:77:3f:d4:a5:b9:
40:f7:07:87:ee:ab:ce:d5:b9:49:ab:d9:cd:7c:de:5e:6f:73:
28:32:83:36:18:cf:fc:e6:ef:74:56:6e:33:66:fd:56:30:71:
93:df:d6:c0:0e:b4:bd:30:9a:32:31:09:39:ed:fc:f6:84:60:
dc:dc:c5:b9:45:71:50:0b:ca:d0:2a:3c:60:ba:9c:e7:d4:ad:
15:82:de:79:7f:f9:3b:ee:94:ab:ef:6f:8b:98:46:b3:c8:d5:
98:dd:33:ab:b2:a4:20:13:00:d2:d1:3f:c6:1d:74:40:22:c4:
f7:eb:89:78:3c:5f:4e:f5:72:11:93:22:af:75:a9:9f:61:ec:
b4:af:ce:5f:cf:15:88:26:41:e9:36:e7:74:20:55:90:ed:f6:
ef:68:78:88:02:2f:ff:33:29:a2:c3:7d:40:40:94:8d:c7:a6:
54:0d:9a:f7:46:73:e0:84:64:cf:40:b8:20:d3:22:22:4c:cd:
7b:9f:9a:90:3b:0f:70:da:09:2c:86:2d:d2:5e:b0:e3:b6:8e:
4b:f3:ff:4e:05:c8:87:44:24:63:3b:cf:b8:ff:5a:a6:29:e9:
3f:26:f9:77:36:5d:da:c3:36:ee:d7:37:bf:58:d0:d3:52:e3:
52:52:4b:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:12:13 2026 by rpki-client