
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3230382e302f32302d3230203d3e203535393930.roa
File: 3133392e3135392e3230382e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier: N82NPIYcPmRxV+vhzXL/H+dskYUv9ihBJIEojSJO4I0=
Subject key identifier: 16:07:EA:3C:B9:B0:41:5C:4D:69:74:9A:B4:27:6F:CD:81:48:10:1A
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 1B146110DD4C1A612D5B926312662DB906BEF002
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3230382e302f32302d3230203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.159.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:14:61:10:dd:4c:1a:61:2d:5b:92:63:12:66:2d:b9:06:be:f0:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=1607EA3CB9B0415C4D69749AB4276FCD8148101A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:8a:4e:ef:1f:ee:ce:5a:8b:21:0d:89:7e:4e:
c6:45:cc:e5:99:b5:af:b8:99:31:ca:69:1e:24:e6:
9f:bd:d6:86:8b:5b:2d:aa:73:3a:f8:7d:2d:7b:2d:
72:dc:39:a3:30:1d:ff:a2:2f:5f:17:47:8c:70:f9:
57:c8:47:30:12:d5:77:b8:c9:66:e4:f4:70:f7:24:
57:a6:f3:f9:5e:19:11:ab:d3:91:fb:45:46:5a:fb:
f3:2f:c3:52:91:78:f9:45:a1:39:d0:6f:60:3a:fb:
67:aa:ee:5e:eb:9e:3a:5a:f0:13:9e:75:ff:75:8b:
f3:fd:c2:fb:aa:a4:25:46:f1:32:0e:a1:6d:63:1f:
b9:85:20:d1:d3:3b:14:a5:84:9d:d5:44:4c:68:ce:
6a:3b:0d:f2:11:ea:59:ba:6b:fa:e6:0b:ef:aa:cb:
ab:05:56:ff:8e:9c:f4:9b:47:0d:0b:a9:fd:57:fd:
9c:12:17:47:89:1b:b5:79:f9:76:d3:94:90:8d:d6:
c2:eb:d6:98:61:bf:fb:72:3e:38:3f:0e:9f:ea:17:
35:69:0a:59:c9:e0:1b:0f:b2:1e:84:cf:c9:18:f5:
b4:27:29:53:c8:18:4b:76:c6:ae:71:ad:0f:dc:78:
99:51:df:cd:a6:0e:d7:60:1a:5d:df:36:75:33:5a:
2b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:07:EA:3C:B9:B0:41:5C:4D:69:74:9A:B4:27:6F:CD:81:48:10:1A
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3230382e302f32302d3230203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.208.0/20
Signature Algorithm: sha256WithRSAEncryption
d4:db:24:27:63:fc:78:f4:56:78:3e:7b:86:d9:33:0c:b1:d1:
6d:e8:14:70:d4:1a:33:30:87:ad:6a:1f:99:ef:3c:70:19:76:
6c:ad:44:6e:4f:cf:25:b2:95:98:1c:1b:0d:87:ba:a4:f1:45:
a7:8e:8f:0f:96:0e:07:94:26:83:66:36:6c:ef:d7:37:b8:94:
ca:ed:53:e7:12:f6:2e:68:7f:d7:9a:c2:25:f3:56:9b:05:b5:
67:42:b4:5c:c5:8b:12:d2:7e:2a:3a:fa:5d:37:53:f3:a3:f6:
37:43:7f:3b:6f:24:7c:1d:ba:cd:15:a4:e1:10:82:a3:22:eb:
aa:eb:dd:85:5e:0c:36:3d:ee:65:e8:88:3a:47:d6:92:0f:6d:
af:89:08:fa:b6:f2:f0:6f:6f:1f:8f:13:38:2b:7d:6b:3d:b5:
d2:37:88:ef:0f:a1:d7:8f:67:6f:54:e2:23:69:2f:60:82:e3:
ce:eb:e6:a9:9d:3d:30:be:2b:be:5a:af:bd:93:ea:d6:c9:dc:
d6:f7:a5:a6:f1:b4:37:19:c2:14:61:fe:98:dd:5a:e1:df:90:
a7:b0:3f:fa:f4:34:fc:37:6f:fd:78:d9:3a:09:4d:96:93:39:
42:ad:31:af:9e:57:5f:89:77:50:8e:b2:77:ed:02:4e:53:a9:
a1:34:68:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:52 2026 by rpki-client