
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa
File: 3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier: ZW7u1prkDs1ot45dOccNiB+WG2X62R5T7+dGgT80Hes=
Subject key identifier: 55:BA:5D:07:56:8A:4E:78:3F:71:68:DD:AD:58:C8:0C:A9:07:BE:31
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 75E0558F6DD386CF29347849C9FA74500535DD36
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.159.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e0:55:8f:6d:d3:86:cf:29:34:78:49:c9:fa:74:50:05:35:dd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=55BA5D07568A4E783F7168DDAD58C80CA907BE31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:52:6a:3f:51:e8:e3:96:5f:7e:15:cc:2b:a8:
af:4a:95:36:9d:ca:90:2f:4e:4b:9f:b8:0e:c6:68:
f4:41:86:38:22:fb:73:1a:54:d5:67:e2:21:0f:e0:
fd:af:b7:2c:70:25:cf:5b:67:a1:c0:0c:63:5f:63:
dd:0a:bb:fc:6c:38:b0:ac:06:9b:40:cc:e4:bf:c1:
07:bc:e6:4a:5d:34:a1:00:d9:a5:60:f5:70:c1:56:
52:12:3f:97:2e:1d:e4:ba:2d:3e:48:75:58:f2:09:
e2:ec:49:3d:63:75:00:f4:3c:4e:51:0e:00:0e:94:
7e:00:ca:93:c2:6a:69:b1:f7:02:fc:54:ba:d6:9e:
58:72:e6:dc:1b:39:59:05:1f:ac:64:a6:d4:fd:83:
6a:78:93:a1:50:70:91:d9:c8:1f:e5:3d:86:71:1a:
33:0d:91:7b:d5:08:f0:81:8c:0b:e8:4f:53:ee:05:
8b:69:9f:f2:e6:1e:5a:0d:a0:a4:d3:83:99:d7:7b:
0d:f8:33:03:d3:4d:3b:a3:0d:ac:b9:c9:a7:c7:44:
2e:5a:c0:0e:1c:2e:c7:f5:94:7a:25:7c:aa:11:88:
80:49:ae:3d:96:5f:61:40:3d:67:e8:f6:aa:66:ac:
d6:cd:33:90:01:97:3e:f1:6c:2f:cc:77:5b:91:3e:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:5D:07:56:8A:4E:78:3F:71:68:DD:AD:58:C8:0C:A9:07:BE:31
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3134342e302f32302d3230203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.144.0/20
Signature Algorithm: sha256WithRSAEncryption
3b:e3:68:6f:34:2d:ea:0c:9b:28:ff:d3:ba:b1:07:64:73:b1:
62:a3:a8:15:07:27:10:ac:83:78:2c:51:17:5b:f2:57:3c:09:
dc:b3:f3:69:35:44:50:23:94:3a:6c:88:d7:a6:cb:1b:43:aa:
9c:ee:21:f3:c0:08:0f:63:05:f0:88:78:ad:33:d2:bb:37:d4:
d4:2f:bc:f1:49:51:c8:74:b0:49:2d:a5:ef:9b:e5:55:f8:cf:
ef:85:0a:32:77:d1:55:c9:3a:3f:ea:0f:54:0c:41:a6:16:43:
ab:7f:81:54:d0:a2:c2:fd:21:01:fb:68:61:b3:46:e9:fb:fa:
f6:60:56:09:d7:7d:b9:d7:f8:11:8f:3d:9d:73:57:f6:cd:0c:
0c:e5:b2:7c:8d:a9:9c:63:75:52:45:25:5d:b4:94:30:ae:b2:
3b:df:b8:e0:be:8b:e0:86:35:86:f1:c7:c9:0f:76:e7:b0:e0:
4a:5a:d0:03:94:7e:7f:f4:85:75:a9:07:54:65:51:dd:94:6c:
76:d2:ca:ba:93:d3:9e:16:1b:00:a6:9d:e7:2e:f6:03:19:21:
58:51:82:5c:6c:29:60:75:13:77:a9:12:f6:af:29:82:5c:ef:
40:ac:ba:86:e7:ed:5f:90:6b:e4:9a:b6:0f:55:4b:c8:b5:31:
ca:d3:2a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:48 2026 by rpki-client