
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa
File: 3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa (raw, json)
Hash identifier: SXVLS8TGSCkTP5SjcehyH9CGMPIkHhPfvnL1XsWf0c0=
Subject key identifier: E4:71:FD:0C:3E:C8:1E:6C:DD:26:73:DA:F0:66:64:FB:4A:1D:C4:93
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 07B09C12270BFAB0909C53E1616A44E8E2A8723D
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa
Signing time: Tue 16 Jun 2026 14:15:56 +0000
ROA not before: Tue 16 Jun 2026 14:10:56 +0000
ROA not after: Tue 15 Jun 2027 14:15:56 +0000
asID: 136958
IP address blocks: 139.159.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 21:18:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b0:9c:12:27:0b:fa:b0:90:9c:53:e1:61:6a:44:e8:e2:a8:72:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 16 14:10:56 2026 GMT
Not After : Jun 15 14:15:56 2027 GMT
Subject: CN=E471FD0C3EC81E6CDD2673DAF06664FB4A1DC493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:18:e0:90:8e:e4:da:fc:b6:27:e4:d4:62:55:
c3:0a:d0:6d:bf:90:17:17:d8:e0:6b:d7:66:55:42:
8e:10:dc:73:d5:c0:36:a7:95:f8:18:b6:39:f6:ef:
32:3c:07:e0:34:e4:75:59:6b:58:35:28:c0:11:aa:
6a:77:04:44:d0:0d:a4:fd:e1:55:7d:fa:01:b0:48:
8e:8f:6d:79:ea:16:dc:5e:79:6e:13:90:80:8a:57:
68:f8:7e:e6:81:e3:b8:2c:27:d1:a0:8f:c3:47:13:
ef:ae:21:e5:65:9d:d7:32:5a:de:90:78:c9:f2:79:
b7:5b:cf:55:d3:f8:41:da:ec:c0:87:18:1c:d7:e0:
f0:c9:de:5d:31:b6:af:bf:55:29:e6:95:24:3f:e5:
8b:78:1a:87:a9:8b:3d:09:eb:ff:6d:24:82:a4:47:
41:21:85:2e:3a:c5:ad:38:35:8b:25:b9:6c:8b:7b:
b9:cd:f7:1d:0c:58:cb:67:2c:6c:98:ae:89:fc:59:
ae:86:e0:fb:08:02:df:b0:c9:de:c5:7b:25:30:94:
87:8b:47:e9:66:2c:1c:92:3d:dd:0e:74:1b:81:b3:
48:cd:5f:04:f3:1a:6f:64:34:ce:6a:6f:73:e2:e7:
02:bd:51:78:f0:99:fa:e8:1a:a1:db:dc:64:4e:3d:
41:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:FD:0C:3E:C8:1E:6C:DD:26:73:DA:F0:66:64:FB:4A:1D:C4:93
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136382e302f32322d3232203d3e20313336393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.168.0/22
Signature Algorithm: sha256WithRSAEncryption
bb:b1:a8:cf:04:1a:cd:c6:5d:1a:79:93:f4:87:28:aa:4d:03:
17:e8:82:5e:99:2d:13:7e:dd:4a:22:53:01:9d:3f:cd:4b:4d:
84:92:af:73:5c:dc:5c:63:9c:e8:42:2e:d5:f1:1c:53:a5:88:
08:b3:ff:5b:f1:42:e6:1f:bc:00:bb:2e:1d:3a:a0:ae:89:d6:
43:3b:78:d5:0c:5d:cb:2d:8a:51:db:2a:64:88:4f:ca:f9:76:
82:f4:94:49:a0:87:5b:41:48:ca:fe:d8:15:53:a1:ae:d5:fe:
5f:ae:95:dd:57:c4:6f:34:07:d6:1c:0a:9e:85:16:72:1b:05:
88:fb:85:2d:70:29:fb:d0:6b:50:bd:cc:67:58:b1:4f:22:39:
ef:42:cd:9f:77:de:ba:90:1d:5c:5b:de:c1:a6:0c:4a:9e:3a:
b4:f6:7c:01:97:40:3f:ec:f9:3f:8c:a9:74:f3:1f:69:b9:b9:
40:6e:ac:52:c8:a9:dd:33:8c:ed:ce:85:6c:d7:b3:d6:85:07:
b0:ec:e2:52:0a:6e:ff:ba:8f:be:9d:7d:ea:3b:5a:ff:a4:7a:
ba:99:b2:71:1b:d5:64:20:31:07:79:3f:33:3d:75:8a:60:0d:
9a:1e:cd:2f:26:ff:f9:70:bc:5a:7f:04:13:a5:84:c3:17:ad:
d2:b5:13:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:37:42 2026 by rpki-client