
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e203233373234.roa
File: 3133392e3135392e3136362e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier: lPuT4z/5bRXUx9H5M8b3AoSzkE2x8yZUNPxTEToJrKc=
Subject key identifier: C5:90:6F:5B:AE:D7:32:FE:FB:8A:D8:8A:20:F2:B5:18:9F:BD:A8:8F
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 7A1483D1E4A24C922FAF6635F838D6E5617FA706
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e203233373234.roa
Signing time: Tue 16 Jun 2026 15:37:45 +0000
ROA not before: Tue 16 Jun 2026 15:32:45 +0000
ROA not after: Tue 15 Jun 2027 15:37:45 +0000
asID: 23724
IP address blocks: 139.159.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:46:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:14:83:d1:e4:a2:4c:92:2f:af:66:35:f8:38:d6:e5:61:7f:a7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 16 15:32:45 2026 GMT
Not After : Jun 15 15:37:45 2027 GMT
Subject: CN=C5906F5BAED732FEFB8AD88A20F2B5189FBDA88F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:22:18:28:b1:a7:29:50:67:45:66:0f:28:ee:
a3:0c:43:b5:b4:0e:94:a1:c1:a1:f3:89:e7:39:b7:
20:71:34:a1:1d:14:48:15:84:35:9f:d1:4e:5d:ec:
1a:ee:ec:33:0c:38:ce:54:4d:03:88:6e:f7:a8:01:
d7:42:28:fb:ac:99:41:cd:71:95:dc:ae:38:ff:ad:
57:75:f1:38:30:2d:c7:0c:47:19:17:6e:36:9d:ea:
72:03:54:af:47:43:5f:86:1d:cd:b9:07:7c:54:58:
a1:e6:2f:57:a5:60:28:78:25:dc:88:80:44:1f:24:
78:bb:83:31:91:18:16:ef:2f:ba:9c:00:33:28:b7:
82:20:d6:f1:d6:9f:a6:13:01:10:d5:2d:b7:35:74:
8f:ec:95:35:2e:8d:e1:b8:f4:1d:6d:69:23:c5:b1:
bc:17:c5:b5:70:6b:ed:08:ea:4c:e7:f4:30:e7:9d:
b9:23:37:61:bd:9d:07:c0:3b:ad:ed:01:22:b6:13:
0b:57:ad:6c:d0:3c:de:50:70:bd:fd:1e:c9:2f:7b:
5c:d7:92:5c:0f:00:06:31:25:04:a2:cd:4d:e2:eb:
1a:cc:68:61:e3:e0:c1:ab:f0:2a:55:65:c4:5d:79:
af:b8:88:bf:18:a9:39:18:83:bb:3c:89:b8:c1:5a:
28:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:6F:5B:AE:D7:32:FE:FB:8A:D8:8A:20:F2:B5:18:9F:BD:A8:8F
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.166.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:17:9a:b7:2c:cd:b8:5c:75:27:8d:7e:64:70:73:1d:f8:3e:
10:d2:a9:47:d1:87:d6:a3:7e:1a:f1:d0:8f:e7:74:9e:49:fb:
15:f3:33:cb:be:fc:7c:6f:1e:d4:b5:42:a7:68:97:98:41:2a:
38:81:2e:86:3d:67:f6:b7:74:e2:b2:95:f6:2c:2f:66:64:1a:
59:e2:c9:c8:ba:d3:e0:88:2e:d1:5d:6f:f4:7e:1f:b7:b9:9c:
f5:9f:1e:8a:6a:fd:74:f0:12:1c:d6:d9:de:31:06:a2:6b:26:
ee:ed:21:7c:1e:d9:70:76:65:c9:c3:6b:e7:d4:4d:e3:7f:1a:
ea:19:02:80:f2:c0:3e:ec:54:88:48:0d:74:a8:be:09:b2:d3:
a1:e8:c1:17:ea:66:ca:bb:9d:30:5b:21:19:17:b7:6d:f1:85:
06:67:f4:c3:97:ea:d1:9f:71:32:b1:3a:44:8a:90:8b:d4:58:
e8:aa:3b:dd:5a:de:b6:8c:35:6e:f2:f6:74:5e:1c:4e:86:be:
1a:56:d4:ed:82:89:ff:83:59:83:eb:8e:7d:7c:a9:d8:55:a3:
21:7e:6a:cc:2c:52:97:75:c5:43:d3:7e:e7:99:c5:29:85:0e:
b5:5c:61:9b:2b:8d:55:49:d3:17:56:1c:d9:23:b2:d7:f6:6c:
52:27:76:c2
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUehSD0eSiTJIvr2Y1+DjW5WF/pwYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MTYxNTMyNDVaFw0yNzA2MTUxNTM3NDVaMDMxMTAvBgNV
BAMTKEM1OTA2RjVCQUVENzMyRkVGQjhBRDg4QTIwRjJCNTE4OUZCREE4OEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeIhgosacpUGdFZg8o7qMMQ7W0
DpShwaHziec5tyBxNKEdFEgVhDWf0U5d7Bru7DMMOM5UTQOIbveoAddCKPusmUHN
cZXcrjj/rVd18TgwLccMRxkXbjad6nIDVK9HQ1+GHc25B3xUWKHmL1elYCh4JdyI
gEQfJHi7gzGRGBbvL7qcADMot4Ig1vHWn6YTARDVLbc1dI/slTUujeG49B1taSPF
sbwXxbVwa+0I6kzn9DDnnbkjN2G9nQfAO63tASK2EwtXrWzQPN5QcL39Hskve1zX
klwPAAYxJQSizU3i6xrMaGHj4MGr8CpVZcRdea+4iL8YqTkYg7s8ibjBWijJAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUxZBvW67XMv77itiKIPK1GJ+9qI8wHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODUzODkyNjUyMjM2ODEvMS8zMTMzMzkyZTMx
MzUzOTJlMzEzNjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzMzM3MzIzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAYufpjANBgkqhkiG9w0BAQsFAAOCAQEASxeatyzNuFx1J41+ZHBz
Hfg+ENKpR9GH1qN+GvHQj+d0nkn7FfMzy778fG8e1LVCp2iXmEEqOIEuhj1n9rd0
4rKV9iwvZmQaWeLJyLrT4Igu0V1v9H4ft7mc9Z8eimr9dPASHNbZ3jEGomsm7u0h
fB7ZcHZlycNr59RN438a6hkCgPLAPuxUiEgNdKi+CbLToejBF+pmyrudMFshGRe3
bfGFBmf0w5fq0Z9xMrE6RIqQi9RY6Ko73Vretow1bvL2dF4cToa+GlbU7YKJ/4NZ
g+uOfXyp2FWjIX5qzCxSl3XFQ9N+55nFKYUOtVxhmyuNVUnTF1Yc2SOy1/ZsUid2
wg==
-----END CERTIFICATE-----
Generated at Tue Jul 14 22:50:07 2026 by rpki-client