
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa
File: 3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: KPAOTt8wYMJ11vfUGh+BRyjaApro0Jq6GJ2iKDPBenQ=
Subject key identifier: 98:91:6A:1A:BC:1B:5D:A8:DC:3F:D7:28:D0:1C:11:15:8B:D0:22:5C
Certificate issuer: /CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Certificate serial: 4C25D290F7A0F6C281DEEA1DE204D2AA22D63539
Authority key identifier: BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa
Signing time: Sun 28 Jun 2026 13:49:05 +0000
ROA not before: Sun 28 Jun 2026 13:44:05 +0000
ROA not after: Sun 27 Jun 2027 13:49:05 +0000
asID: 140716
IP address blocks: 139.159.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 11:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:25:d2:90:f7:a0:f6:c2:81:de:ea:1d:e2:04:d2:aa:22:d6:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2
Validity
Not Before: Jun 28 13:44:05 2026 GMT
Not After : Jun 27 13:49:05 2027 GMT
Subject: CN=98916A1ABC1B5DA8DC3FD728D01C11158BD0225C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:89:23:e8:fa:e3:ef:16:30:3d:09:da:09:15:
78:5a:ff:f5:8c:86:10:93:87:06:a1:7f:6b:7d:f9:
38:4d:6d:0d:28:cb:23:7d:45:15:ad:32:e5:cf:49:
fd:53:60:a6:ce:1c:ad:aa:20:a3:d5:3f:d7:7d:b4:
30:b9:f1:2b:1b:e4:ba:ea:7f:17:d4:57:74:14:77:
ee:3b:a5:04:75:5d:c3:cf:d7:07:9d:da:b9:72:71:
ba:ae:6f:a7:57:7f:86:35:88:24:8e:1b:79:d2:96:
3c:a1:94:c1:74:e0:b1:45:96:8d:6a:6a:10:db:e1:
31:9d:3e:59:10:ca:1e:17:eb:a4:5e:0d:58:92:39:
37:ba:a2:ff:74:47:2b:6a:c7:d1:b3:f5:bd:c6:30:
f0:2c:bd:35:4a:d8:8a:34:89:a6:b3:2e:2d:b6:9d:
4d:14:1a:f3:02:e5:b1:41:43:2c:eb:74:0d:0e:b3:
49:0f:82:d2:48:15:8d:ee:bb:9e:fe:73:4b:93:2b:
37:4d:fe:08:b9:0e:4b:18:58:a9:59:93:d0:01:9a:
3c:e3:89:a8:3e:b0:1a:6c:18:e9:88:61:3c:fc:21:
e5:d8:e3:d8:53:49:fe:14:75:9d:94:46:b6:2c:20:
2a:35:45:2e:c9:08:61:dc:b2:6d:1e:3d:a7:b5:9e:
72:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:91:6A:1A:BC:1B:5D:A8:DC:3F:D7:28:D0:1C:11:15:8B:D0:22:5C
X509v3 Authority Key Identifier:
keyid:BF:61:A6:EB:2C:D2:94:2D:FF:BA:13:47:B9:40:D5:B9:7D:99:DD:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/BF61A6EB2CD2942DFFBA1347B940D5B97D99DDD2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/1/3133392e3135392e3131322e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.112.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5c:55:b7:83:74:86:7a:e5:a2:18:f1:b3:23:41:c4:cb:fc:
34:62:bf:1b:33:fc:6f:7f:55:51:c9:be:3a:06:e5:74:6c:73:
e7:a4:39:17:01:af:0b:64:6d:68:b2:21:5f:36:50:59:56:1e:
58:de:2c:f5:ab:ed:cd:ce:94:ab:98:1b:da:7b:67:0e:bc:b9:
6a:de:65:8e:88:18:7d:86:23:3f:66:99:76:47:20:78:ca:9c:
d8:45:bf:3c:f9:e5:4f:39:b1:fc:70:76:2a:d6:2f:80:21:1b:
ce:8b:6b:69:b7:39:e6:57:f2:4b:c6:1f:c7:2c:e8:b6:9d:b8:
70:7e:92:c2:2b:74:36:8a:eb:1a:7b:ba:5a:b1:e8:07:5b:a0:
d7:59:bd:24:a0:57:0c:24:da:2b:1f:16:ce:7e:43:eb:45:30:
41:fd:16:0b:cc:35:59:9f:c2:80:94:13:ee:20:0b:53:be:9d:
01:96:e8:16:93:61:34:23:fc:ff:13:2b:fe:50:ef:ea:65:08:
06:cf:da:98:11:50:6f:c8:4c:f9:c7:23:f3:a9:ab:80:3a:c0:
47:9c:6d:4e:3a:ad:ff:53:c4:b4:7c:aa:3b:5f:e6:75:9a:2c:
33:74:df:cd:75:82:22:ea:25:e7:6b:c6:8a:6d:19:82:18:d4:
ae:b5:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 23:09:40 2026 by rpki-client