
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3131322e302f32312d3231203d3e203535393930.roa
File: 3133392e392e3131322e302f32312d3231203d3e203535393930.roa (raw, json)
Hash identifier: I6rtH8+LXGdSEc4kstpcLIzH/psCcBuWZn6qLZX5qjM=
Subject key identifier: 9A:3D:84:EB:A2:D8:3E:2A:D4:87:D9:AF:BF:9E:6B:BC:74:BF:47:C6
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 0F8312B91853DF784B7DE3CEA0349C59373557D9
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3131322e302f32312d3231203d3e203535393930.roa
Signing time: Tue 09 Jun 2026 17:03:01 +0000
ROA not before: Tue 09 Jun 2026 16:58:01 +0000
ROA not after: Tue 08 Jun 2027 17:03:01 +0000
asID: 55990
IP address blocks: 139.9.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:83:12:b9:18:53:df:78:4b:7d:e3:ce:a0:34:9c:59:37:35:57:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 9 16:58:01 2026 GMT
Not After : Jun 8 17:03:01 2027 GMT
Subject: CN=9A3D84EBA2D83E2AD487D9AFBF9E6BBC74BF47C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f0:4b:3f:4e:c0:c9:b0:cf:1f:61:64:4d:4f:
c1:07:a2:93:a1:29:d4:d4:96:48:d9:72:0e:51:73:
46:a0:56:fa:6e:c0:2f:c6:8d:d7:81:4e:69:40:1c:
8c:71:e2:87:3f:45:65:04:c7:d2:69:fb:fc:53:e9:
dd:01:23:99:f2:5f:69:1f:45:1e:e7:79:64:15:c8:
a8:91:97:72:70:e9:fe:ee:f5:d8:19:dd:08:6b:b8:
99:02:77:9c:0c:c8:0b:bc:19:20:7c:5a:56:f4:56:
77:42:cb:b1:18:93:b1:b8:96:c7:00:5c:9b:94:78:
30:bb:4d:51:9e:71:08:34:f9:fe:53:93:97:e8:b6:
26:4f:29:1b:1c:76:82:c9:0c:1d:73:5b:ee:2c:4b:
d1:ca:6c:55:8a:8b:24:d9:5b:1e:ef:8a:47:b5:98:
75:70:9c:c4:aa:0a:9c:fb:bd:34:dc:8d:2a:69:31:
b1:fd:53:96:b0:34:20:9b:da:04:41:65:ff:f4:1a:
2b:d3:3a:34:83:1c:36:c8:88:3c:20:0b:51:70:0a:
5c:2c:89:d9:e7:8d:5e:31:07:92:f1:b1:15:18:66:
5e:77:5c:5b:e8:7c:6d:10:17:17:4a:67:c3:ab:42:
54:6d:c1:2a:9a:7c:91:ef:a6:81:60:0d:f8:2a:c5:
fd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3D:84:EB:A2:D8:3E:2A:D4:87:D9:AF:BF:9E:6B:BC:74:BF:47:C6
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3131322e302f32312d3231203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.112.0/21
Signature Algorithm: sha256WithRSAEncryption
b7:f7:f2:04:7c:6e:22:08:00:30:7f:fb:9d:2f:11:cf:13:d8:
83:85:8c:00:5f:93:84:db:7d:b0:17:ee:90:b6:bd:d8:1f:d6:
ee:c6:2d:7b:a6:62:32:7b:d9:6b:1b:59:78:f3:ee:03:ca:a6:
7f:9e:59:0e:03:56:de:b2:ad:fc:1c:85:2d:a5:11:28:41:37:
eb:3d:33:80:03:2b:f3:b9:83:23:1a:34:35:ea:b9:f6:dd:ae:
0a:58:fd:c6:7c:82:04:b2:55:61:2d:1c:95:44:d8:45:f9:2a:
83:be:a4:40:b9:00:7e:66:ad:a1:b1:dd:58:55:a6:eb:39:bd:
37:d3:74:dd:ec:2f:d4:ac:09:80:b0:44:2f:ba:32:e9:bb:b2:
9b:fa:0c:c8:d5:64:a7:e4:9a:9f:9b:c9:ac:12:56:fa:e1:89:
29:e2:a7:17:3d:c2:7e:36:cd:ab:8e:7d:0c:d1:b3:5e:4b:45:
41:b5:74:3e:e3:7b:f4:1a:41:09:d2:5b:dd:e4:d3:5f:d6:a9:
29:39:5b:ce:d9:89:db:3b:fd:dd:f7:eb:c9:e2:a8:02:ae:95:
61:1c:2f:5f:f1:a4:97:f6:a6:d7:19:62:ad:33:56:f1:6f:7d:
b1:4c:ce:d1:ef:44:b1:f6:4f:7e:a0:c8:75:a9:03:76:56:74:
ef:05:c2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:52 2026 by rpki-client