
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e3131392e302f32342d3234203d3e203633313939.roa
File: 3133392e3135392e3131392e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier: HGltnfQzZnrsAIgWAyhlvRhkH48URAVKBK8ranwE+jM=
Subject key identifier: 3F:9A:01:82:51:97:4B:AF:F4:20:47:CD:B5:F4:3E:A5:66:35:78:20
Certificate issuer: /CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Certificate serial: 2F006059716D7A709E77B9CE3D874FE0FA9EAECB
Authority key identifier: 34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e3131392e302f32342d3234203d3e203633313939.roa
Signing time: Wed 03 Jun 2026 16:07:03 +0000
ROA not before: Wed 03 Jun 2026 16:02:03 +0000
ROA not after: Wed 02 Jun 2027 16:07:03 +0000
asID: 63199
IP address blocks: 139.159.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 18:37:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:00:60:59:71:6d:7a:70:9e:77:b9:ce:3d:87:4f:e0:fa:9e:ae:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34D58A062B3D996DB1E8A2BB2764188FDEF00DBA
Validity
Not Before: Jun 3 16:02:03 2026 GMT
Not After : Jun 2 16:07:03 2027 GMT
Subject: CN=3F9A018251974BAFF42047CDB5F43EA566357820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:3e:db:93:e6:d0:46:b8:92:ef:b7:80:1b:
9d:75:56:b0:58:41:67:2b:d8:37:33:b0:f0:4c:9c:
e2:84:3f:51:1a:c7:6a:ca:9c:4b:e4:8c:66:a5:58:
64:37:d9:50:7c:91:dc:cd:3c:4d:30:83:09:21:0d:
da:b4:f3:29:79:9d:2c:34:85:a2:3b:e9:64:96:ac:
29:e6:a7:33:95:dc:63:af:cf:81:2d:2d:26:4a:f0:
36:3f:a7:10:c0:a3:1b:cc:0d:78:fc:a3:ab:aa:56:
85:de:78:fb:2f:bc:21:8a:fc:2d:4a:70:f7:7c:07:
d9:fb:21:93:72:67:80:77:e7:4c:80:ba:88:a0:eb:
fe:e4:c3:46:69:1b:90:f6:7b:5a:1c:e4:94:e5:07:
17:f6:91:1a:14:b6:36:7a:18:30:b1:2a:35:88:fd:
9f:12:f2:fd:25:f2:d6:07:11:13:56:ee:34:44:d7:
d0:73:6e:68:82:9d:54:97:9b:33:8b:cf:3c:ca:4e:
6b:94:d8:73:ef:a1:a0:cd:c3:42:b0:7a:b1:d8:25:
bd:04:9e:a2:c2:99:ef:5d:c4:be:13:34:ff:03:17:
cf:56:c9:de:dc:c1:c3:4e:c6:bb:78:27:d7:8a:68:
a3:dd:c7:1f:5b:67:68:3e:9b:c7:cf:b5:71:45:00:
5f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:01:82:51:97:4B:AF:F4:20:47:CD:B5:F4:3E:A5:66:35:78:20
X509v3 Authority Key Identifier:
keyid:34:D5:8A:06:2B:3D:99:6D:B1:E8:A2:BB:27:64:18:8F:DE:F0:0D:BA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/34D58A062B3D996DB1E8A2BB2764188FDEF00DBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548156930/1/3133392e3135392e3131392e302f32342d3234203d3e203633313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.119.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4e:84:f1:c8:9d:24:a0:1d:97:23:4f:be:7a:72:ea:9f:11:
61:c3:e2:1b:2b:b0:cf:4e:72:4b:ff:32:f5:eb:3b:33:71:e5:
b5:c6:63:ad:de:1d:2b:b4:56:5c:e7:2a:70:0a:a2:a5:9c:33:
ee:f1:cc:5f:95:5a:a9:cd:97:13:a5:58:56:25:3d:0d:88:79:
c6:ff:d3:eb:53:6e:71:53:e6:1c:3b:42:da:f8:38:c2:5f:bf:
11:0b:18:4d:85:ef:0e:e2:de:ec:eb:64:b6:c6:ec:61:f6:7d:
26:61:9e:e6:d9:65:c0:03:6c:1c:45:5f:bd:82:f5:85:8b:f9:
d8:fc:c6:5b:6b:b0:61:a5:46:c4:ef:5d:4c:0f:17:ae:2d:08:
89:bc:ff:62:be:1d:7a:47:9e:06:90:6d:7e:cf:dc:f3:23:37:
fe:2c:ba:2e:60:13:48:3d:cf:39:33:63:0d:ef:e7:08:db:4e:
50:d1:9b:10:19:be:f2:d7:3a:03:10:e4:a4:b7:e4:51:f7:e6:
86:43:27:88:77:9c:c4:d6:4a:ef:44:b9:31:41:5d:e1:63:c8:
a8:4f:b6:e5:0d:49:21:98:3b:00:02:82:87:aa:da:f5:94:6a:
ac:6d:38:26:86:e3:e5:2b:50:65:85:48:c8:38:34:31:84:ac:
aa:de:c2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:01:17 2026 by rpki-client