
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e203538353139.roa
File: 3133392e392e3134342e302f32302d3230203d3e203538353139.roa (raw, json)
Hash identifier: 9qkZWiyGWOwRvdIbQEiErROr/sjfRttzNKLYHuZyGMY=
Subject key identifier: C1:F1:4D:AD:24:60:5F:86:1A:83:31:78:47:D7:9F:88:CC:BA:36:88
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 41C7C47A5918A71DAAF310D622026AF23BC77E3D
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e203538353139.roa
Signing time: Thu 11 Jun 2026 14:52:01 +0000
ROA not before: Thu 11 Jun 2026 14:47:01 +0000
ROA not after: Thu 10 Jun 2027 14:52:01 +0000
asID: 58519
IP address blocks: 139.9.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c7:c4:7a:59:18:a7:1d:aa:f3:10:d6:22:02:6a:f2:3b:c7:7e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 14:47:01 2026 GMT
Not After : Jun 10 14:52:01 2027 GMT
Subject: CN=C1F14DAD24605F861A83317847D79F88CCBA3688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:dc:f6:32:e4:25:eb:cf:da:17:0e:bb:b8:f2:
a4:b0:35:ea:4f:95:50:c5:4f:ae:3b:88:0e:68:ff:
15:f4:6e:54:67:18:93:b0:5d:af:ce:24:67:a3:db:
ce:b4:45:09:65:fd:9f:b7:60:e0:d1:f6:39:5b:da:
3e:e1:2e:7f:f7:0a:07:ed:23:05:d0:84:73:c8:21:
29:9f:29:de:4d:49:9f:ac:1c:58:9b:91:31:c6:59:
25:e7:fb:fa:7b:e9:20:91:a1:9c:01:34:bf:51:79:
58:b0:e5:99:b4:c3:bf:0e:96:18:f6:4b:e1:08:45:
fb:5b:f8:bb:4d:d7:66:42:f0:89:c0:09:da:b7:42:
68:52:df:b5:ff:4a:5b:94:ca:de:4a:b9:72:9e:a8:
56:77:ae:48:f8:48:74:3c:0e:87:2e:99:e4:85:8a:
5d:55:4e:91:8d:4c:99:9c:d6:b5:28:a0:68:1a:1f:
6f:f5:85:23:0d:16:9a:0b:bb:24:a3:2f:1c:36:1c:
7d:b7:5e:30:42:15:57:79:b2:51:3a:55:23:03:3f:
dc:cd:5e:06:01:98:ce:d4:0f:79:60:e3:f1:70:00:
2a:cd:5f:eb:95:23:c2:3a:26:5e:b4:09:95:a0:22:
33:58:aa:6e:e9:17:0b:79:c9:1c:23:9e:d8:76:62:
a4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:4D:AD:24:60:5F:86:1A:83:31:78:47:D7:9F:88:CC:BA:36:88
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3134342e302f32302d3230203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.144.0/20
Signature Algorithm: sha256WithRSAEncryption
06:37:03:b4:61:b2:e2:98:53:97:a5:b7:b6:f6:2e:ae:1e:f5:
1b:1e:f3:0d:98:e5:e1:a6:49:7e:af:32:cd:34:39:b3:02:22:
09:ae:47:95:f1:41:8b:76:a7:37:ee:3f:05:04:e4:32:37:f6:
3e:90:79:3e:b1:3b:c6:f0:24:2b:b7:07:f3:ed:85:6d:e1:45:
67:ee:0e:01:8e:9e:f4:65:5f:02:68:8c:e6:c3:40:6e:2f:66:
d1:f4:aa:4c:e6:99:d2:6b:2a:f3:e8:5f:a4:75:cf:0e:4f:99:
c5:a4:06:8f:7b:6f:fa:f2:c0:c1:67:ae:d6:fd:b6:6a:3a:8c:
8a:d7:59:bc:64:14:02:43:5e:9f:38:4c:cd:5c:5a:77:31:e2:
2e:19:31:84:7d:75:b2:bd:68:27:b4:ce:a6:12:e9:5c:3f:33:
d6:2d:4e:bc:c0:96:6f:cf:f3:20:48:a1:b3:e5:21:81:76:9c:
72:c2:31:f1:f6:a0:f8:a6:1b:18:6a:e6:2f:45:31:5c:1f:b8:
aa:b2:50:1b:36:e0:04:58:7f:6c:8e:c5:2e:2d:9d:4d:e4:46:
bd:35:b9:b8:8b:e6:77:68:0a:9f:7d:7a:c6:2a:a3:d4:2e:fa:
d2:51:77:ca:2e:e5:ad:db:8e:5f:8c:ba:af:07:a9:26:90:17:
53:3c:1a:c3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQcfEelkYpx2q8xDWIgJq8jvHfj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5
NjFENzkzRDAeFw0yNjA2MTExNDQ3MDFaFw0yNzA2MTAxNDUyMDFaMDMxMTAvBgNV
BAMTKEMxRjE0REFEMjQ2MDVGODYxQTgzMzE3ODQ3RDc5Rjg4Q0NCQTM2ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCD3PYy5CXrz9oXDru48qSwNepP
lVDFT647iA5o/xX0blRnGJOwXa/OJGej2860RQll/Z+3YODR9jlb2j7hLn/3Cgft
IwXQhHPIISmfKd5NSZ+sHFibkTHGWSXn+/p76SCRoZwBNL9ReViw5Zm0w78Olhj2
S+EIRftb+LtN12ZC8InACdq3QmhS37X/SluUyt5KuXKeqFZ3rkj4SHQ8DocumeSF
il1VTpGNTJmc1rUooGgaH2/1hSMNFpoLuySjLxw2HH23XjBCFVd5slE6VSMDP9zN
XgYBmM7UD3lg4/FwACrNX+uVI8I6Jl60CZWgIjNYqm7pFwt5yRwjnth2YqRHAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUwfFNrSRgX4YagzF4R9efiMy6NogwHwYDVR0j
BBgwFoAUrhQxzco8UkVrAUbEnV7uMpYdeT0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTM4OTI2NTIyMzY4MS8xL0FFMTQzMUNEQ0EzQzUyNDU2QjAxNDZDNDlENUVF
RTMyOTYxRDc5M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzAvQUUxNDMxQ0RDQTNDNTI0NTZCMDE0NkM0OUQ1RUVFMzI5NjFENzkzRC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg1Mzg5MjY1MjIzNjgxLzEvMzEzMzM5MmUzOTJl
MzEzNDM0MmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM1MzEzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBIsJkDANBgkqhkiG9w0BAQsFAAOCAQEABjcDtGGy4phTl6W3tvYurh71Gx7z
DZjl4aZJfq8yzTQ5swIiCa5HlfFBi3anN+4/BQTkMjf2PpB5PrE7xvAkK7cH8+2F
beFFZ+4OAY6e9GVfAmiM5sNAbi9m0fSqTOaZ0msq8+hfpHXPDk+ZxaQGj3tv+vLA
wWeu1v22ajqMitdZvGQUAkNenzhMzVxadzHiLhkxhH11sr1oJ7TOphLpXD8z1i1O
vMCWb8/zIEihs+UhgXaccsIx8fag+KYbGGrmL0UxXB+4qrJQGzbgBFh/bI7FLi2d
TeRGvTW5uIvmd2gKn316xiqj1C760lF3yi7lrduOX4y6rwepJpAXUzwaww==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:10 2026 by rpki-client