
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313334353432.roa
File: 3133392e392e3234382e302f32322d3232203d3e20313334353432.roa (raw, json)
Hash identifier: KTBnkYsbj5wP+OX14mRNbY2UR57yo1Q13PohzKfyZN8=
Subject key identifier: 21:20:B1:D2:A9:B7:24:B0:24:C7:7E:DF:7E:EA:91:93:D7:F3:A3:CB
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 04B090678F5822EFD4D0D21AA05B9CAF266D078C
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313334353432.roa
Signing time: Thu 11 Jun 2026 16:02:07 +0000
ROA not before: Thu 11 Jun 2026 15:57:07 +0000
ROA not after: Thu 10 Jun 2027 16:02:07 +0000
asID: 134542
IP address blocks: 139.9.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b0:90:67:8f:58:22:ef:d4:d0:d2:1a:a0:5b:9c:af:26:6d:07:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:07 2026 GMT
Not After : Jun 10 16:02:07 2027 GMT
Subject: CN=2120B1D2A9B724B024C77EDF7EEA9193D7F3A3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fa:76:96:53:af:fe:7f:2f:ec:c6:8c:73:00:
d5:05:fa:c1:fb:16:3b:bd:58:b9:2f:08:ef:55:2f:
1a:b9:18:4b:12:f2:53:b5:6f:82:00:22:c2:6f:70:
09:62:5a:2a:82:88:ea:49:e9:da:5c:2a:b2:71:69:
3d:b3:02:1d:99:df:d3:b2:c8:e9:33:59:f5:9a:bf:
6b:62:27:9a:1a:ce:63:ce:67:38:1b:af:b8:d0:9a:
a0:7f:75:08:b9:13:59:e3:61:bb:53:64:db:2c:68:
a6:b1:f3:5a:1b:6a:53:a1:6c:ff:15:b2:ed:e1:f2:
b0:d2:10:39:36:23:ba:3c:0b:cf:96:7a:2b:2e:e6:
c2:b6:79:a3:3a:95:97:3c:ce:44:97:7d:6f:a0:a3:
cd:e7:11:d0:bd:7d:6a:8c:fb:cb:e2:0d:2e:55:88:
03:dc:90:90:31:b1:2c:6b:7c:01:aa:31:28:02:0d:
43:15:df:cc:e8:00:2d:12:b0:e4:2e:06:c7:4e:44:
e3:eb:d7:32:3f:18:b2:24:2d:83:a6:fa:9d:ab:07:
1e:8d:fe:e3:66:58:f4:34:8f:8d:24:eb:00:b1:61:
d9:14:05:46:5b:8e:bd:02:54:40:81:d0:d2:7e:5c:
91:36:fb:07:05:6d:64:b9:3e:31:bd:3d:7b:65:e8:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:20:B1:D2:A9:B7:24:B0:24:C7:7E:DF:7E:EA:91:93:D7:F3:A3:CB
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313334353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.248.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:08:72:65:26:fc:80:17:4b:06:0b:4d:d2:9f:c6:1b:17:db:
94:83:d9:32:c8:1a:bf:18:d0:5b:02:9a:ec:f9:82:bc:cd:51:
1e:43:20:64:14:54:53:b2:f4:cb:38:00:a8:b1:70:a9:3e:69:
f7:a9:bf:6e:54:1a:a6:77:04:dc:81:c2:ee:b0:85:a6:8d:00:
b9:c5:4d:00:c9:60:c9:11:4d:ea:9e:c5:a5:71:dc:3e:b8:58:
b0:a5:0d:d3:50:a4:2a:6d:f2:81:cb:45:0b:45:86:aa:1d:f0:
00:f8:e5:ce:a4:22:2b:bb:d2:62:fe:fa:b1:50:07:b2:b7:7d:
4d:8f:f3:64:61:2b:02:47:27:66:83:26:45:1b:c5:38:0a:8a:
e1:4c:e2:88:b0:07:f6:3a:f3:34:6b:6f:fd:96:aa:37:2f:74:
2f:0d:e3:5e:a6:3d:5d:d0:2f:86:13:4c:77:ec:73:95:e6:90:
32:9c:9e:6a:af:fe:af:3b:6c:16:87:4a:42:95:8c:f5:84:d1:
70:5d:1a:6b:82:47:59:79:be:bd:42:59:e7:9f:87:0a:9d:ef:
45:18:ed:b3:43:68:3d:e2:e9:b8:74:a6:eb:be:c5:d9:db:f0:
91:ec:97:cf:32:4f:5c:e2:31:21:2c:c5:d8:2f:c3:43:f0:14:
62:e0:98:4a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:48 2026 by rpki-client