
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136302e302f32322d3232203d3e203535393930.roa
File: 3133392e3135392e3136302e302f32322d3232203d3e203535393930.roa (raw, json)
Hash identifier: 2okyg+poH2/ExponU9MSFumkDjPNh5vIkGVrt1xa7t8=
Subject key identifier: 74:6C:87:9F:5E:70:E9:4B:B3:8C:E1:7E:50:CB:2C:8E:12:42:A4:AC
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 534879234CC26649F227F461226BE1093EFC79C8
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136302e302f32322d3232203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.159.160.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:48:79:23:4c:c2:66:49:f2:27:f4:61:22:6b:e1:09:3e:fc:79:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=746C879F5E70E94BB38CE17E50CB2C8E1242A4AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8d:3f:4f:ae:ae:ee:86:ed:02:59:85:cb:09:
d4:c8:ab:eb:9e:b0:82:fc:29:e6:6c:14:75:55:52:
58:8c:3b:99:0c:2f:c3:dc:36:32:a1:bd:60:9b:60:
33:61:bd:57:d4:31:6e:7f:f3:26:fa:e6:c5:45:b1:
2e:28:6b:0d:98:99:79:59:0d:96:05:d2:38:61:d6:
2a:83:01:9b:d8:c8:ff:e7:44:5d:32:b0:ba:0b:be:
64:82:e3:a6:fb:e7:63:39:28:3e:c7:c2:97:6b:4d:
56:70:69:4d:16:3e:f0:b2:c2:f4:33:22:f6:62:69:
78:20:3b:f2:9f:02:87:dd:ad:8d:3e:9a:2e:67:ef:
82:5c:c5:61:42:58:21:20:15:b5:11:9b:06:66:d9:
49:25:f5:58:0d:4b:db:7a:bb:43:24:83:3f:86:c5:
4d:d4:b0:9e:b2:08:d1:87:d5:0b:42:69:ac:20:37:
58:b6:25:b3:e0:bc:89:36:48:3f:1f:1d:10:3c:2f:
3e:18:47:b8:b0:31:a3:72:b9:37:3a:1a:6f:0e:f6:
c9:03:33:bc:59:86:ea:11:81:b6:7b:9d:91:e2:0f:
c4:23:2d:db:dc:9f:26:b0:c2:70:e0:ed:38:6c:05:
6a:a0:9f:bc:a4:94:90:f0:65:4b:16:67:69:1c:06:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6C:87:9F:5E:70:E9:4B:B3:8C:E1:7E:50:CB:2C:8E:12:42:A4:AC
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136302e302f32322d3232203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.160.0/22
Signature Algorithm: sha256WithRSAEncryption
15:0f:97:2f:b6:50:33:50:7d:c9:64:48:18:d1:50:07:2d:85:
21:3e:7b:0c:6b:27:32:23:1e:7f:03:70:ce:49:30:e9:7e:c7:
d8:c6:ee:2d:24:32:75:c4:4e:33:09:e2:ce:0c:15:20:b0:de:
84:1e:cb:ba:c7:14:a3:56:86:a6:3b:d0:e4:71:5e:b7:83:8f:
6f:40:12:11:59:7f:e2:d8:23:1e:67:24:7c:1f:ae:21:22:4f:
26:34:75:d0:15:aa:6f:0b:93:3d:6c:b9:83:66:a7:2f:f2:66:
fe:31:0a:ae:c3:3c:aa:d1:49:60:23:cc:a6:fb:40:82:42:fd:
57:35:69:dc:0c:ee:5e:37:82:82:e9:5d:5d:db:c4:c4:fe:fd:
ca:73:0c:ca:1a:10:2d:d4:49:f9:f5:18:80:63:86:c2:9c:d3:
50:c1:bf:20:0f:e2:57:06:11:2d:24:ea:4a:f4:53:dc:2c:ca:
81:9a:f4:06:78:3f:42:cf:10:3d:7c:14:f8:05:74:6a:38:4f:
b6:06:c3:12:9e:bf:d0:bc:e4:f0:c4:8f:ae:18:ff:4f:ab:f0:
a9:53:24:d0:69:26:f4:03:41:60:80:c5:8a:d6:cb:86:9c:f8:
25:30:bd:88:7d:9c:ed:0c:e9:0f:4d:02:e9:1a:f3:21:2a:7a:
6d:39:07:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client