
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa
File: 3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa (raw, json)
Hash identifier: RUUu9/8ht2gZrxuJ8NZzgO27EBxw9n9jh8iUiHxgJbg=
Subject key identifier: 0A:86:FE:61:6E:AD:EC:BA:83:57:24:5E:E5:BA:08:BE:E0:C3:9C:9D
Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial: 2D2B8FAF8B8ECCAF99F8F2E4764D818A57536AA2
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa
Signing time: Sun 28 Jun 2026 13:49:05 +0000
ROA not before: Sun 28 Jun 2026 13:44:05 +0000
ROA not after: Sun 27 Jun 2027 13:49:05 +0000
asID: 4837
IP address blocks: 139.159.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 21:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2b:8f:af:8b:8e:cc:af:99:f8:f2:e4:76:4d:81:8a:57:53:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Validity
Not Before: Jun 28 13:44:05 2026 GMT
Not After : Jun 27 13:49:05 2027 GMT
Subject: CN=0A86FE616EADECBA8357245EE5BA08BEE0C39C9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:74:29:08:15:24:8c:96:8b:d9:ba:97:43:
95:2d:2c:2c:2c:f5:28:c6:01:68:3e:8f:8f:de:b4:
39:3b:0c:1e:ea:3c:05:54:bd:09:23:10:fe:cd:59:
79:77:8d:98:8d:34:24:97:14:0d:84:61:a0:4b:f9:
81:bb:8d:12:32:94:d4:af:6a:5f:11:66:97:94:62:
aa:8a:0f:45:7f:bd:2a:38:c6:23:fe:a8:2a:33:cd:
eb:d5:2c:a0:ca:08:b5:b8:f1:84:ce:8a:8c:c0:92:
1e:af:70:9c:d0:cf:a4:46:41:d8:46:40:89:7e:9e:
4f:a5:58:0c:c2:aa:aa:9a:72:36:a9:e2:5a:2b:10:
98:3d:e3:6b:d5:44:70:c1:26:30:f9:20:99:2e:f5:
31:00:eb:89:f5:e5:2e:3a:df:bc:3d:fa:08:7d:10:
45:d3:38:21:af:f7:13:cd:6b:21:71:2c:2b:9a:3a:
8d:43:dd:06:26:15:3c:a2:4b:70:93:3a:9b:3c:07:
6e:96:8e:38:ab:d5:aa:e3:4a:70:21:17:d9:f6:fe:
ab:e4:42:9b:3e:97:93:b8:83:96:e4:7c:9e:61:0b:
30:85:19:13:1c:f1:cf:f3:6a:73:ea:49:df:19:9c:
2d:ed:46:c6:60:da:ad:b5:cf:88:9a:5c:2b:1b:4f:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:86:FE:61:6E:AD:EC:BA:83:57:24:5E:E5:BA:08:BE:E0:C3:9C:9D
X509v3 Authority Key Identifier:
keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32332d3233203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.112.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:c0:49:db:d8:c4:cd:3a:d7:d8:06:4d:a1:32:43:33:10:4d:
87:8d:de:7e:9f:06:ae:a7:f6:d2:27:ed:8a:6d:04:ec:f4:5f:
e1:fa:2e:8e:73:8b:30:ce:e9:34:cd:59:5a:4f:36:06:98:c6:
06:ad:1e:59:b9:be:78:80:20:30:64:a0:95:d3:81:a3:0a:2e:
37:82:58:a0:1e:4e:83:93:f8:6f:b0:83:88:ac:1a:73:93:bb:
34:04:e2:0b:9c:3d:fc:a4:d2:47:5c:e5:a2:7d:15:a4:f3:5d:
7f:15:4a:96:f9:db:ff:e6:13:42:6e:a3:ee:8d:5e:c6:2a:32:
8a:d0:f2:ac:b4:a3:06:66:5b:54:ed:72:a1:3f:15:d5:a0:55:
f8:4e:68:ce:54:d0:b1:fa:d8:8e:b5:eb:96:b0:f4:fa:3d:03:
a3:bf:b8:7d:9b:c1:2c:a2:db:f2:fb:a6:61:ce:37:f2:db:82:
2c:56:29:54:6a:f1:34:6a:23:f2:9c:1a:59:dc:b8:16:94:f1:
6a:9b:78:c1:68:49:71:8b:2e:d0:65:5c:b5:40:35:8c:87:e6:
34:50:88:6f:ea:5c:08:e7:ee:5f:72:5c:0b:05:c9:9b:82:f7:
e9:2c:0b:7e:25:37:4d:44:94:8b:a7:0a:d0:3e:57:50:85:66:
df:43:f4:bb
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIULSuPr4uOzK+Z+PLkdk2BildTaqIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3
RDk5REREMjAeFw0yNjA2MjgxMzQ0MDVaFw0yNzA2MjcxMzQ5MDVaMDMxMTAvBgNV
BAMTKDBBODZGRTYxNkVBREVDQkE4MzU3MjQ1RUU1QkEwOEJFRTBDMzlDOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtjHQpCBUkjJaL2bqXQ5UtLCws
9SjGAWg+j4/etDk7DB7qPAVUvQkjEP7NWXl3jZiNNCSXFA2EYaBL+YG7jRIylNSv
al8RZpeUYqqKD0V/vSo4xiP+qCozzevVLKDKCLW48YTOiozAkh6vcJzQz6RGQdhG
QIl+nk+lWAzCqqqacjap4lorEJg942vVRHDBJjD5IJku9TEA64n15S4637w9+gh9
EEXTOCGv9xPNayFxLCuaOo1D3QYmFTyiS3CTOps8B26Wjjir1arjSnAhF9n2/qvk
Qps+l5O4g5bkfJ5hCzCFGRMc8c/zanPqSd8ZnC3tRsZg2q21z4iaXCsbT3v7AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUCob+YW6t7LqDVyRe5boIvuDDnJ0wHwYDVR0j
BBgwFoAUv2Gm6yzSlC3/uhNHuUDVuX2Z3dIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTU1OTU1NC8xL0JGNjFBNkVCMkNEMjk0MkRGRkJBMTM0N0I5NDBE
NUI5N0Q5OURERDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQkY2MUE2RUIyQ0QyOTQyREZGQkExMzQ3Qjk0MEQ1Qjk3RDk5REREMi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTU1OTU1NC8xLzMxMzMzOTJlMzEz
NTM5MmUzMTMxMzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAYufcDANBgkqhkiG9w0BAQsFAAOCAQEAbcBJ29jEzTrX2AZNoTJDMxBN
h43efp8Grqf20iftim0E7PRf4foujnOLMM7pNM1ZWk82BpjGBq0eWbm+eIAgMGSg
ldOBowouN4JYoB5Og5P4b7CDiKwac5O7NATiC5w9/KTSR1zlon0VpPNdfxVKlvnb
/+YTQm6j7o1exioyitDyrLSjBmZbVO1yoT8V1aBV+E5ozlTQsfrYjrXrlrD0+j0D
o7+4fZvBLKLb8vumYc438tuCLFYpVGrxNGoj8pwaWdy4FpTxapt4wWhJcYsu0GVc
tUA1jIfmNFCIb+pcCOfuX3JcCwXJm4L36SwLfiU3TUSUi6cK0D5XUIVm30P0uw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:49 2026 by rpki-client