
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa
File: 3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa (raw, json)
Hash identifier: XgzhZ0xTgSML+nf4xufZg+FlhNJOO9Jv3schrgvN8Cg=
Subject key identifier: A7:78:42:2A:EA:E7:77:F9:0A:5D:0A:9C:CE:13:30:B7:69:29:7D:F7
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 597A3F1126677157888DB697E2AE3AF2293057ED
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.159.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:7a:3f:11:26:67:71:57:88:8d:b6:97:e2:ae:3a:f2:29:30:57:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=A778422AEAE777F90A5D0A9CCE1330B769297DF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:34:05:64:7e:3e:c4:21:4d:e5:f4:1c:c9:0f:
82:02:e6:30:51:25:34:68:25:9a:59:d0:7d:3a:7b:
3e:27:85:d8:5d:1f:c4:16:7a:52:9c:83:ca:54:30:
25:8d:92:66:ea:d9:94:ff:0c:5f:04:77:cc:c7:17:
92:2f:60:13:68:71:73:58:bb:61:69:7b:e6:08:43:
61:88:c5:cb:e8:ff:25:4d:94:d8:2e:60:5a:69:44:
0b:fe:46:53:4a:c1:c5:42:44:45:e8:2c:ea:ad:7d:
1b:3a:90:3b:12:c9:16:ce:ca:05:0e:a2:b7:a3:7a:
60:ae:d7:a2:8c:a6:9e:5d:bc:41:7d:5e:54:d3:30:
16:24:83:5d:21:7d:42:35:08:1d:1a:28:3a:05:0a:
bb:ee:d8:0a:15:a5:ba:5e:08:97:9a:28:5a:91:f4:
57:cd:ba:ed:e3:eb:78:0b:53:13:52:f2:46:5d:3e:
e8:1b:e5:35:06:04:8f:44:66:a5:c3:30:94:51:c2:
a8:05:36:0d:ec:54:95:9e:90:83:75:78:90:07:ab:
c2:56:2f:27:39:fb:1d:58:30:dc:12:1a:9b:de:8d:
64:69:b2:b1:76:9c:a6:aa:a3:7e:26:92:4e:ba:2c:
e4:fe:3c:6c:0b:97:8e:27:fe:d7:c7:a5:9b:25:9f:
93:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:78:42:2A:EA:E7:77:F9:0A:5D:0A:9C:CE:13:30:B7:69:29:7D:F7
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3133362e302f32312d3231203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.136.0/21
Signature Algorithm: sha256WithRSAEncryption
98:76:b7:d4:02:81:ef:08:58:de:8b:c6:4e:05:ba:48:27:da:
8e:84:20:ab:8a:9d:ae:97:38:c8:09:42:1a:fa:fc:f5:a2:e3:
a1:7f:40:ce:25:42:2a:86:23:be:8c:9d:c7:ef:8d:cc:66:22:
1f:3a:16:1c:d3:a3:ae:58:eb:3a:2a:65:d8:2a:60:dd:aa:f4:
c7:cc:f9:7c:9e:0e:45:c6:5a:78:9a:cf:fa:3f:62:18:c0:24:
74:da:f3:59:55:5c:af:fc:e6:5e:ef:95:af:9a:aa:4a:93:61:
d7:9c:53:ac:38:9c:28:82:04:7e:cb:19:63:f4:fe:00:af:4d:
e3:1f:99:c9:52:e6:9b:60:9a:67:2b:ae:3b:26:6d:10:ad:9d:
79:e9:3a:97:2b:03:07:ac:55:f0:57:75:7d:e7:2a:4e:ad:e2:
fa:07:b9:78:0f:99:93:78:bb:39:02:a3:ce:bc:d7:b6:c8:aa:
08:8d:df:59:c7:f5:c8:dc:48:a4:21:d3:6d:94:38:4f:23:53:
13:e1:d7:55:c4:f7:a3:49:53:02:a8:94:20:7f:11:45:ec:8c:
76:d3:47:88:c6:ce:46:d5:e2:67:fb:78:9c:1c:b1:66:91:94:
56:61:93:2a:a2:68:af:10:c9:11:7d:c7:40:71:fa:a2:1a:0d:
ce:44:1b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client