
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3232342e302f31392d3139203d3e203535393930.roa
File: 3133392e3135392e3232342e302f31392d3139203d3e203535393930.roa (raw, json)
Hash identifier: kyb8xFSpZwBpeaj7cGG+jkWO1FHsWpCf4dE9uShgtXY=
Subject key identifier: EA:20:F3:73:42:68:80:EB:BD:90:A6:A1:21:01:42:F5:A3:C8:4A:8D
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 22998A969B85E2301C470877A65C0E08567B9988
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3232342e302f31392d3139203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.159.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:99:8a:96:9b:85:e2:30:1c:47:08:77:a6:5c:0e:08:56:7b:99:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=EA20F373426880EBBD90A6A1210142F5A3C84A8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:7f:bd:3d:9a:33:83:56:e6:d6:42:54:c7:
93:0e:7e:51:34:14:aa:72:21:cc:ae:f6:7a:67:dc:
48:e1:11:5d:3d:54:c7:b7:04:ba:9f:e5:50:e5:20:
8a:57:7d:50:5e:f6:22:41:af:b4:9d:c9:50:54:96:
db:1d:85:12:24:11:0e:ef:21:37:e6:a7:89:ab:8b:
d7:30:c3:5e:e9:5f:32:46:dd:d7:1f:21:39:09:71:
db:2a:d8:0f:60:16:7a:9f:b7:3c:b6:c6:54:1d:83:
4a:b9:03:11:bd:ff:87:b8:ac:23:e8:0f:64:86:5c:
1c:08:fd:51:c1:04:ef:e2:bf:3e:5e:af:1d:d7:64:
be:87:cf:6d:5a:42:23:b0:50:86:43:9c:4d:9e:0c:
9b:64:ef:ce:82:ec:d6:a2:cd:b0:05:95:b0:3e:ba:
61:94:1d:34:a5:d9:26:33:d5:24:89:61:bd:59:60:
1c:ea:2e:fb:dd:85:69:d2:4c:81:4c:aa:c1:b5:0b:
99:d6:76:0f:fd:7d:02:95:78:d9:aa:0e:5c:65:57:
97:ba:80:e2:7c:3e:0e:60:93:2a:9f:6d:5a:27:d2:
2f:2e:94:4e:f2:e6:2b:93:7d:4c:31:9f:cb:e1:78:
cd:80:6f:3c:6d:e2:8c:73:ae:a6:0b:fe:ac:3e:67:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:20:F3:73:42:68:80:EB:BD:90:A6:A1:21:01:42:F5:A3:C8:4A:8D
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3232342e302f31392d3139203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.224.0/19
Signature Algorithm: sha256WithRSAEncryption
28:e0:7d:62:99:29:66:74:a6:60:6e:27:f9:36:70:d2:f9:71:
20:33:99:89:bb:c9:b2:dc:e6:36:a7:f7:b5:d9:af:f3:32:88:
c1:70:33:11:fd:f7:03:58:7a:0e:11:89:d9:f3:e6:44:b0:81:
93:c4:92:f3:5c:a9:d8:b2:69:93:04:6d:c2:99:de:72:50:57:
38:a5:ec:76:0e:25:62:d9:ac:9c:2c:35:b8:8e:f2:08:f7:98:
21:ca:94:89:cc:fd:e9:43:6b:ec:c5:ec:e4:b4:e3:93:74:02:
a5:66:90:41:1d:59:08:52:c0:5c:d3:83:16:b1:5c:ba:b3:0a:
09:af:7c:59:35:9e:fb:6f:96:8a:a4:69:06:3c:c0:ad:eb:3b:
49:87:38:23:f2:f6:b9:40:9e:75:c7:92:fd:cc:5c:da:71:ad:
dd:95:67:06:21:a2:21:ff:44:99:86:e9:ba:03:f8:fd:0e:f4:
2e:b7:dd:2c:3b:58:9e:3f:fd:d9:b6:a2:c1:1e:df:ce:2b:42:
11:df:e1:24:c2:a8:cc:27:8c:25:cc:7e:7d:77:04:74:02:99:
84:7b:e9:05:f6:58:a5:51:f4:51:0f:4f:08:59:c2:3a:da:2d:
86:a1:5c:be:09:a0:35:f7:37:73:ce:ba:4a:b1:16:46:d3:2a:
f0:97:cc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:56 2026 by rpki-client