
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa
File: 3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: JWVVHm2eW9E19LG72qugMksIt+B9qbPSjr48QMCcxKw=
Subject key identifier: AB:93:84:32:E4:8E:34:5C:14:78:A7:FD:C0:69:3B:14:14:74:26:6D
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 65C63E6671B03090E8DDC85DA4DF00A299AD510E
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa
Signing time: Mon 13 Jul 2026 03:46:33 +0000
ROA not before: Mon 13 Jul 2026 03:41:33 +0000
ROA not after: Mon 12 Jul 2027 03:46:33 +0000
asID: 198486
IP address blocks: 119.59.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c6:3e:66:71:b0:30:90:e8:dd:c8:5d:a4:df:00:a2:99:ad:51:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:33 2026 GMT
Not After : Jul 12 03:46:33 2027 GMT
Subject: CN=AB938432E48E345C1478A7FDC0693B141474266D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a4:08:bd:02:54:ab:34:7f:50:13:65:9a:a1:
a4:6b:42:1c:c5:d3:a9:99:9b:05:72:4e:96:f7:b6:
e8:7f:78:bb:72:16:ac:82:d2:ad:cf:78:8e:c6:8f:
1b:15:85:96:a9:1f:11:32:4f:6d:3b:a1:fd:45:2b:
52:d9:d4:a4:53:d6:fd:52:11:8a:dd:4f:20:bc:ce:
22:ac:ad:49:c7:61:e7:e6:0c:7d:13:e5:f3:62:59:
8c:da:98:38:2b:a4:5c:0d:03:85:b5:ea:59:10:99:
9c:1c:b6:e9:ea:b4:8b:ad:45:ff:00:84:d4:b5:2a:
4b:b9:c1:d5:81:38:62:9f:72:8d:9a:4b:77:9c:a2:
eb:b3:ea:d8:a8:b2:35:6e:f1:a5:c1:ba:83:22:e8:
39:90:c4:df:de:0c:11:75:80:6d:ba:ef:bc:41:4f:
df:ad:76:2f:85:ed:df:4c:3e:2a:53:85:24:d7:f1:
db:53:57:f3:c7:45:e0:b1:58:30:b0:72:a3:37:9b:
15:b1:2b:0d:5d:7e:f9:0b:d1:21:2e:07:32:41:c1:
6b:00:15:49:b3:48:bc:69:75:26:ca:91:c1:d6:3c:
30:35:ff:3c:97:51:ef:23:fa:2c:55:37:27:18:94:
f5:2c:1a:85:3c:e0:e9:d3:07:24:32:44:dc:d8:61:
0c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:93:84:32:E4:8E:34:5C:14:78:A7:FD:C0:69:3B:14:14:74:26:6D
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.129.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:cd:dc:8d:68:e3:f2:12:59:2f:4e:01:5b:d0:ed:fe:96:19:
9a:c3:18:80:ca:a2:f2:e2:40:ae:fc:25:bd:7c:66:90:02:cd:
48:33:42:4f:42:20:33:bf:b4:a1:21:5d:f0:59:e4:91:f6:4d:
61:66:ca:5a:8e:5f:b9:c3:1d:44:7a:f0:2c:83:cb:71:60:ef:
aa:d9:3e:29:a6:23:77:8b:1b:e0:f3:06:2c:17:39:48:a7:e1:
a2:d5:a3:55:ab:cb:b3:3d:87:b8:60:04:93:d1:08:84:00:08:
2b:96:1a:19:37:73:57:7b:98:3d:e2:74:f5:81:6b:ab:22:14:
52:0f:77:42:01:13:42:c4:6e:8e:fe:9b:9f:76:f2:7a:c7:9e:
aa:1e:71:32:39:dd:6d:6f:87:e8:21:8e:a4:fe:e7:e4:c6:f9:
ab:c1:b9:3f:c7:25:22:9e:e2:c4:61:94:d8:d9:f4:06:fe:ed:
00:a1:9f:47:25:a3:3a:df:6d:11:98:a1:00:a4:44:9d:6b:df:
a9:f7:92:9f:61:ad:08:25:af:7f:b3:b2:64:3c:ab:06:42:31:
36:66:7f:bf:f5:93:25:ae:26:49:01:2d:66:ee:17:a9:5d:70:
72:17:a3:f8:de:fd:20:d6:da:ab:6c:4f:6b:d8:83:b2:eb:93:
a4:88:d4:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:38:06 2026 by rpki-client