
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e203538353139.roa
File: 3133392e392e3234302e302f32312d3231203d3e203538353139.roa (raw, json)
Hash identifier: mP1jTIn+CXyh/D+JsINaPCdSuvubhqwAyyKdDuGNqK0=
Subject key identifier: 08:56:FE:47:4B:ED:96:65:D9:C8:05:CD:F7:21:28:CA:45:FC:7C:21
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 2C758F4C3D178DA9F2B70DDA2A2299D48EF29EEB
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e203538353139.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 58519
IP address blocks: 139.9.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:75:8f:4c:3d:17:8d:a9:f2:b7:0d:da:2a:22:99:d4:8e:f2:9e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=0856FE474BED9665D9C805CDF72128CA45FC7C21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:00:9a:fc:f0:41:45:1f:05:8d:f7:bc:98:f7:
08:28:a0:d7:b9:d5:7f:5b:6a:ef:c4:fe:a6:cc:0c:
59:c2:4f:2e:5d:d3:04:e8:1f:63:16:69:ca:30:e9:
ca:f8:18:39:08:00:cc:fb:91:e4:c2:c2:d0:38:4f:
4a:b3:9e:bc:4a:61:76:8b:d7:9c:86:3d:45:a7:34:
f3:c6:be:89:67:83:0e:f8:bb:cb:6b:99:56:87:76:
50:01:52:af:a6:02:d1:4b:76:f6:f9:80:b5:3f:bf:
e5:a9:62:17:79:24:12:7b:e8:92:dc:55:bd:fa:91:
9a:7a:1f:ce:0a:e1:b1:b1:de:f8:5b:6c:3f:5a:81:
7b:67:0c:6a:f5:ee:b4:a5:1a:2f:1d:b9:53:11:3d:
4a:62:f5:8a:ec:c9:a3:a6:f2:8f:7e:b4:0b:63:ab:
75:f4:67:63:40:f2:b8:8a:24:df:1a:7f:90:03:79:
62:d9:61:8d:62:54:ca:63:f6:94:12:80:dd:15:22:
43:59:74:f0:ac:9b:ee:46:9c:5f:6a:ef:56:81:f5:
02:21:bb:0a:25:3a:d8:f1:6c:82:ba:9d:05:26:9d:
89:aa:4b:95:2b:4f:7c:d3:eb:8a:d5:bc:30:bd:6c:
a4:9a:6d:84:39:3f:f4:f6:10:37:d4:f1:df:50:f3:
3b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:56:FE:47:4B:ED:96:65:D9:C8:05:CD:F7:21:28:CA:45:FC:7C:21
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234302e302f32312d3231203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.240.0/21
Signature Algorithm: sha256WithRSAEncryption
af:32:41:62:b8:b2:79:98:86:26:40:6b:28:24:47:83:7f:a9:
36:70:7d:71:6a:83:db:7f:6c:c1:de:ae:24:60:1c:99:93:ac:
37:7d:e4:96:70:94:a2:fe:4a:4e:6b:9b:cf:05:99:f7:4a:4d:
2c:eb:57:f8:9e:72:db:1f:1f:68:91:27:8b:43:03:1e:a6:8b:
a9:18:84:58:b0:5e:05:c7:f3:2e:fa:af:88:07:3c:46:24:6d:
de:e1:e4:3a:88:58:8e:cd:12:ca:23:60:78:36:fb:4d:66:b1:
0a:22:c8:dc:10:db:fe:e8:78:16:f7:59:3c:13:b6:bd:3c:81:
9b:28:70:4e:2c:c0:92:7d:e0:6d:11:99:86:6e:17:b5:f3:91:
c0:28:14:2d:59:e5:6e:ed:36:54:96:02:3e:26:a0:fe:6b:bd:
5e:52:c8:6c:20:04:3f:bc:f1:07:da:75:81:a5:cd:97:2e:1d:
a0:97:50:55:6a:cd:c0:28:b3:4f:2e:2d:b7:05:5f:17:3b:28:
99:d2:a0:b7:ed:cf:a8:72:f5:5e:aa:09:33:a5:c5:55:45:ee:
0c:ed:b7:1f:7f:93:76:5d:24:c8:44:9f:f7:a3:45:f8:b1:a0:
75:8f:ea:38:de:10:fa:fd:20:9f:4f:cd:dc:0c:ef:b2:87:f4:
66:55:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:07 2026 by rpki-client