
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e3131382e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e3131382e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: ODBMFYaAiytyw17J8mjVJAI0FXJU3dAq/ESFApRWkt4=
Subject key identifier: 5C:90:AB:2F:61:87:36:0C:48:3D:31:51:9F:48:37:5B:30:35:8E:87
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 494D747934395F015FABF529DC5D1A5965BB378F
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e3131382e302f32342d3234203d3e203633313939.roa
Signing time: Wed 03 Jun 2026 16:07:03 +0000
ROA not before: Wed 03 Jun 2026 16:02:03 +0000
ROA not after: Wed 02 Jun 2027 16:07:03 +0000
asID: 63199
IP address blocks: 139.159.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 18:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4d:74:79:34:39:5f:01:5f:ab:f5:29:dc:5d:1a:59:65:bb:37:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 3 16:02:03 2026 GMT
Not After : Jun 2 16:07:03 2027 GMT
Subject: CN=5C90AB2F6187360C483D31519F48375B30358E87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8b:1a:52:cf:ac:76:9c:f8:2d:22:0c:cd:ad:
59:bd:43:ad:69:9c:14:02:1f:8a:ae:e1:66:0a:7c:
26:fd:03:e4:95:92:60:03:7d:d7:5d:38:6f:20:8e:
ca:83:a8:86:fd:c1:17:e5:a7:17:a5:f3:58:7a:7d:
f8:53:2a:b3:91:6c:20:e1:37:0e:60:2b:36:f8:cc:
38:e1:65:a8:50:c1:af:c6:5c:51:5a:67:21:f0:a8:
93:1b:36:83:f0:6e:90:28:6d:c9:72:cc:a1:87:d4:
72:b5:f6:f4:c4:88:77:c1:46:9d:cb:62:96:1d:c7:
e8:aa:c6:66:6f:d7:5d:d9:c1:28:2a:07:60:d3:41:
0d:30:d3:e5:4e:56:eb:10:49:ff:57:44:e3:b5:cd:
a6:3a:22:45:ff:a4:bb:ba:79:de:bc:b2:ac:8e:e3:
50:86:8e:f3:c8:9b:76:76:18:67:e1:ed:84:25:f1:
53:09:82:6f:a9:4e:5c:df:ad:c1:2e:6d:df:db:5a:
a1:88:c3:a1:88:05:3f:94:c7:14:67:88:a9:ba:e1:
99:4c:fa:60:f0:d2:a1:c3:a1:d6:ca:22:78:aa:a3:
1f:3f:2d:88:93:67:8a:09:c1:87:48:ed:65:30:b5:
ad:8a:97:0c:db:5c:e5:7f:40:ef:73:e1:a8:41:4b:
84:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:90:AB:2F:61:87:36:0C:48:3D:31:51:9F:48:37:5B:30:35:8E:87
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e3131382e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.118.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:37:03:88:4b:a6:d2:a2:16:8e:65:a4:6c:f7:47:b3:39:3e:
87:ee:0f:bd:ed:95:ed:f2:b8:aa:7c:6a:fa:85:73:d6:82:95:
02:8d:e0:79:dc:81:21:26:0c:d1:d7:fb:c7:7e:31:e3:ed:d4:
a9:61:7e:a5:82:90:09:13:fb:0c:55:ff:bb:6a:cb:d0:cb:06:
5e:0f:74:bc:1d:26:8e:a0:03:6c:69:f9:ca:28:b2:1a:88:19:
bc:cf:87:49:94:ce:ae:76:5c:ea:cb:40:2b:f2:d2:76:42:b1:
d6:ee:2d:b5:3e:29:7c:45:06:98:38:e4:29:b4:21:57:d3:42:
e8:d3:9a:a0:10:8a:c2:3f:26:9a:85:aa:ac:12:d2:7a:4d:9c:
c4:db:4b:ab:2c:92:4b:25:bb:09:6c:b5:1f:f0:d9:ec:4b:7b:
97:90:b2:ec:97:e5:ea:12:03:e9:e8:a6:51:b7:80:31:c8:f4:
4b:19:04:76:34:2c:a7:d8:eb:8a:74:1f:1a:4e:e3:8b:73:07:
c0:d2:60:44:c7:2f:74:31:5b:57:14:77:cc:8c:d5:42:a1:48:
7b:10:fe:fc:76:4c:03:01:1a:6b:d5:7a:e3:84:7d:f1:6c:a1:
47:68:7a:b4:7b:ac:f9:da:8f:35:2d:b9:01:2f:9c:2a:30:54:
80:67:ed:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:01:18 2026 by rpki-client