
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e2034383038.roa
File: 3133392e3135392e3136362e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: UCSc7ygTx7HgYdAfATFJOwmCRIF0HgIG8D6tMuemQNM=
Subject key identifier: 02:43:AD:F0:11:5D:BE:D7:73:8C:96:F5:19:07:E5:75:09:F7:E2:F3
Certificate issuer: /CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Certificate serial: 4EB9FD72E614AAFA3F06213BA9EFF07E9D6A26BD
Authority key identifier: AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e2034383038.roa
Signing time: Tue 16 Jun 2026 15:37:44 +0000
ROA not before: Tue 16 Jun 2026 15:32:44 +0000
ROA not after: Tue 15 Jun 2027 15:37:44 +0000
asID: 4808
IP address blocks: 139.159.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 01:15:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b9:fd:72:e6:14:aa:fa:3f:06:21:3b:a9:ef:f0:7e:9d:6a:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE1431CDCA3C52456B0146C49D5EEE32961D793D
Validity
Not Before: Jun 16 15:32:44 2026 GMT
Not After : Jun 15 15:37:44 2027 GMT
Subject: CN=0243ADF0115DBED7738C96F51907E57509F7E2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b6:6a:0e:19:5e:13:58:cf:5f:bc:51:a4:5f:
9d:ce:af:28:41:5d:02:e4:9b:8b:bb:ca:96:81:cb:
a0:bf:26:84:68:2a:af:19:e5:9d:5e:1e:e6:b2:cd:
c7:7f:92:9b:88:df:18:7e:62:48:ad:ff:23:52:26:
92:b6:9d:15:b9:7a:79:3d:c3:57:60:e6:3c:4e:88:
52:4a:8c:3d:de:42:ab:20:aa:da:17:9b:96:dd:07:
16:4d:c7:8d:00:2e:b8:67:4e:73:bb:e6:25:5d:3c:
54:53:c2:ee:ba:a1:10:d9:bf:64:b0:9b:aa:57:e1:
23:64:ad:5a:1a:ec:ed:7d:35:35:f5:91:c6:56:14:
56:7b:0e:e0:e1:6b:bb:d8:07:94:e2:6d:6d:75:0f:
56:55:d3:d5:cc:d8:0f:9f:c0:4d:b8:98:d2:a0:5f:
cc:88:43:52:08:50:22:99:ec:3c:c5:27:2a:13:ad:
33:41:66:e2:99:ff:cd:b8:a7:07:53:5c:a0:c7:e8:
8c:52:f2:11:0b:0e:7c:60:79:b0:8b:00:c5:82:f9:
3f:37:c3:de:c2:d8:27:37:70:4b:14:db:17:d1:29:
b7:a9:1b:6c:6f:61:e5:10:b3:3d:57:20:3c:41:c2:
f1:25:56:51:e6:65:d9:6c:05:66:7b:e4:0a:b5:6b:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:43:AD:F0:11:5D:BE:D7:73:8C:96:F5:19:07:E5:75:09:F7:E2:F3
X509v3 Authority Key Identifier:
keyid:AE:14:31:CD:CA:3C:52:45:6B:01:46:C4:9D:5E:EE:32:96:1D:79:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/AE1431CDCA3C52456B0146C49D5EEE32961D793D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/AE1431CDCA3C52456B0146C49D5EEE32961D793D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265223681/1/3133392e3135392e3136362e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.159.166.0/23
Signature Algorithm: sha256WithRSAEncryption
b7:b7:04:c7:f9:e3:ce:14:98:1e:a2:68:22:31:48:15:92:69:
ca:ba:26:c3:32:42:57:84:c1:f4:09:2c:5e:c4:a6:56:a1:f8:
4d:e2:92:7b:e1:47:cb:7e:06:e2:30:96:e5:b1:4f:9d:28:43:
b7:36:3b:b3:a8:56:0c:8e:d2:ac:a8:7b:e8:a0:a1:b6:0b:0c:
01:81:b5:c0:e1:97:25:a3:20:6e:28:a1:f2:60:04:bf:55:0b:
9d:7e:e4:68:5c:1d:f5:6a:89:23:49:bf:91:0b:6a:10:f4:d9:
0e:56:d3:f3:2f:ac:63:74:e7:af:91:28:9c:4a:0d:f3:cc:35:
61:d6:1b:f3:c0:cd:e8:b4:48:43:6f:2d:0f:25:47:82:46:2e:
38:6a:da:b6:34:e8:8e:15:31:75:94:5e:79:7d:f7:16:e9:05:
be:4d:e2:78:4b:c9:7a:d9:9a:db:04:57:9e:f6:39:f4:84:05:
93:bf:9b:b1:a3:25:ac:ca:70:4c:2e:55:98:fa:66:1a:4e:b5:
8e:1d:c7:4e:9a:c1:e0:64:f7:a1:d4:72:6a:6b:c1:3f:e8:ae:
84:96:f8:0b:fe:56:15:8e:9f:76:db:eb:50:34:da:da:50:0f:
8f:27:f7:d9:99:e6:52:6f:4f:23:d1:73:85:56:27:61:ff:83:
71:89:1b:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:43:30 2026 by rpki-client