
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS134366.roa
File: AS134366.roa (raw, json)
Hash identifier: YH9VBWSVppGK2zBKuttmPZfacvCbwc7gR9t/t8CcrwE=
Subject key identifier: E8:34:4E:05:70:87:20:7A:50:23:6D:D6:1B:BB:DA:88:82:3E:2C:17
Certificate issuer: /CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Certificate serial: 20B03637AF91611397B430BB6BFB7880541CE66C
Authority key identifier: 01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS134366.roa
Signing time: Sun 10 May 2026 07:40:53 +0000
ROA not before: Sun 10 May 2026 07:35:53 +0000
ROA not after: Sun 09 May 2027 07:40:53 +0000
asID: 134366
IP address blocks: 139.198.10.0/24 maxlen: 24
139.198.64.0/24 maxlen: 24
139.198.65.0/24 maxlen: 24
139.198.112.0/24 maxlen: 24
139.198.113.0/24 maxlen: 24
139.198.120.0/24 maxlen: 24
139.198.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 00:20:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b0:36:37:af:91:61:13:97:b4:30:bb:6b:fb:78:80:54:1c:e6:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA
Validity
Not Before: May 10 07:35:53 2026 GMT
Not After : May 9 07:40:53 2027 GMT
Subject: CN=E8344E057087207A50236DD61BBBDA88823E2C17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ed:4e:da:8d:95:a3:0e:8e:d1:80:01:cb:43:
20:78:e3:4a:e3:80:ba:36:72:68:84:8f:df:8a:ae:
cd:3f:ba:58:7a:1e:74:5d:f5:c2:b9:45:97:be:10:
f4:50:8a:72:20:16:fc:35:a1:4f:d8:16:19:f8:18:
3a:c9:83:64:97:39:30:27:cb:69:81:4a:57:65:69:
38:7e:45:cd:3b:74:8b:e8:bc:a1:c0:98:39:dc:76:
37:d5:5b:10:06:d4:50:74:51:e8:84:b8:c8:85:d4:
ba:b5:a1:6f:af:64:dc:6d:85:40:17:a6:68:19:d4:
b7:0d:b4:d7:b5:fb:5c:89:3e:3b:aa:00:85:40:63:
f2:44:a8:28:c3:d1:92:4b:c3:13:a7:91:11:73:57:
5c:45:76:dc:09:02:dc:71:34:b0:09:50:55:99:ef:
00:36:19:c4:ed:fd:90:b4:4a:55:ef:8e:3e:d3:ee:
27:fc:40:45:e9:49:8f:13:75:02:85:bc:9b:a3:bc:
fa:63:2b:02:f6:07:12:4a:e2:05:37:f2:8c:e7:c1:
21:4f:b3:4b:19:56:8c:01:38:b3:90:b7:9f:87:43:
b7:9b:0c:27:92:15:88:2f:a8:c9:12:56:2d:86:d7:
0f:98:21:08:4a:d7:fe:02:6e:b5:3c:41:83:39:28:
2a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:34:4E:05:70:87:20:7A:50:23:6D:D6:1B:BB:DA:88:82:3E:2C:17
X509v3 Authority Key Identifier:
keyid:01:FB:56:09:FD:2A:A5:67:AD:7A:F6:9C:D2:0C:C4:AB:3E:BD:10:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/01FB5609FD2AA567AD7AF69CD20CC4AB3EBD10CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/1/AS134366.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.198.10.0/24
139.198.64.0/23
139.198.112.0/23
139.198.120.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:75:4e:73:22:9e:5e:44:6a:a1:c0:65:a7:7b:68:1a:fc:23:
bf:cf:2a:b7:32:fd:57:53:25:34:8a:f4:f1:df:4a:cc:e5:10:
27:e5:c0:f4:a0:b4:3a:39:09:9b:1c:25:8e:ac:67:0c:c0:14:
fb:a8:e1:a6:80:0f:63:7d:cd:f3:35:58:79:bf:ff:fb:72:f5:
f5:35:dc:c3:09:84:5b:b6:59:9b:68:72:0a:96:a5:64:a2:7e:
35:d7:e3:c2:e4:0a:44:b0:e3:5a:0a:ec:70:0f:85:40:d7:77:
e0:6a:13:68:eb:04:56:49:11:43:11:a7:1c:75:94:d5:01:94:
bd:77:5f:3a:bd:6c:98:09:70:c0:96:dd:25:2e:3e:b7:89:48:
ca:db:ec:25:8d:a5:b6:56:00:c4:14:40:27:84:8a:fa:28:8f:
da:2b:a7:4b:e0:c4:36:53:ff:15:7a:c6:83:26:88:4e:c3:2a:
ae:7a:85:ed:37:66:7b:7c:4a:37:7c:c7:97:78:17:12:33:42:
3f:30:91:99:74:95:0c:72:a3:e6:3a:74:cd:41:0a:05:d0:4d:
c0:da:83:48:5b:9c:93:3b:77:34:f2:22:9f:ec:02:1c:80:ee:
f2:e7:0c:b2:f0:68:21:a1:42:43:8c:ee:2c:54:48:0e:73:ba:
e3:73:5e:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:29 2026 by rpki-client