
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131332e302f32342d3234203d3e20313338393530.roa
File: 3133392e3135392e3131332e302f32342d3234203d3e20313338393530.roa (raw, json)
Hash identifier: 7sRIVlJ3JUGN7CFpJD00rshyf7PoKtEVYLRHKjwkdIw=
Subject key identifier: B4:C1:C8:8E:47:3F:3F:C8:97:73:F7:C0:E3:39:C6:4B:CE:84:C9:8C
Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial: 04768DC021A9962582B08C996CEDA6BCF7FF89E8
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131332e302f32342d3234203d3e20313338393530.roa
Signing time: Sun 28 Jun 2026 13:49:05 +0000
ROA not before: Sun 28 Jun 2026 13:44:05 +0000
ROA not after: Sun 27 Jun 2027 13:49:05 +0000
asID: 138950
IP address blocks: 139.159.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 21:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:76:8d:c0:21:a9:96:25:82:b0:8c:99:6c:ed:a6:bc:f7:ff:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Validity
Not Before: Jun 28 13:44:05 2026 GMT
Not After : Jun 27 13:49:05 2027 GMT
Subject: CN=B4C1C88E473F3FC89773F7C0E339C64BCE84C98C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:ca:aa:4e:70:ce:ea:4c:5f:34:ce:43:39:
59:81:ac:85:df:4f:08:8f:28:73:7e:73:c8:ed:b5:
90:f7:ae:85:f5:d6:ab:7d:31:3c:41:27:eb:4e:34:
5b:62:d0:9c:30:2b:5a:3a:ce:c6:e9:c6:7d:c6:b0:
c4:5f:b3:ae:26:6b:4d:01:5f:b5:13:6c:df:9d:24:
57:2e:36:6d:68:ea:be:98:49:4c:d9:3d:b6:2c:61:
cf:a5:6e:06:b4:90:34:3d:90:8c:5e:00:2f:ee:8b:
1b:85:a4:ee:a5:ec:01:74:e8:a4:0d:4d:ff:82:70:
82:65:3d:60:78:f3:74:5d:38:a2:bc:b3:68:29:27:
32:c0:06:6d:b0:ed:c1:17:7d:d7:cf:e1:e1:9b:0b:
4c:c1:b3:99:3f:b7:85:ec:2b:86:c2:99:de:dc:5d:
53:18:17:d5:7b:62:c6:fb:86:00:3c:06:3e:bc:21:
01:df:2f:13:e1:e6:37:05:10:db:57:2b:91:e7:29:
c4:08:82:06:3d:b7:6d:d1:80:09:df:a8:87:86:06:
08:18:64:0e:23:2e:dd:8f:92:5d:b7:22:ef:95:1d:
40:b1:b0:cf:70:56:a2:38:bb:33:53:7a:35:b4:5a:
5a:dc:74:e2:c2:13:2a:25:04:21:0b:9f:30:ff:51:
d3:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C1:C8:8E:47:3F:3F:C8:97:73:F7:C0:E3:39:C6:4B:CE:84:C9:8C
X509v3 Authority Key Identifier:
keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131332e302f32342d3234203d3e20313338393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:bc:c8:09:37:0d:e7:9d:aa:01:29:63:4c:b7:a6:c1:d4:58:
e3:c8:bd:e4:a9:9a:01:17:cd:d6:c8:51:21:f6:03:bc:11:bd:
f8:52:7b:74:e8:6d:f5:7c:c9:b7:c2:b0:a6:2c:12:98:68:ec:
2f:03:c6:70:ab:a8:ba:ce:9d:e6:e0:f4:7d:1d:dd:27:48:29:
14:04:13:8e:38:3d:7a:db:c4:7f:28:89:04:a7:b8:06:01:51:
0e:9a:64:de:bf:84:d6:06:06:ad:58:a7:92:cd:d8:3c:a2:28:
11:62:12:ca:99:65:8f:20:63:e6:93:18:a1:4d:f4:93:74:dd:
f9:22:19:5a:61:f0:17:f0:73:6e:f3:37:b6:f5:8f:8f:10:a6:
51:9d:2a:a3:a6:ea:5e:a5:b2:a4:3c:8e:40:8c:74:3c:36:81:
c4:c2:d3:f4:c0:35:00:ef:bb:cc:07:3b:d8:44:b6:89:90:a5:
d2:37:8e:b9:b1:12:6f:e3:14:21:62:02:32:5e:a7:69:3c:c0:
88:84:0f:14:3e:ab:68:47:48:14:19:f4:78:44:7a:29:e0:62:
91:29:7d:48:c5:1a:ad:cb:a5:44:d6:d5:b3:c4:1b:d6:d0:b9:
2d:1a:4b:b5:e8:89:b4:15:54:ce:d1:ff:fa:3f:71:a8:5f:a9:
fd:1a:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:25:59 2026 by rpki-client