
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3130342e302f32312d3231203d3e203535393930.roa
File: 3133392e392e3130342e302f32312d3231203d3e203535393930.roa (raw, json)
Hash identifier: D1xrxzI9kf5tnk6IakhJfver9tSwfjpjHPIwdSS3dbU=
Subject key identifier: 14:A5:E2:1E:C1:C1:0F:7C:9A:0A:94:58:39:9A:88:E1:C8:75:75:B2
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 748297B1E8001A2198E82EB1884DAB7AC8A94609
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3130342e302f32312d3231203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:58:03 +0000
ROA not before: Tue 02 Jun 2026 17:53:03 +0000
ROA not after: Tue 01 Jun 2027 17:58:03 +0000
asID: 55990
IP address blocks: 139.9.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:82:97:b1:e8:00:1a:21:98:e8:2e:b1:88:4d:ab:7a:c8:a9:46:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:53:03 2026 GMT
Not After : Jun 1 17:58:03 2027 GMT
Subject: CN=14A5E21EC1C10F7C9A0A9458399A88E1C87575B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8d:4a:b2:7d:d3:e2:9b:d3:dc:39:13:27:f2:
29:5f:30:13:9e:52:d7:dc:2a:87:45:4e:c6:49:b7:
9e:2e:b4:30:0f:37:f0:5d:62:27:fa:09:42:3b:91:
4a:2f:d1:47:e0:fa:87:90:d9:19:41:ec:dd:ba:d1:
62:56:30:a4:51:df:d8:ca:53:f5:33:26:c7:bb:4d:
7b:0e:81:e9:1d:c4:9e:b3:27:12:fa:ba:ed:db:ca:
9d:21:f5:0d:e9:18:0a:76:54:67:5f:ac:18:ac:4b:
8a:4b:33:06:3b:94:3b:5f:e2:ab:11:43:2b:31:34:
30:a9:1f:59:b0:99:e1:88:2f:29:44:2d:b1:30:03:
51:f4:de:07:9d:58:f5:cf:b3:11:84:9e:14:a5:2a:
83:68:8d:95:3a:f4:48:d3:c3:b0:18:ac:bc:ad:2a:
ea:d2:a6:83:c0:fb:77:09:9f:87:f8:c4:d1:f8:f0:
9a:63:32:90:08:99:3f:50:cf:c6:a7:6a:32:46:06:
fb:f9:6e:86:8d:73:cd:0e:27:0f:86:15:b1:34:f9:
49:ec:35:f2:16:c0:d1:bb:e9:d0:95:62:8f:5d:e2:
41:5a:e5:08:9e:75:46:53:f7:a6:2f:1a:d0:e2:88:
47:1d:76:1c:77:69:42:6b:bb:43:be:77:4a:29:63:
a7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:E2:1E:C1:C1:0F:7C:9A:0A:94:58:39:9A:88:E1:C8:75:75:B2
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3130342e302f32312d3231203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.104.0/21
Signature Algorithm: sha256WithRSAEncryption
cc:51:f0:d4:13:8e:89:4d:0a:9f:ad:ff:c5:02:21:2c:47:e9:
b4:63:0f:4b:ec:b9:38:cf:50:e1:3f:20:d3:75:5b:5d:ae:14:
b5:2a:15:b6:65:58:49:78:4d:10:02:c8:5f:1b:a7:84:2a:70:
68:d1:22:50:1e:09:99:1d:6f:5b:9c:f0:c3:05:e5:c3:66:ee:
a2:f2:86:31:1e:03:dc:1a:73:e1:cc:f2:76:87:fb:b7:0b:ca:
42:0b:87:b5:55:54:b8:84:df:bd:86:45:55:0a:ef:e2:c7:ef:
3f:a9:4e:c3:68:25:81:64:50:d1:c4:5f:26:0f:8f:1e:bf:53:
ef:07:20:dc:91:90:4c:d9:4c:4a:e8:84:8c:2c:23:8b:45:eb:
44:b8:1a:73:68:bf:3d:52:f9:61:85:f0:f6:7b:d7:d4:a2:09:
48:84:4d:95:0d:47:3b:07:c2:53:8a:b2:64:a5:22:cd:11:06:
3e:bd:10:37:b7:b8:dd:f0:a0:20:e3:df:e5:da:55:3a:c0:42:
69:ca:31:03:db:6c:ec:ff:b1:05:01:e0:2c:de:14:b7:72:60:
65:cf:89:ef:42:ee:20:0e:ed:36:bc:03:72:8e:5b:5f:f7:7b:
3b:9a:77:19:b3:bb:33:30:e6:eb:b5:e7:36:65:e2:81:f6:9a:
d4:d4:c7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:55 2026 by rpki-client