
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/3133392e3139362e302e302f31362d3234203d3e203337393633.roa
File: 3133392e3139362e302e302f31362d3234203d3e203337393633.roa (raw, json)
Hash identifier: 19ycWnE82ngKdpq5CfFKBBUaYUxLiUYMUdelOP4EkI8=
Subject key identifier: B3:90:A8:DC:CC:B4:F6:80:23:E7:5C:87:5C:34:52:FE:AD:AD:31:38
Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Certificate serial: 206C04813D4A2ADCFF63780268F06C50C7334629
Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/3133392e3139362e302e302f31362d3234203d3e203337393633.roa
Signing time: Tue 14 Apr 2026 02:26:51 +0000
ROA not before: Tue 14 Apr 2026 02:21:51 +0000
ROA not after: Tue 13 Apr 2027 02:26:51 +0000
asID: 37963
IP address blocks: 139.196.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:34:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6c:04:81:3d:4a:2a:dc:ff:63:78:02:68:f0:6c:50:c7:33:46:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229
Validity
Not Before: Apr 14 02:21:51 2026 GMT
Not After : Apr 13 02:26:51 2027 GMT
Subject: CN=B390A8DCCCB4F68023E75C875C3452FEADAD3138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:36:c0:06:2b:d9:76:a5:d5:a4:c6:9a:fa:
bc:d1:ca:92:7e:10:0b:d8:54:62:22:d8:92:df:a9:
25:71:ff:dc:b7:bc:0e:28:7c:01:ee:2d:62:3c:53:
2a:07:bc:aa:a3:55:3c:55:14:79:26:21:8c:d3:ab:
f6:74:ff:b2:e4:2b:b7:6c:23:55:d3:a8:bf:a1:8a:
ec:95:fd:9b:ee:18:af:a5:6f:ac:38:56:69:41:6d:
63:a9:b5:b7:b8:21:e5:59:47:bb:6b:02:12:77:9d:
94:69:78:c4:87:54:a6:2f:f8:c7:fa:eb:1f:0d:4f:
97:d8:b1:e6:1b:e3:81:56:12:c5:e6:8b:90:39:d8:
a4:2f:3c:11:e5:9e:b6:06:36:7c:51:e2:7f:dc:34:
c2:47:54:94:e4:aa:e0:e1:75:27:17:b8:0e:e8:ef:
ae:b3:21:2c:b9:42:de:88:d7:f9:e2:42:ed:ca:15:
11:0d:00:3a:00:ad:31:0d:71:1a:7d:72:95:b3:69:
80:98:b1:52:d6:ff:28:18:6b:40:78:a5:8a:9c:45:
01:f9:bd:4b:80:64:3e:5d:94:27:87:cb:24:8c:8e:
d6:be:49:da:e8:18:43:64:67:9b:cb:0e:50:13:80:
70:02:04:6e:57:4a:cd:03:a0:33:53:c9:ca:84:52:
21:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:90:A8:DC:CC:B4:F6:80:23:E7:5C:87:5C:34:52:FE:AD:AD:31:38
X509v3 Authority Key Identifier:
keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/3133392e3139362e302e302f31362d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.196.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:e7:02:e1:a6:46:9d:c1:8d:ab:b8:39:f7:7c:35:f8:0c:f0:
96:ae:8f:13:59:52:d9:dc:77:52:27:e3:d6:b0:e6:87:6f:43:
f8:cd:39:cd:89:29:d3:ec:29:b1:f9:02:0d:e1:97:bc:86:22:
e7:49:ec:72:86:a2:84:79:99:2b:4c:de:1a:6f:db:f5:19:63:
bf:b0:40:36:63:f9:51:8b:71:80:f3:7d:95:11:dc:86:31:8c:
d6:31:98:cf:e3:e8:48:19:02:9e:19:96:61:f6:d0:4c:1f:9e:
0a:81:57:ac:25:ae:bb:f6:57:22:72:1b:8a:0e:1e:87:f1:95:
77:75:ce:69:e6:fb:2a:2b:72:04:4a:fc:5d:03:e6:80:67:2d:
6e:6d:96:86:d9:f5:88:79:09:72:bc:c5:d8:3c:a6:e5:cf:fa:
92:d4:47:6c:4c:a6:f6:45:89:cc:20:a5:7d:10:40:8b:d3:7d:
a5:12:8d:d9:cb:a7:64:79:e9:a4:6f:76:0a:ad:c3:18:99:c4:
e6:cb:73:d9:49:06:9d:a1:73:43:e9:a7:3b:c3:27:d8:ab:56:
87:8d:0e:e3:c7:76:36:fb:c1:a2:38:56:42:5d:05:e4:a1:a8:
52:ab:7c:f3:76:25:b7:95:a4:51:f6:4f:ff:57:a7:26:36:c4:
0c:64:f0:e8
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIUIGwEgT1KKtz/Y3gCaPBsUMczRikwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx
MkRGRDIyOTAeFw0yNjA0MTQwMjIxNTFaFw0yNzA0MTMwMjI2NTFaMDMxMTAvBgNV
BAMTKEIzOTBBOERDQ0NCNEY2ODAyM0U3NUM4NzVDMzQ1MkZFQURBRDMxMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaWjbABivZdqXVpMaa+rzRypJ+
EAvYVGIi2JLfqSVx/9y3vA4ofAHuLWI8UyoHvKqjVTxVFHkmIYzTq/Z0/7LkK7ds
I1XTqL+hiuyV/ZvuGK+lb6w4VmlBbWOptbe4IeVZR7trAhJ3nZRpeMSHVKYv+Mf6
6x8NT5fYseYb44FWEsXmi5A52KQvPBHlnrYGNnxR4n/cNMJHVJTkquDhdScXuA7o
766zISy5Qt6I1/niQu3KFRENADoArTENcRp9cpWzaYCYsVLW/ygYa0B4pYqcRQH5
vUuAZD5dlCeHyySMjta+SdroGENkZ5vLDlATgHACBG5XSs0DoDNTycqEUiFHAgMB
AAGjggIQMIICDDAdBgNVHQ4EFgQUs5Co3My09oAj51yHXDRS/q2tMTgwHwYDVR0j
BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz
RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzEvMzEzMzM5MmUzMTM5
MzYyZTMwMmUzMDJmMzEzNjJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEw
BQMDAIvEMA0GCSqGSIb3DQEBCwUAA4IBAQCZ5wLhpkadwY2ruDn3fDX4DPCWro8T
WVLZ3HdSJ+PWsOaHb0P4zTnNiSnT7Cmx+QIN4Ze8hiLnSexyhqKEeZkrTN4ab9v1
GWO/sEA2Y/lRi3GA832VEdyGMYzWMZjP4+hIGQKeGZZh9tBMH54KgVesJa679lci
chuKDh6H8ZV3dc5p5vsqK3IESvxdA+aAZy1ubZaG2fWIeQlyvMXYPKblz/qS1Eds
TKb2RYnMIKV9EECL032lEo3Zy6dkeemkb3YKrcMYmcTmy3PZSQadoXND6ac7wyfY
q1aHjQ7jx3Y2+8GiOFZCXQXkoahSq3zzdiW3laRR9k//V6cmNsQMZPDo
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:35:44 2026 by rpki-client