
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e3131322e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: vLUpnqwf7adZP9KRBaTzIbiZbe7G66UoUojJqaRnTRM=
Subject key identifier: 4B:9F:7F:5F:DB:3A:46:2F:FE:CE:0A:9D:2A:0C:3E:E0:CE:FA:26:A4
Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial: 28A5EA1D2A4AECAF46B08F33CEBD3A67A92BC738
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e203633313939.roa
Signing time: Sun 28 Jun 2026 13:49:05 +0000
ROA not before: Sun 28 Jun 2026 13:44:05 +0000
ROA not after: Sun 27 Jun 2027 13:49:05 +0000
asID: 63199
IP address blocks: 139.159.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 04:13:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:a5:ea:1d:2a:4a:ec:af:46:b0:8f:33:ce:bd:3a:67:a9:2b:c7:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Validity
Not Before: Jun 28 13:44:05 2026 GMT
Not After : Jun 27 13:49:05 2027 GMT
Subject: CN=4B9F7F5FDB3A462FFECE0A9D2A0C3EE0CEFA26A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:63:95:31:76:de:ae:96:eb:ad:ce:d8:99:ba:
f0:ef:eb:46:16:2d:58:05:3d:9d:4c:46:92:17:c0:
ac:3a:42:e7:49:c4:97:c8:d5:d3:2c:4a:c4:a0:6d:
2a:f5:5f:c6:32:02:0b:8f:9c:75:51:8c:91:50:43:
56:ae:10:d1:06:62:e0:eb:4f:ea:62:d8:6e:cc:0a:
9b:3c:3e:f3:90:80:62:c9:2e:53:48:a5:64:46:50:
9b:be:5c:27:ea:40:43:8b:f8:b5:ac:73:17:cb:24:
c1:dc:78:ad:01:a6:c3:0e:34:48:ce:f6:fb:58:57:
c0:a1:89:f3:7c:57:cd:9c:99:54:3c:8e:64:c1:04:
9a:06:03:4e:9a:23:70:f5:87:de:22:1d:ae:08:6f:
c8:58:e7:e8:84:31:ce:ca:54:bd:6c:38:62:2d:c6:
45:02:67:d2:31:9f:f1:9b:ed:f0:7c:e4:98:73:34:
2f:a5:51:12:11:6c:2f:6c:67:8c:28:19:0b:49:60:
b3:d5:08:8d:e9:cb:2f:25:18:f0:e9:aa:d7:60:85:
2a:7a:ad:90:5a:54:fb:b5:ab:0a:74:af:dc:89:87:
fe:b5:23:0d:87:dd:6e:f1:4a:b7:3c:67:72:f3:b2:
d6:d6:23:23:5a:99:17:37:be:de:89:31:68:3e:08:
bb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9F:7F:5F:DB:3A:46:2F:FE:CE:0A:9D:2A:0C:3E:E0:CE:FA:26:A4
X509v3 Authority Key Identifier:
keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.112.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:80:73:90:4a:b4:45:32:f6:9f:dd:21:b7:23:0b:e4:73:31:
f3:7c:95:0f:0d:e8:e8:94:4b:0e:9e:1f:a8:f4:90:39:80:6b:
29:87:c3:ff:50:97:28:04:d3:56:2d:be:28:a7:ce:18:68:10:
71:cb:48:b3:ed:fd:06:c4:88:4f:1e:cb:80:6f:73:60:46:eb:
20:da:4d:3e:ec:23:00:cf:71:56:2a:a9:32:a2:b2:0b:de:f1:
4e:66:97:bd:10:1b:03:24:d8:e6:38:85:53:52:fd:ac:c5:ad:
6a:3c:f7:81:b2:a3:42:dd:94:0d:e3:64:bf:40:8b:9a:ee:8e:
f2:a8:27:3f:bc:86:0f:14:26:93:4f:e2:91:d4:b0:ab:51:52:
e2:86:83:3b:70:85:18:8f:49:79:ea:b1:cf:e7:61:16:73:7b:
e6:5c:a6:47:32:1e:55:0f:e7:76:67:26:96:28:17:b6:f5:37:
92:61:26:86:20:6b:ac:ea:93:97:6a:14:a0:74:ad:c7:ac:9d:
99:c1:61:1e:56:38:d2:a0:b5:5d:cd:49:bb:a1:b4:de:75:42:
ac:06:2f:f7:ff:cc:fb:e8:75:43:23:fe:1a:db:8d:75:cb:44:
92:af:2a:40:a1:f8:1e:81:5b:03:95:7c:01:9a:0a:ce:76:93:
d9:a3:37:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:23:50 2026 by rpki-client