
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e20313338343037.roa
File: 3133392e392e3134342e302f32302d3230203d3e20313338343037.roa (raw, json)
Hash identifier: AIgSKg1svbUaJf+e7k3UkMKRxFE/ZRn4jFq25143skw=
Subject key identifier: 01:B7:E7:28:01:7A:74:B6:46:86:89:8A:C7:8C:FB:AD:BF:80:D9:BC
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 53B2739DA385757E8BC3D6A92C3D0F7F585E0973
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e20313338343037.roa
Signing time: Thu 11 Jun 2026 14:52:01 +0000
ROA not before: Thu 11 Jun 2026 14:47:01 +0000
ROA not after: Thu 10 Jun 2027 14:52:01 +0000
asID: 138407
IP address blocks: 139.9.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:b2:73:9d:a3:85:75:7e:8b:c3:d6:a9:2c:3d:0f:7f:58:5e:09:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 14:47:01 2026 GMT
Not After : Jun 10 14:52:01 2027 GMT
Subject: CN=01B7E728017A74B64686898AC78CFBADBF80D9BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b0:18:0b:9d:d1:5e:b6:8c:41:c3:f6:cc:00:
50:c5:77:4d:33:80:8f:cd:84:d2:10:93:c1:8e:4a:
9d:48:58:e4:5e:f3:02:1a:05:10:4f:b0:87:50:04:
60:4d:b8:ee:d4:7d:c0:b1:d6:ef:3b:21:5a:03:c7:
0a:2b:f5:ce:ba:57:60:52:35:d5:8c:79:6f:2f:21:
50:31:28:2d:c9:7c:a0:25:9a:d0:c1:20:e3:31:f2:
ea:af:f7:cb:29:1a:42:6a:b3:7d:99:a0:b4:95:99:
53:90:0d:31:dd:57:1b:20:97:d9:01:3d:02:f2:18:
e3:33:07:3e:97:3d:6b:c7:81:85:eb:13:78:a5:f4:
4e:4d:9d:60:a0:7f:a0:fb:a7:e2:dd:31:1a:70:ae:
66:6b:15:9a:1a:da:ce:39:d7:85:42:69:72:53:f3:
8f:2e:85:28:eb:89:08:8b:52:2f:97:7f:c6:c7:23:
48:8e:35:2e:95:fe:75:12:85:85:88:9e:23:1d:17:
b4:7a:5c:f4:27:4a:21:f1:4a:79:6b:51:70:5f:f8:
4d:f6:5b:fe:a5:a7:58:be:eb:2d:44:43:5f:af:74:
30:cf:e0:c8:13:65:bd:e2:96:a5:40:bc:97:6f:6f:
ff:91:dc:82:7a:52:98:8e:e1:43:88:e8:cf:83:57:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B7:E7:28:01:7A:74:B6:46:86:89:8A:C7:8C:FB:AD:BF:80:D9:BC
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e20313338343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.144.0/20
Signature Algorithm: sha256WithRSAEncryption
bb:64:03:9d:ed:68:b1:6f:13:f9:6f:ad:ea:bf:de:cb:35:e3:
88:70:f5:2e:c8:5a:a3:3c:ce:69:51:74:3e:86:40:47:06:10:
44:1c:30:82:16:ed:f2:69:ca:7d:53:2a:e5:0b:4b:95:5e:32:
1c:14:76:f8:b2:71:eb:99:1f:94:b6:8e:65:89:1e:84:e5:c1:
7a:c4:c2:23:a7:b1:a5:63:74:f3:fc:99:68:fe:6b:d9:bb:e5:
94:80:c4:ba:0b:fe:c5:9f:1f:b4:a6:ee:75:08:4a:27:02:0f:
e6:2b:cf:2d:44:e0:b4:de:3a:4d:7f:98:a6:92:7d:d7:e4:f6:
6b:44:1a:a7:df:e3:b1:d9:31:33:ca:53:c0:a5:de:08:cb:84:
ca:79:5b:2f:1f:50:ab:ba:e4:7c:ba:b1:37:9d:c5:82:d2:9b:
7b:39:9b:98:20:d4:38:40:bb:5b:a3:84:44:a1:f5:ac:b2:41:
76:6e:86:45:29:7f:ca:c6:bb:ec:c8:06:c5:80:d1:f7:0b:28:
eb:39:f2:59:9a:cc:7e:23:4d:f7:51:14:88:3b:50:87:57:41:
5f:d4:60:f8:c0:f8:23:f6:10:8f:67:b8:21:f0:89:34:83:1f:
d7:b0:eb:0c:c2:23:4f:30:7a:96:36:9d:59:e1:1e:54:b1:37:
37:0b:dc:35
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:52 2026 by rpki-client