
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3232342e302f32302d3230203d3e20313338343037.roa
File: 3133392e392e3232342e302f32302d3230203d3e20313338343037.roa (raw, json)
Hash identifier: lS07tJtjeB6CHFJVnROPy69CcYZc/rLmUXjtFLmysYw=
Subject key identifier: FB:86:81:D7:C7:4E:2E:8C:73:C9:46:C4:31:0B:5F:AE:6D:7B:BE:A4
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 146215B3B69BC2E9FF6A2AFACDE0519023E00F54
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3232342e302f32302d3230203d3e20313338343037.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 138407
IP address blocks: 139.9.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:62:15:b3:b6:9b:c2:e9:ff:6a:2a:fa:cd:e0:51:90:23:e0:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=FB8681D7C74E2E8C73C946C4310B5FAE6D7BBEA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:89:40:51:74:01:fa:06:9f:f6:a4:49:e1:65:
52:23:12:18:bf:1e:c4:fd:b2:40:4b:f0:f4:ae:98:
f0:17:b6:b1:d6:87:98:77:2f:ef:44:15:4c:fc:57:
d3:9f:ae:34:13:6d:b7:b1:eb:38:60:21:19:40:1d:
45:49:aa:23:37:32:1b:37:d8:e0:e6:e7:35:ec:9a:
4d:a6:e4:c5:52:ba:07:d5:4d:e8:06:cb:a4:cf:ce:
1d:ab:c4:d5:88:f5:28:c7:bc:27:6a:42:5e:d5:36:
f4:28:ac:9e:24:31:03:a4:a6:5e:e1:e4:c3:4a:6b:
ce:6a:2c:ea:a0:c5:b8:49:79:2a:9d:ec:02:4e:48:
ce:ae:12:be:6a:46:d4:9c:7a:43:a1:3b:37:99:e2:
e4:b9:89:63:d4:9a:96:cd:7a:87:4e:db:56:3e:a7:
e6:cb:ba:86:e9:05:18:2d:5f:30:44:f0:92:95:9b:
f2:86:21:d7:62:6e:78:3e:25:65:15:5b:07:88:11:
ee:79:a7:fc:29:ed:8e:b1:de:15:93:55:f3:f1:8b:
9f:56:85:b8:60:1e:08:6e:3c:b6:f6:9c:79:fa:05:
f4:a7:fd:57:56:66:4d:43:05:0b:86:09:51:e2:31:
0f:d5:87:44:99:73:fb:57:ec:37:0b:95:44:16:ad:
30:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:86:81:D7:C7:4E:2E:8C:73:C9:46:C4:31:0B:5F:AE:6D:7B:BE:A4
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3232342e302f32302d3230203d3e20313338343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.224.0/20
Signature Algorithm: sha256WithRSAEncryption
b0:7a:4a:21:a1:6f:33:71:c2:57:e9:0b:ef:3b:2d:6b:ae:63:
c2:0a:3a:57:d5:08:b9:bb:ec:c1:34:c8:e3:c0:3a:6d:3c:3e:
77:8b:2e:c1:a9:cf:c9:00:af:83:b3:be:d6:b4:6c:b1:fa:47:
14:d3:55:7d:a1:e4:21:e3:2a:fe:2f:88:8d:f5:e9:ca:df:1e:
74:c5:3c:2f:36:b9:50:a2:5b:29:96:0c:dc:10:8d:83:a4:48:
68:91:7c:74:51:8d:69:a1:07:3b:6e:29:cf:58:11:b7:6d:95:
43:c8:57:c1:22:75:fe:46:0b:f6:8c:33:44:62:a0:68:ca:27:
05:af:38:9a:5c:8e:bc:be:38:21:45:34:90:3c:2b:99:b4:09:
bc:bd:88:97:47:c7:02:60:24:cb:6f:f1:66:68:e4:e6:2b:67:
68:d4:b6:19:bf:d6:a4:29:98:ab:bd:0d:67:1c:3e:2e:fa:27:
f1:60:a8:04:d3:35:8c:38:90:6a:4f:71:e0:b9:c9:d8:b0:3d:
b9:7d:26:c3:d3:97:b8:60:5b:5f:bd:a9:27:71:68:a8:b9:7e:
c8:a8:4d:97:18:ec:29:b2:46:2a:a2:58:00:83:e0:9b:c2:40:
c7:e2:d5:53:3f:3e:be:88:d0:c8:a5:91:4b:8a:25:b4:cd:d6:
c4:a6:2c:49
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:02 2026 by rpki-client