
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121362946/1/3133392e3139392e34322e302f32332d3233203d3e203435303930.roa
File: 3133392e3139392e34322e302f32332d3233203d3e203435303930.roa (raw, json)
Hash identifier: s5dvmIaXQE77eO89ZjC1lQmMyYmrUjpKMJa6mT7PtCA=
Subject key identifier: D3:4B:E4:6B:25:BA:54:0B:8E:2A:32:63:89:3C:EB:79:04:80:46:6D
Certificate issuer: /CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Certificate serial: 1F6800CB827EFDCD61F38192FFFDB293FF4FD87B
Authority key identifier: 58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/3133392e3139392e34322e302f32332d3233203d3e203435303930.roa
Signing time: Wed 03 Jun 2026 08:32:20 +0000
ROA not before: Wed 03 Jun 2026 08:27:20 +0000
ROA not after: Wed 02 Jun 2027 08:32:20 +0000
asID: 45090
IP address blocks: 139.199.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 05 Jun 2026 11:28:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:68:00:cb:82:7e:fd:cd:61:f3:81:92:ff:fd:b2:93:ff:4f:d8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39
Validity
Not Before: Jun 3 08:27:20 2026 GMT
Not After : Jun 2 08:32:20 2027 GMT
Subject: CN=D34BE46B25BA540B8E2A3263893CEB790480466D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bb:c7:be:c3:31:3d:df:83:d6:1d:c0:f7:17:
9b:27:0a:80:1d:02:b4:d2:9e:56:7c:ed:21:31:a7:
81:eb:c9:a9:01:03:00:96:1d:42:c4:67:93:ff:2d:
fb:b7:9c:25:79:65:d1:80:f7:9b:6e:a6:eb:3e:67:
16:ae:2a:b8:2c:06:df:df:f6:9f:91:66:ed:89:4d:
eb:6e:91:4a:3f:e0:9d:e0:b1:80:58:77:22:bd:20:
7b:4d:35:b2:83:1c:56:03:b0:5d:28:61:89:00:10:
9b:26:bc:1b:c4:6e:f0:87:b6:f6:f4:da:84:98:c8:
ef:2c:4f:12:d3:15:08:e3:e8:6e:0e:90:fb:19:92:
c6:b1:fe:26:3f:fa:a3:8b:d5:9d:d3:04:20:cc:0a:
36:2e:bb:22:1d:b2:cb:e3:20:7c:c9:9c:91:77:e5:
a8:62:a9:cb:9a:cb:01:85:ba:08:a3:f9:18:db:c5:
f0:9c:6b:42:58:12:01:2d:59:49:63:37:bf:e3:a0:
2c:68:28:31:27:71:96:48:ee:5a:e5:f7:3e:d8:7d:
16:79:7c:78:f7:65:b4:b2:12:3d:1b:cb:dd:e2:cd:
f8:d9:b6:8a:0d:70:55:53:b4:04:90:6e:98:da:68:
07:82:87:d9:64:c6:46:df:e6:cd:59:0f:80:6b:74:
16:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4B:E4:6B:25:BA:54:0B:8E:2A:32:63:89:3C:EB:79:04:80:46:6D
X509v3 Authority Key Identifier:
keyid:58:FA:AB:8E:1C:18:21:79:B4:6E:1D:6D:B1:E9:CA:5A:6D:58:9B:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/58FAAB8E1C182179B46E1D6DB1E9CA5A6D589B39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121362946/1/3133392e3139392e34322e302f32332d3233203d3e203435303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.199.42.0/23
