
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/3133392e3132392e302e302f31362d3234203d3e203337393633.roa
File: 3133392e3132392e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier: lmfFy/NByxflwbukOBqf2t5cvYb0y1mEUQilr1j5wEw=
Subject key identifier: BA:33:B3:8E:0A:A6:4D:72:A2:C8:89:C7:7D:91:A7:FC:2B:0A:4C:19
Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial: 7FA1A15B28AF36B6C225AA38D030C7D3D2A218D6
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/3133392e3132392e302e302f31362d3234203d3e203337393633.roa
Signing time: Wed 15 Apr 2026 02:12:33 +0000
ROA not before: Wed 15 Apr 2026 02:07:33 +0000
ROA not after: Wed 14 Apr 2027 02:12:33 +0000
asID: 37963
IP address blocks: 139.129.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a1:a1:5b:28:af:36:b6:c2:25:aa:38:d0:30:c7:d3:d2:a2:18:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Validity
Not Before: Apr 15 02:07:33 2026 GMT
Not After : Apr 14 02:12:33 2027 GMT
Subject: CN=BA33B38E0AA64D72A2C889C77D91A7FC2B0A4C19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0c:f4:e9:83:15:d7:e0:c4:74:98:4d:dd:cc:
4b:f7:43:6f:db:45:9e:a4:ac:88:3a:0d:78:e0:a7:
53:92:d9:9d:cd:4d:3f:54:21:a4:f9:2c:32:ea:1a:
df:8d:ca:ed:6a:ca:dd:35:4c:f1:9b:a1:eb:fb:ae:
0e:a1:9f:70:32:6e:18:c6:e3:e0:58:a3:58:76:4d:
35:b8:4e:d3:a8:88:8f:88:6a:8e:24:9b:7f:6b:d9:
7c:5f:a6:0b:90:dc:67:cb:06:c1:49:0d:60:75:63:
64:c5:c1:52:51:fb:72:7e:57:69:c9:63:84:21:8e:
7d:89:cc:9b:00:42:f8:7a:a8:2c:96:08:96:f8:46:
da:ab:a3:4f:e9:cc:19:05:67:ca:2e:94:8e:26:90:
16:e8:f9:53:0a:32:45:aa:7a:e5:52:27:7e:5a:f3:
f8:3f:6a:ac:83:17:ba:ef:b8:34:73:5a:53:e9:ce:
3c:1a:34:93:29:78:15:46:14:2f:79:e8:ec:cf:fa:
99:7f:fa:8f:6a:1c:47:5b:d6:87:80:9d:0f:1c:08:
ec:21:eb:f8:66:e4:2b:5b:94:35:eb:2b:9e:ef:bb:
24:c2:d3:71:5c:91:a8:49:29:5f:03:5d:aa:4a:99:
a4:0c:bc:10:2b:2b:6f:65:ea:95:4f:d0:e3:4e:65:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:33:B3:8E:0A:A6:4D:72:A2:C8:89:C7:7D:91:A7:FC:2B:0A:4C:19
X509v3 Authority Key Identifier:
keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/3133392e3132392e302e302f31362d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.129.0.0/16
Signature Algorithm: sha256WithRSAEncryption
21:53:e6:01:66:9e:83:ff:16:9a:3f:59:8b:30:c5:26:bf:fa:
40:a6:f4:b3:34:e3:01:5e:5f:0d:f1:11:73:33:9b:4c:0a:90:
e7:73:c9:78:18:60:2c:8b:bc:bf:e7:1b:a2:d8:79:9a:1e:8e:
84:0c:76:9b:9d:a1:ad:f5:11:33:66:ba:0c:92:f0:bc:b6:f2:
74:95:b3:f8:84:9a:0b:c8:19:af:3b:07:28:2f:de:74:da:ce:
98:e4:5c:4f:10:7f:16:f9:d1:30:4a:90:f0:b6:2e:d4:fd:f3:
e3:02:56:1c:78:c6:a4:0b:61:87:28:ad:a4:76:c3:81:e7:89:
10:26:29:7d:98:77:a9:21:35:84:ed:ae:c2:12:81:d6:d4:5d:
d9:dc:c0:9c:19:a8:64:a2:89:82:14:ad:2c:5f:0c:4e:33:d8:
51:bf:07:53:5b:57:72:ac:fe:2e:28:e4:b4:95:f0:f9:cc:31:
08:24:35:a6:5f:6e:c0:d4:4a:20:48:bc:2d:2d:22:b2:08:bc:
c0:14:98:ae:1e:b3:15:2b:ca:fc:0e:7a:1a:9e:87:17:ba:a8:
71:60:6c:34:bd:41:10:f0:88:8b:e3:3b:7e:6e:24:3b:88:69:
58:f3:94:f6:83:fb:de:a2:f6:94:ec:66:c3:b6:62:53:3d:09:
ac:10:b6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:53:15 2026 by rpki-client