
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e39362e302f32332d3233203d3e203535393930.roa
File: 3133392e392e39362e302f32332d3233203d3e203535393930.roa (raw, json)
Hash identifier: lyZWR2LODrVubHnb6TkCNnvjgcxk9onVqoEeeKlmM/s=
Subject key identifier: BB:E0:80:F1:BA:BE:94:7B:15:2F:3C:AE:09:44:1E:2E:BA:B1:C3:47
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 0F1F40F4DDECEA373705D7404E891ACAC6EAA010
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e39362e302f32332d3233203d3e203535393930.roa
Signing time: Tue 02 Jun 2026 17:40:25 +0000
ROA not before: Tue 02 Jun 2026 17:35:25 +0000
ROA not after: Tue 01 Jun 2027 17:40:25 +0000
asID: 55990
IP address blocks: 139.9.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:24:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:1f:40:f4:dd:ec:ea:37:37:05:d7:40:4e:89:1a:ca:c6:ea:a0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 2 17:35:25 2026 GMT
Not After : Jun 1 17:40:25 2027 GMT
Subject: CN=BBE080F1BABE947B152F3CAE09441E2EBAB1C347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:21:d8:20:a8:27:f3:d9:9d:a5:21:46:c9:45:
7e:3a:f6:59:ee:5b:06:14:30:93:ac:5e:aa:f0:d5:
8e:2b:4d:db:7e:60:e0:9e:c8:f1:d7:ab:18:ba:fc:
55:c4:3f:af:9d:0f:ab:d4:ff:b3:c5:67:28:e0:12:
73:ce:87:ea:46:5c:65:27:8a:6f:42:c7:70:c9:27:
0f:d0:45:26:a5:6c:39:a2:0a:bc:b5:99:1d:58:6e:
14:aa:7e:27:19:65:ba:b6:5a:d9:46:89:5a:98:f0:
45:0e:86:7e:40:d6:5b:c4:c3:12:b3:fd:1b:94:28:
72:1c:fd:65:23:ab:ec:0d:02:c1:59:95:3a:0d:da:
b7:0d:d7:37:04:89:a6:62:31:aa:3b:db:db:fc:03:
cd:c4:ea:cc:80:bb:63:3b:71:28:40:a1:46:90:1f:
de:39:92:55:5a:c8:30:e5:c4:a2:d8:92:79:ce:d8:
2b:63:bf:91:44:f0:7a:71:c1:b8:9a:19:96:36:3b:
29:05:09:59:fb:86:15:f1:91:57:1b:72:95:fc:ba:
cb:b9:3b:04:22:36:1d:8a:e0:7d:47:cd:7a:0c:af:
d0:6f:10:8b:ec:e5:43:3a:02:bb:83:5d:bd:b0:93:
fb:3c:0c:a3:48:0a:7e:2c:ba:e8:a5:77:dd:32:60:
c6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E0:80:F1:BA:BE:94:7B:15:2F:3C:AE:09:44:1E:2E:BA:B1:C3:47
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e392e39362e302f32332d3233203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.9.96.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:e2:57:a6:f5:97:2e:13:2a:3e:81:b1:05:71:40:13:7d:97:
73:fe:13:85:5b:f2:43:bf:35:e2:ef:a5:60:13:f9:a4:63:12:
9d:3f:82:89:68:40:e3:19:06:13:18:7c:5f:02:4f:ed:73:9d:
79:08:1b:06:ad:6f:a9:5c:5d:e8:7e:16:b9:03:3e:5d:53:38:
a2:89:e7:6f:7e:f4:06:4c:73:7e:a8:6b:c6:54:8a:7a:25:55:
dd:4b:01:3b:5b:92:40:d4:c1:52:56:2c:55:f1:ae:de:85:92:
2d:bc:75:eb:ec:0b:d4:c7:53:d9:f2:1e:e6:b3:1e:e6:a6:b4:
c7:d3:e1:29:58:04:f8:25:90:6f:dc:e3:f0:c5:8a:c4:3f:c3:
de:d7:67:d8:f6:6f:4a:09:20:88:c8:b1:96:e5:5d:fb:d3:04:
20:bd:c1:bc:d3:30:6d:48:9c:41:74:cf:aa:82:0b:9f:62:f0:
dc:04:84:1f:1e:0f:e7:f2:df:05:26:60:01:19:83:46:36:da:
b6:11:86:97:10:71:25:50:e2:b7:32:ee:bb:d3:40:f0:82:c3:
72:68:6e:1b:fe:be:d7:17:c2:e7:91:22:6c:33:b5:ff:24:a0:
ee:9e:ff:5b:f2:88:3f:0e:47:7d:5d:1c:bc:30:02:30:b0:15:
b4:f1:a2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:55:59 2026 by rpki-client