
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313338343037.roa
File: 3133392e392e3234382e302f32322d3232203d3e20313338343037.roa (raw, json)
Hash identifier: brHZeRrEgNhw6FAbU82qZcBBw31Pf4doatUEvnQg2jo=
Subject key identifier: 72:AF:89:05:0A:76:F0:9D:39:72:B0:04:96:C3:D6:C4:DF:7C:1A:68
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 4141C546AAB76AD16A5E6886FF8872885F88CCA1
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313338343037.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 138407
IP address blocks: 139.9.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:41:c5:46:aa:b7:6a:d1:6a:5e:68:86:ff:88:72:88:5f:88:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=72AF89050A76F09D3972B00496C3D6C4DF7C1A68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:d0:9f:54:79:4c:50:9b:b7:ee:96:64:f0:
ab:95:ed:ef:af:ea:20:18:c0:03:3d:71:80:c4:7d:
66:7d:9c:22:f8:41:a8:18:74:f9:d6:4a:27:5a:66:
9f:61:0e:bd:5d:08:7d:63:33:e0:57:3f:6e:45:64:
fd:13:24:0a:50:ba:7c:f0:45:24:c2:f6:54:1a:df:
d9:96:00:b3:4c:1c:2a:29:bd:71:ad:30:13:85:d5:
a7:ce:e9:c3:a1:07:14:ad:0f:26:1f:3d:57:f3:3c:
a5:24:31:de:8f:8b:7b:3e:b7:c1:fd:b8:43:ca:ef:
1a:67:cd:1c:a4:85:39:77:a5:dd:04:25:6b:54:a5:
29:86:30:dd:3b:2a:8e:c8:66:ce:4a:18:79:4e:16:
cd:fc:33:4a:d9:84:05:4c:6f:08:26:b2:7c:cb:91:
5e:df:9b:e9:35:10:2b:3c:3c:de:9d:4b:f6:cd:36:
21:cb:27:d5:e4:59:05:dd:20:3c:7a:3a:e8:69:c5:
64:32:5e:d5:4e:36:bb:83:80:61:e4:09:eb:e8:7c:
46:9a:70:c4:06:5e:ac:a5:0c:c9:42:82:29:65:70:
12:7a:2b:50:0f:0b:ac:3a:bb:b9:98:9a:f9:de:b5:
a3:6d:14:78:e2:a4:e9:b4:c6:bc:c4:ea:23:f8:08:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:89:05:0A:76:F0:9D:39:72:B0:04:96:C3:D6:C4:DF:7C:1A:68
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e20313338343037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.248.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:d2:14:48:26:08:72:b8:16:5a:0f:94:42:13:91:e0:be:c2:
75:f3:31:b1:52:62:be:a1:7f:52:d0:4b:8e:65:41:67:72:db:
73:17:d6:ca:92:ac:81:26:8a:1d:72:09:52:33:a8:7a:c5:0a:
94:f6:ff:39:26:b0:5d:1f:e6:18:aa:e2:b2:37:ff:d4:d5:94:
04:2c:eb:58:fd:20:ce:d3:43:94:03:b4:24:ee:4f:ce:8b:1c:
72:a0:59:12:98:3e:e5:f8:14:87:ee:a9:b4:0e:c8:77:f9:f9:
b9:3e:c0:95:0f:e6:82:46:eb:98:9d:7d:dc:85:25:48:89:a5:
25:d4:54:58:cf:95:a3:6d:90:70:cc:44:93:9d:4c:c7:ef:8b:
3e:74:fe:10:c2:57:3f:44:35:a2:25:69:d0:ae:c2:31:c4:18:
42:4a:cb:64:73:57:c0:9c:e6:1d:46:ee:6b:96:08:80:24:2d:
df:9b:04:0c:85:57:f0:d4:61:5c:07:86:3d:c3:48:c8:03:4e:
17:46:3f:d3:fe:aa:0c:da:8e:99:40:6f:7c:45:9d:b0:be:e6:
35:0e:e0:09:07:a2:56:db:76:a4:ac:dd:fb:5c:2c:5f:3c:1b:
89:6e:bb:b1:5b:9a:47:07:40:e2:95:d2:b2:6a:35:a6:7d:80:
61:fb:0d:f8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:56:47 2026 by rpki-client