
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e203538353139.roa
File: 3133392e392e3234382e302f32322d3232203d3e203538353139.roa (raw, json)
Hash identifier: TlyrYxz3jT+6BWl563U6FMWfCzX6bI/KI72yygHBx9o=
Subject key identifier: CE:F3:20:57:08:03:37:65:5A:0D:41:FB:4C:7C:24:C0:ED:FA:E9:44
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 5262D4B10C07FD2E2F38922F712417F3FA98BDDA
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e203538353139.roa
Signing time: Thu 11 Jun 2026 16:02:06 +0000
ROA not before: Thu 11 Jun 2026 15:57:06 +0000
ROA not after: Thu 10 Jun 2027 16:02:06 +0000
asID: 58519
IP address blocks: 139.9.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 18:53:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:62:d4:b1:0c:07:fd:2e:2f:38:92:2f:71:24:17:f3:fa:98:bd:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 11 15:57:06 2026 GMT
Not After : Jun 10 16:02:06 2027 GMT
Subject: CN=CEF32057080337655A0D41FB4C7C24C0EDFAE944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:69:94:5a:71:07:4d:a2:ba:a5:a9:1f:25:4c:
6e:06:e4:e7:68:58:9b:b7:5f:63:f0:97:6b:18:e1:
46:b4:40:d2:1a:58:9e:15:d7:47:6b:06:96:aa:6d:
04:97:d2:f1:46:79:7c:57:43:7d:bb:e2:56:c6:66:
75:f8:28:ff:5f:f7:9b:d8:89:74:6a:e4:ec:e5:5b:
7e:84:5d:53:6b:94:0b:c7:bc:97:3e:61:d1:34:db:
a8:ea:0d:d8:7c:92:6d:8d:cb:1d:7a:b5:aa:d6:dc:
ba:9d:54:3a:6b:7a:6e:ce:82:9c:75:0f:e4:f3:89:
55:e2:0c:94:15:d4:88:34:98:74:e8:f3:e1:e6:0d:
fd:b5:ec:e9:52:2c:3a:24:a5:ef:72:e1:85:16:fa:
32:b0:fc:28:36:74:cc:71:b2:d6:16:08:9f:7a:60:
b7:df:73:78:1b:dd:63:5c:3f:0a:4e:78:1a:49:dd:
f3:7a:33:11:c8:d2:27:3e:d1:aa:9c:48:84:af:f0:
e8:9c:c9:1e:a0:cb:a1:b8:bb:79:b1:28:b5:f0:b2:
48:a2:48:4a:53:d1:b7:9f:4c:e7:81:62:4c:bd:e2:
2b:3a:51:23:13:5c:26:61:7a:58:67:7a:85:74:2c:
27:7e:14:5b:66:30:93:88:2b:60:7d:42:dc:98:1f:
5c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:F3:20:57:08:03:37:65:5A:0D:41:FB:4C:7C:24:C0:ED:FA:E9:44
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e3234382e302f32322d3232203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:32:e0:31:51:f6:a8:f8:c6:e4:25:4d:ea:5c:60:e2:6f:81:
bf:2f:c1:e3:41:8a:81:95:71:b6:f1:f4:e8:d7:81:1f:19:bc:
2b:9c:d8:f7:49:44:b0:25:8e:55:a9:56:ec:b2:c1:fc:de:f9:
a5:11:4a:8a:3f:e9:17:06:e3:fd:33:f0:5b:85:9a:9a:87:6d:
7f:53:b9:69:d0:9a:c7:7e:91:4d:46:2b:f9:75:57:37:03:48:
5a:6c:4c:72:77:3a:af:e2:69:4e:cd:a9:c8:33:65:ed:79:86:
a7:fe:fd:c9:81:0f:54:72:e1:a0:1c:08:6d:97:63:77:74:07:
2a:1d:2a:df:aa:54:cf:3f:ab:64:ea:58:9b:94:42:72:52:04:
10:72:7c:29:0c:aa:83:2c:c2:6f:12:b1:a9:c4:23:58:87:3d:
50:c1:c6:ff:57:38:84:60:ce:30:d8:75:00:53:aa:e0:b8:e0:
8b:2a:f4:3a:a2:0a:e6:e0:bb:d7:5c:5e:00:55:5b:98:f4:cc:
fc:3f:a8:79:1e:82:70:08:4b:90:9e:91:e3:9f:68:c6:e5:94:
ea:1f:11:f8:7f:b0:c4:b7:1c:a6:59:65:76:a8:58:12:9d:fb:
b1:70:58:02:31:d1:6e:bd:ed:b3:e9:f7:7a:c0:46:4b:91:09:
4e:71:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:41:06 2026 by rpki-client