
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133322e302f32322d3232203d3e203535393930.roa
File: 3133392e3135392e3133322e302f32322d3232203d3e203535393930.roa (raw, json)
Hash identifier: LuoGwi3YA6fDaXBRi3cmNmgi7FTJphvIQCbeUnhgbQ8=
Subject key identifier: CB:AC:ED:A3:80:FE:BD:1A:F8:D8:B1:CE:AD:75:87:86:F9:A4:12:A9
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 3B9E1DDA620241EE8A94E6D15AC23BF329CCBB1E
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133322e302f32322d3232203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.159.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9e:1d:da:62:02:41:ee:8a:94:e6:d1:5a:c2:3b:f3:29:cc:bb:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=CBACEDA380FEBD1AF8D8B1CEAD758786F9A412A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:11:0f:2a:02:50:cb:dd:c3:84:ba:6b:b0:
91:e9:17:ba:73:06:13:c8:e3:f9:85:89:2e:97:20:
51:90:c5:9a:66:ff:95:46:68:0c:1f:b2:ba:1f:44:
dc:ff:1d:5c:54:8c:49:db:2e:bb:2a:cb:ea:48:3c:
55:23:da:33:90:53:47:6e:e6:39:91:e6:4e:4a:90:
cb:37:4a:b2:e7:a6:cd:8d:34:ad:95:70:37:c0:c0:
d3:ca:c9:2a:4f:9f:14:79:df:37:07:11:db:71:49:
47:48:31:04:a1:4b:66:eb:1a:aa:ce:6e:bb:7f:ba:
dd:56:15:ab:dc:30:1a:5c:f3:bb:e1:dd:4c:0c:4f:
e5:58:8c:41:28:4b:b5:4b:5e:fd:fb:b4:b7:93:6c:
5d:ce:8a:0e:51:ae:7b:f2:7c:3c:b9:a4:d4:8b:05:
76:42:b9:4d:c5:2a:6b:ee:fc:0f:dc:8e:f2:84:e1:
6a:6c:48:e5:6b:47:92:1d:cb:42:d9:b9:c1:9d:b0:
86:a2:24:9a:a0:1b:82:1c:04:82:cf:f8:7c:7a:90:
10:60:1e:4f:e8:8f:05:22:77:e4:72:62:94:20:04:
00:db:80:57:3d:4c:c1:e6:e0:d4:d1:b1:66:1b:95:
3d:ff:01:c2:73:ff:15:7b:66:c3:5c:b9:17:ea:11:
54:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AC:ED:A3:80:FE:BD:1A:F8:D8:B1:CE:AD:75:87:86:F9:A4:12:A9
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133322e302f32322d3232203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.132.0/22
Signature Algorithm: sha256WithRSAEncryption
38:01:61:cc:4f:a8:3f:18:b1:f4:4d:d1:d5:c5:57:5c:f7:05:
26:77:fd:09:de:15:a4:b3:ea:11:d1:0a:fe:17:ea:75:65:f4:
4e:1e:38:f8:6e:25:d1:26:78:5e:7a:be:e1:6b:e3:8f:65:56:
61:58:9a:f5:81:aa:4c:c0:51:d7:4a:8c:f4:91:bf:da:49:45:
df:9c:69:89:46:82:5c:85:ac:1a:6d:84:89:f1:66:4a:27:f7:
7a:8c:99:4d:76:be:60:2e:e0:04:bc:1a:62:ed:63:57:07:09:
0f:cf:91:25:de:57:fa:59:8e:68:16:47:b7:b5:ac:19:06:57:
86:d0:8a:8c:d3:ff:f0:c3:d1:db:66:52:03:a0:60:61:72:85:
1c:a7:de:c6:b6:7c:0f:53:cd:01:34:b3:5c:13:82:fd:70:5e:
bf:c2:c6:e1:49:f8:93:70:17:03:ce:31:e8:96:8a:46:5a:95:
4a:8c:16:0e:da:42:b7:89:90:7c:0b:45:37:24:42:33:d9:65:
a9:16:74:40:cd:af:83:51:84:11:87:d2:d0:30:8d:54:ed:fc:
82:b3:16:56:7b:3f:53:a9:46:53:e7:be:dc:6f:f7:ca:4f:18:
d1:94:08:0a:ba:51:50:51:0f:18:ed:12:4a:52:58:65:a6:6c:
74:e9:cd:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client