
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132382e302f32342d3234203d3e20313938343836.roa
File: 3131392e35392e3132382e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: dBBw2ZlSK9e3TXcfgGDlaQ/Uh8MJ1Jsqu8qgPYeuGGQ=
Subject key identifier: BD:DD:05:A2:02:C3:D8:C6:0C:0E:2F:4B:FC:9F:F4:A6:65:6D:26:71
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 18C8CD27B926B38EED6458B0515134D545B2407E
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132382e302f32342d3234203d3e20313938343836.roa
Signing time: Mon 13 Jul 2026 03:46:37 +0000
ROA not before: Mon 13 Jul 2026 03:41:37 +0000
ROA not after: Mon 12 Jul 2027 03:46:37 +0000
asID: 198486
IP address blocks: 119.59.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c8:cd:27:b9:26:b3:8e:ed:64:58:b0:51:51:34:d5:45:b2:40:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:37 2026 GMT
Not After : Jul 12 03:46:37 2027 GMT
Subject: CN=BDDD05A202C3D8C60C0E2F4BFC9FF4A6656D2671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:94:4b:b7:01:69:cd:6c:05:08:3f:cc:7d:16:
f5:10:47:04:32:3b:b5:7d:60:f2:ad:77:21:28:5a:
61:da:70:05:01:c3:d7:dd:79:a2:c2:7b:70:0e:f4:
42:5e:3c:d2:c0:ec:e1:6b:de:4e:23:00:4d:65:67:
d6:5d:59:e7:60:c9:c4:75:08:72:33:8c:29:53:f2:
0a:55:bc:e1:12:43:00:0c:69:1b:29:e1:72:65:80:
9f:9d:51:f9:e7:ff:8e:54:99:44:6b:fb:fd:36:d9:
6f:e3:09:15:67:58:82:b8:5a:91:03:4f:6f:07:ac:
c4:65:39:e4:24:39:3f:63:bd:45:05:ad:b9:94:e1:
37:5b:4a:38:e1:4a:1c:26:07:3a:67:b1:65:b5:f5:
86:72:d7:83:4e:15:67:ea:3d:ad:c2:d8:b3:15:95:
f3:dd:54:4b:1d:f9:77:8e:52:8e:a3:83:87:14:32:
98:ff:15:ba:83:b3:d8:d5:b6:a5:84:bd:36:0f:f5:
90:dd:9f:60:0f:58:08:13:3f:e7:61:a2:d7:d7:4b:
d3:51:02:a8:1b:63:11:a9:b9:72:19:d7:2c:32:9b:
27:27:dd:50:45:8c:27:d6:e6:a4:d4:a7:52:02:e4:
9d:d2:9a:4d:69:07:6d:9c:9f:22:47:7c:01:59:b2:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DD:05:A2:02:C3:D8:C6:0C:0E:2F:4B:FC:9F:F4:A6:65:6D:26:71
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132382e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.128.0/24
Signature Algorithm: sha256WithRSAEncryption
95:d7:8f:f4:6b:4c:7b:0e:d9:1f:09:e3:54:5e:55:a3:3f:43:
9a:69:77:6c:44:c5:49:a2:cc:d2:f1:58:44:de:81:3e:ab:5b:
b6:c0:4d:d0:9b:aa:30:65:78:89:e0:40:04:bf:ca:b2:bb:39:
c4:ac:9a:5e:70:de:e5:d1:8c:0f:bc:d2:85:3d:ef:05:88:8a:
3a:b5:c6:dd:6d:0a:30:45:32:c1:0b:22:ac:0e:04:f7:77:f7:
92:ec:84:d3:ed:7d:01:1c:64:f3:73:3c:34:ba:97:c7:7f:f1:
a4:eb:39:44:a2:85:46:57:1a:fc:3b:d5:2c:84:94:d9:91:9f:
46:e1:51:12:c8:44:3b:33:25:3f:94:fd:63:e3:74:a6:30:9c:
f8:a9:8e:2f:85:8f:38:77:63:6a:00:dd:77:0a:0e:ca:7b:0f:
5a:f4:e7:98:80:73:70:d4:5d:95:79:2d:72:26:4c:cf:7e:d0:
df:92:b5:89:dc:0b:76:b6:ce:39:10:35:98:95:c9:d8:59:21:
61:6b:66:6d:2c:a1:77:fd:44:b7:a8:07:0b:d5:12:30:2f:5d:
36:0b:73:f9:59:e8:9d:aa:4e:6b:b2:67:5c:86:76:2a:a0:43:
cf:b2:fd:93:92:54:6e:ef:3a:00:0a:20:81:16:e4:87:d6:7f:
84:6a:4f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:40:20 2026 by rpki-client