
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3132382e302f32302d3230203d3e203535393930.roa
File: 3133392e392e3132382e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier: OYevJz5STUaF6gIhxHiJ9h6O2+11rUKR045HSNi2cs0=
Subject key identifier: 35:BC:C0:A7:C8:CE:BB:71:76:8F:AA:96:F9:54:21:19:E3:17:52:68
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 524FFFB36135CF447A859B0B7EF05512663BDC43
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3132382e302f32302d3230203d3e203535393930.roa
Signing time: Tue 09 Jun 2026 17:03:01 +0000
ROA not before: Tue 09 Jun 2026 16:58:01 +0000
ROA not after: Tue 08 Jun 2027 17:03:01 +0000
asID: 55990
IP address blocks: 139.9.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4f:ff:b3:61:35:cf:44:7a:85:9b:0b:7e:f0:55:12:66:3b:dc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 9 16:58:01 2026 GMT
Not After : Jun 8 17:03:01 2027 GMT
Subject: CN=35BCC0A7C8CEBB71768FAA96F9542119E3175268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:6c:ba:c5:78:08:4d:96:51:40:de:b2:a0:d3:
d8:a7:2a:2e:e2:4d:b8:0b:11:5c:a9:c9:1e:ab:25:
d4:91:ab:dc:6a:df:a3:99:67:12:0c:64:c0:ca:39:
df:5b:4d:6f:2f:53:9d:60:c7:4a:a8:62:07:fd:44:
7b:8c:2b:b5:54:c0:98:7c:c1:ea:26:f3:91:b0:63:
48:7c:9b:c1:d1:b4:17:00:b3:33:6f:fb:c4:8c:3b:
57:43:09:6e:3e:61:61:c2:fc:1c:0e:cb:e5:58:36:
7d:14:a5:24:b5:2b:98:ea:73:4c:0b:1a:67:f6:56:
5c:11:f7:12:9c:ec:c0:06:f4:a3:32:40:92:93:cf:
ae:5c:6a:cb:62:31:1c:df:69:6f:bf:48:86:34:cb:
f7:17:53:ae:d8:69:a6:ee:e1:ea:01:ca:35:a8:44:
1f:84:58:ee:f2:dc:9f:63:95:d5:c3:c2:30:fc:3a:
ca:da:e3:fa:08:c8:54:a3:17:ec:17:73:0b:c1:34:
65:ad:07:1a:14:08:38:40:01:d7:4c:61:93:e6:4f:
f6:61:25:c6:e5:5f:41:32:d4:e5:40:e9:78:5e:ef:
c4:cc:08:ef:1c:76:2e:7d:a5:08:12:53:b4:b1:0d:
43:5b:cf:b8:32:fc:0a:ca:1c:5b:f1:56:ef:a2:c9:
1e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BC:C0:A7:C8:CE:BB:71:76:8F:AA:96:F9:54:21:19:E3:17:52:68
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3132382e302f32302d3230203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.128.0/20
Signature Algorithm: sha256WithRSAEncryption
3c:ea:58:7b:94:b9:94:5c:63:9b:82:5e:e6:55:20:7d:d9:a8:
0f:13:56:a0:69:1a:af:2d:2e:60:07:7b:96:5b:e0:61:c7:b1:
42:61:e8:d0:cd:fd:a1:a3:72:cb:a4:0c:cb:f0:bd:d6:7b:33:
9b:71:3c:ff:a0:d4:7b:d5:4e:58:20:55:1c:f6:02:04:21:e1:
26:ce:cf:bc:ec:3c:07:2a:3b:cb:8d:92:2f:cf:11:bf:95:05:
00:ea:43:a9:84:89:91:92:08:98:01:f8:26:a7:79:59:9f:bb:
15:8a:ed:da:9b:dc:19:e5:02:12:5d:22:27:e6:23:0c:c6:1f:
d2:19:b2:fe:53:76:9a:92:9e:eb:24:75:5c:38:cb:ee:6b:e7:
fb:17:ca:19:ef:a0:22:d7:d1:b8:90:4d:98:41:67:7e:67:97:
1a:86:f3:a1:25:7b:5f:a3:1e:47:e8:d9:41:fa:87:1e:74:02:
65:99:58:7e:1a:ef:89:75:8d:74:87:ba:e8:c2:33:4d:aa:6a:
7c:d8:00:98:7d:fd:d7:06:78:69:56:c2:f6:10:56:81:fa:80:
df:f0:e8:80:db:7f:14:75:ff:07:7d:a1:16:b7:87:13:fc:44:
6a:63:03:08:28:95:22:1b:b0:6f:07:49:cc:4c:67:dd:ea:69:
27:91:97:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:59 2026 by rpki-client