
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e203133333335.roa
File: 3131392e35392e3132392e302f32342d3234203d3e203133333335.roa (raw, json)
Hash identifier: VTToJoKkrscQTUIQBkMLXC57t6zNRl/PNFX97oSQiVY=
Subject key identifier: 6F:25:4D:EE:65:FD:CA:80:DC:84:20:5B:6F:16:C4:CD:A1:BC:A6:87
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 742DE570F6F26A7B3BA1E8346F3EBF460D3E9CF4
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e203133333335.roa
Signing time: Mon 12 Oct 2026 05:57:46 +0000
ROA not before: Mon 12 Oct 2026 05:52:46 +0000
ROA not after: Mon 11 Oct 2027 05:57:46 +0000
asID: 13335
IP address blocks: 119.59.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 21 Oct 2026 01:39:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:2d:e5:70:f6:f2:6a:7b:3b:a1:e8:34:6f:3e:bf:46:0d:3e:9c:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Oct 12 05:52:46 2026 GMT
Not After : Oct 11 05:57:46 2027 GMT
Subject: CN=6F254DEE65FDCA80DC84205B6F16C4CDA1BCA687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fa:0d:a5:83:2b:2b:a1:42:ad:29:7b:75:6f:
f3:b1:9c:00:eb:53:f5:96:9a:bb:49:1e:61:51:81:
7b:d1:24:4d:28:1a:8b:b9:9c:39:02:b4:3d:e8:61:
a9:a1:44:8c:61:d5:bb:8d:77:4a:2e:6f:e7:5b:55:
04:2d:41:49:92:b7:62:40:03:8c:03:cb:c9:75:14:
9a:f3:2c:a6:d2:dd:1d:ab:ab:47:bc:88:5b:98:79:
1f:ba:92:88:b1:a3:dc:a3:f9:7c:38:b6:1c:dc:35:
f5:a5:16:c1:be:bf:b1:b2:21:96:ee:9b:a4:bb:c8:
76:45:3d:26:9e:66:05:fb:73:6f:c6:0b:cf:8b:50:
5e:f1:a4:fa:8b:9d:a2:44:b8:c3:0d:e8:26:f7:58:
16:77:04:1e:42:48:18:93:7d:76:3e:66:db:1b:64:
d1:6f:bc:d1:16:a8:5a:4c:b3:fd:9e:1c:43:28:24:
12:e5:38:a9:86:bc:cf:83:9e:67:d3:f7:45:3c:7f:
d0:8c:d4:32:7e:29:b6:e2:b2:db:33:d9:17:e6:07:
9c:0b:39:fa:3c:26:bc:af:cf:2c:f3:3e:c9:b4:1d:
13:09:9e:9e:35:fe:a9:02:ea:d9:35:9f:15:9b:2e:
5f:3b:5c:be:de:df:87:1d:09:f0:58:39:16:2d:89:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:25:4D:EE:65:FD:CA:80:DC:84:20:5B:6F:16:C4:CD:A1:BC:A6:87
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e203133333335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.129.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ff:5f:cc:82:62:b2:ae:12:17:30:d0:d6:23:7c:52:a0:a9:
d4:82:86:2d:5c:9e:32:57:87:d3:b8:85:fe:f6:a0:bb:c3:b6:
fb:c9:74:48:78:3d:5a:4e:af:17:27:56:45:8d:fc:a4:08:b8:
c5:36:e1:80:20:92:21:84:d2:d1:46:09:74:c5:4b:a9:85:52:
4d:e9:58:05:c4:01:e1:fd:f9:7c:de:ab:b1:e6:ba:34:a7:8b:
6f:fb:b9:aa:c9:db:37:64:05:ac:8e:c9:5a:20:d1:26:71:f0:
2d:25:1b:e8:f3:fb:ab:85:43:99:4e:7b:10:e2:95:8d:d7:48:
48:4c:d3:a2:b4:e8:13:60:af:95:9f:33:88:68:f4:d1:02:01:
b5:3d:89:79:39:78:6f:cf:cb:3a:8e:1e:e8:c7:20:08:b2:e2:
d2:e7:aa:53:a9:1f:97:c7:ce:39:73:cb:f5:04:11:f6:81:43:
c2:f3:59:26:c5:8b:0f:25:b5:9a:36:84:5b:25:90:b8:98:e4:
cb:a4:f8:11:d9:f9:89:25:98:76:43:9b:6b:97:c4:8b:b0:ae:
1f:cc:d9:1b:1d:1e:55:08:71:43:3c:d9:a6:e7:fd:46:b4:f4:
f5:9c:88:11:60:8a:51:5b:e1:5a:4c:e9:70:30:0c:44:62:01:
a4:41:94:98
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:56:07 2026 by rpki-client