
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3133392e352e36302e302f32322d3232203d3e20313334373634.roa
File: 3133392e352e36302e302f32322d3232203d3e20313334373634.roa (raw, json)
Hash identifier: n5z3Ub88nuXHHkXtqHc9Xp+LcApHRbc3zPCDmtDkCUg=
Subject key identifier: 2F:55:B2:F3:28:8E:37:81:42:CC:7D:9D:99:F3:B6:EC:66:D6:64:9F
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 36B4CF5F7EB68FD05CAEED80ABCB216C2D93E907
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3133392e352e36302e302f32322d3232203d3e20313334373634.roa
Signing time: Sun 28 Jun 2026 13:51:24 +0000
ROA not before: Sun 28 Jun 2026 13:46:24 +0000
ROA not after: Sun 27 Jun 2027 13:51:24 +0000
asID: 134764
IP address blocks: 139.5.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:b4:cf:5f:7e:b6:8f:d0:5c:ae:ed:80:ab:cb:21:6c:2d:93:e9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:46:24 2026 GMT
Not After : Jun 27 13:51:24 2027 GMT
Subject: CN=2F55B2F3288E378142CC7D9D99F3B6EC66D6649F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9d:8d:68:ca:b2:82:fc:c8:6f:09:36:ce:45:
cd:c5:15:24:77:cf:56:4a:f3:8a:97:91:0a:46:eb:
8b:30:ef:5b:b9:42:46:fe:e4:37:d7:78:3a:8d:0e:
2d:1e:78:0d:3f:ee:0f:1a:56:0b:7e:50:4f:02:b5:
b5:cc:1f:12:85:88:31:12:4d:92:29:2f:dc:36:3c:
6b:d2:cc:c8:5d:18:01:c6:fd:0f:24:f5:b8:a4:d8:
59:6c:ff:16:56:36:27:b1:38:dc:49:f1:1a:72:e3:
47:98:6f:1c:6b:fa:23:a0:82:78:c8:b5:6d:35:16:
6a:a9:d6:3b:bc:21:02:c6:40:e5:ae:a9:a4:48:3b:
07:95:e9:4b:31:15:9e:13:a7:d7:ca:fa:41:a9:e2:
33:12:1f:21:94:fc:f0:40:ae:09:14:c7:70:c7:38:
a4:1b:1d:39:19:9d:b1:48:b0:b2:53:d6:db:40:b1:
b6:61:0e:12:3e:14:fd:16:85:b2:a1:a3:3c:8f:92:
3e:68:5d:8a:29:02:9d:92:95:8c:87:df:8d:ec:fe:
4e:90:b5:ad:01:f8:85:e2:d3:52:ae:6c:16:36:97:
1e:c1:48:a8:75:b7:c7:c0:19:40:e9:a0:45:ad:0c:
3b:74:c2:2c:81:ac:19:4a:49:fa:2e:10:20:df:b0:
0e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:55:B2:F3:28:8E:37:81:42:CC:7D:9D:99:F3:B6:EC:66:D6:64:9F
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/3133392e352e36302e302f32322d3232203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.5.60.0/22
Signature Algorithm: sha256WithRSAEncryption
38:e0:7d:f2:f1:2d:29:f2:c4:de:ac:da:b8:ac:a7:52:2a:2c:
a9:de:a4:df:c8:9b:ba:ff:f6:5c:b4:37:a6:72:e6:7f:8e:96:
d6:0a:cf:ef:23:28:05:db:80:b4:62:3e:3e:97:58:78:4d:9e:
2b:ec:84:9d:0f:f3:a8:9b:da:97:b0:13:52:97:02:64:a1:a1:
15:49:c6:2b:db:1e:ca:47:0a:86:5e:4e:33:6d:b7:84:48:84:
bb:aa:f8:ca:30:be:19:2e:2e:f5:c2:ed:f2:2d:22:4b:bd:b7:
5b:45:ac:20:0c:45:1a:58:80:e8:a8:c9:44:ee:d2:24:3b:01:
6a:79:d6:b2:31:d5:63:92:ab:c3:1d:0b:b4:02:36:84:ab:6d:
25:e5:76:ea:d8:1d:68:77:93:cc:d0:a9:62:67:ff:3f:94:d8:
28:14:3a:98:ea:1a:00:2f:c4:4c:cc:73:e5:bf:b2:c2:27:d8:
0a:00:db:59:37:d8:77:80:5c:a1:23:a5:cc:ad:d2:f5:a7:c8:
97:3a:5f:3d:7a:68:6f:0b:a4:09:61:5c:2d:84:73:8f:f1:9d:
96:c0:4c:78:b2:a8:1a:81:99:bc:cc:79:9a:0a:00:e7:31:b8:
d6:e3:bb:d8:e8:0e:d9:8c:d2:ed:fd:c0:f3:e8:4e:b5:e2:a7:
bf:60:40:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:54 2026 by rpki-client