
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e20313338343037.roa
File: 3133392e392e3234302e302f32312d3231203d3e20313338343037.roa (raw, json)
Hash identifier: he0LSX3bkm9vl6iD7wCNf6bvJICTuejDH3OnZKo1YkA=
Subject key identifier: 8F:6C:E7:1C:83:C1:76:1B:62:76:19:32:3D:AC:F5:4A:CE:29:21:75
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 3612E92B48E58F2D0BB5F0E31299F83F26B030D1
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e20313338343037.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 138407
IP address blocks: 139.9.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:12:e9:2b:48:e5:8f:2d:0b:b5:f0:e3:12:99:f8:3f:26:b0:30:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=8F6CE71C83C1761B627619323DACF54ACE292175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:32:d3:81:c5:36:52:08:2f:eb:82:08:36:09:
49:4a:80:24:37:55:d2:c8:39:7c:f6:37:e8:24:e3:
b6:f1:94:2c:b2:83:c5:6e:84:5e:d3:ae:ea:7f:0b:
b1:e2:5a:1d:8d:02:54:37:22:c9:e1:05:84:da:d7:
74:bf:17:2c:61:e5:c0:a6:2e:18:52:9d:77:e3:87:
f0:88:7f:f2:bb:ae:82:c4:4f:2a:54:53:62:a1:50:
12:db:2f:f6:53:72:48:b0:ed:ec:ec:4a:79:23:42:
a9:e0:e8:65:ba:56:2b:c5:36:54:6d:41:e4:fc:c7:
fd:f5:4c:2e:f8:99:96:36:bb:c6:d1:44:b2:38:74:
eb:dd:4f:5a:05:c9:75:68:8b:e5:fb:10:46:b5:95:
2a:8b:89:fa:bc:84:ff:bb:9e:a0:49:f0:d0:8f:97:
e9:3c:88:10:2d:72:35:44:c2:ea:62:6f:ab:e9:64:
d3:21:0a:58:ac:bc:24:94:82:9c:f6:6e:35:0d:3e:
ca:59:32:6b:09:01:02:ce:f2:9e:0b:e4:12:f4:57:
36:83:9b:75:c7:8c:63:72:d3:83:12:b3:97:79:5c:
d0:58:f6:18:aa:71:e7:90:b5:e0:f8:15:e1:d0:a2:
ec:8f:24:a0:86:b6:a9:bc:8f:78:8a:4c:66:ce:f9:
59:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:E7:1C:83:C1:76:1B:62:76:19:32:3D:AC:F5:4A:CE:29:21:75
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e20313338343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.240.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:9e:69:1a:c2:85:10:bb:1a:4f:4b:4e:9a:25:70:08:04:26:
97:f1:91:d2:47:29:b8:ae:7a:6c:3d:bf:d8:6d:3d:af:0a:6a:
7e:77:61:5d:f6:8f:5c:1f:96:a6:15:ec:d4:f4:7f:82:88:9b:
a0:49:4c:ec:86:75:a5:76:ba:33:76:b3:22:7a:9d:fd:bf:ba:
09:de:06:eb:6f:12:12:9f:cb:ad:43:0c:a5:54:93:50:e2:8c:
b9:90:52:cf:f7:df:2e:2d:bf:a0:ff:28:4e:68:89:09:22:17:
59:b5:ea:d5:30:c1:0f:18:8e:30:c4:d4:96:47:c9:f9:93:3c:
16:28:38:62:e7:20:4e:29:5c:a9:cc:35:87:92:de:9c:8e:7d:
40:d5:4f:10:76:ee:36:27:01:3a:18:5c:e6:18:9b:b1:82:d1:
93:d5:1a:fe:43:bb:5c:5f:01:a6:48:03:0e:51:ca:a9:5b:e1:
31:0b:d0:85:31:67:2d:a2:1e:90:c8:bc:80:59:09:ea:a8:75:
fd:3f:33:50:ab:83:ba:65:66:bd:84:48:88:99:4b:bc:d2:27:
59:8e:58:44:e4:49:a6:97:9b:5b:0a:4f:34:ba:a9:f7:b7:c8:
e5:74:3b:a2:a3:dc:38:22:71:c2:19:df:30:20:df:3b:1c:d3:
b9:c7:9f:0d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client