Signature Algorithm: sha256WithRSAEncryption
97:69:f5:46:ad:f3:7b:9a:80:54:6f:0a:05:7f:2a:aa:81:02:
88:80:5c:09:30:2e:16:ab:b0:2f:9f:92:b9:5c:45:b4:6a:1e:
4d:8e:d6:2c:89:53:b8:ec:45:a0:ca:0b:85:46:17:7a:af:86:
dc:48:af:f2:8f:b6:da:fd:13:a9:0b:d7:b5:4e:ff:1e:f9:e2:
99:33:03:01:b8:4a:10:47:cc:9b:de:41:a8:92:06:04:85:07:
d8:42:a1:e6:65:29:91:31:fb:43:09:36:f9:ef:63:2f:6a:84:
84:63:4d:02:61:f9:2b:4c:97:de:6a:1a:e7:53:ab:d6:97:4e:
9b:b8:4d:9a:da:2a:40:bc:2a:c8:ef:7c:dc:fc:74:9d:61:59:
5e:02:bb:2d:7b:f3:3b:5a:50:86:bd:a1:3f:4b:db:9b:54:ff:
52:81:16:be:fb:e7:3d:f5:c3:fb:dd:30:12:ea:84:8e:b8:d4:
d5:c9:22:1a:07:fb:e8:a5:51:01:80:cd:2b:1c:9f:1f:54:03:
91:44:9a:b5:dd:3f:ef:a6:51:6e:82:f3:b9:85:22:4f:2c:10:
3d:03:8b:96:7a:c7:94:0d:8b:2c:1f:6f:dd:84:11:64:5d:bf:
54:c0:8a:2d:e5:0a:a6:46:d8:7c:67:50:a8:09:f8:42:d1:cb:
4e:eb:ed:d4
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUH2gAy4J+/c1h84GS//2yk/9P2HswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2
RDU4OUIzOTAeFw0yNjA2MDMwODI3MjBaFw0yNzA2MDIwODMyMjBaMDMxMTAvBgNV
BAMTKEQzNEJFNDZCMjVCQTU0MEI4RTJBMzI2Mzg5M0NFQjc5MDQ4MDQ2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfu8e+wzE934PWHcD3F5snCoAd
ArTSnlZ87SExp4HryakBAwCWHULEZ5P/Lfu3nCV5ZdGA95tupus+ZxauKrgsBt/f
9p+RZu2JTetukUo/4J3gsYBYdyK9IHtNNbKDHFYDsF0oYYkAEJsmvBvEbvCHtvb0
2oSYyO8sTxLTFQjj6G4OkPsZksax/iY/+qOL1Z3TBCDMCjYuuyIdssvjIHzJnJF3
5ahiqcuaywGFugij+RjbxfCca0JYEgEtWUljN7/joCxoKDEncZZI7lrl9z7YfRZ5
fHj3ZbSyEj0by93izfjZtooNcFVTtASQbpjaaAeCh9lkxkbf5s1ZD4BrdBbTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU00vkayW6VAuOKjJjiTzreQSARm0wHwYDVR0j
BBgwFoAUWPqrjhwYIXm0bh1tsenKWm1YmzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTM2Mjk0Ni8xLzU4RkFBQjhFMUMxODIxNzlCNDZFMUQ2REIxRTlD
QTVBNkQ1ODlCMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvNThGQUFCOEUxQzE4MjE3OUI0NkUxRDZEQjFFOUNBNUE2RDU4OUIzOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4MDA1NTEyMTM2Mjk0Ni8xLzMxMzMzOTJlMzEz
OTM5MmUzNDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzQzNTMwMzkzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAYvHKjANBgkqhkiG9w0BAQsFAAOCAQEAl2n1Rq3ze5qAVG8KBX8qqoEC
iIBcCTAuFquwL5+SuVxFtGoeTY7WLIlTuOxFoMoLhUYXeq+G3Eiv8o+22v0TqQvX
tU7/HvnimTMDAbhKEEfMm95BqJIGBIUH2EKh5mUpkTH7Qwk2+e9jL2qEhGNNAmH5
K0yX3moa51Or1pdOm7hNmtoqQLwqyO983Px0nWFZXgK7LXvzO1pQhr2hP0vbm1T/
UoEWvvvnPfXD+90wEuqEjrjU1ckiGgf76KVRAYDNKxyfH1QDkUSatd0/76ZRboLz
uYUiTywQPQOLlnrHlA2LLB9v3YQRZF2/VMCKLeUKpkbYfGdQqAn4QtHLTuvt1A==
-----END CERTIFICATE-----
Generated at Thu Jun 4 17:08:05 2026 by rpki-client