
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa
File: 3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: GYyp2wuTUeE5MQPQGqIXukhB3LbAZo4heF94dZ8nAOI=
Subject key identifier: 0B:88:53:3B:C7:AF:6C:EE:35:11:63:05:67:13:09:62:0C:84:9D:7F
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 1369CB9B28F020E98DBE32D7DC82FEAA19FBCCDD
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa
Signing time: Wed 06 May 2026 06:24:07 +0000
ROA not before: Wed 06 May 2026 06:19:07 +0000
ROA not after: Wed 05 May 2027 06:24:07 +0000
asID: 198486
IP address blocks: 119.59.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:69:cb:9b:28:f0:20:e9:8d:be:32:d7:dc:82:fe:aa:19:fb:cc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:19:07 2026 GMT
Not After : May 5 06:24:07 2027 GMT
Subject: CN=0B88533BC7AF6CEE35116305671309620C849D7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:20:e9:86:5e:c0:aa:8f:3c:ea:7c:68:63:
0e:7a:2f:b9:f9:49:13:9d:5c:eb:ec:60:fe:02:40:
b8:92:1a:88:f4:37:c6:ea:a0:14:ec:f6:6f:cd:fb:
9b:a8:64:8e:ff:51:62:57:7d:22:70:13:24:ce:f0:
5a:e2:7b:c2:b4:aa:2e:3d:0b:d1:d5:65:bd:f9:6a:
4d:a2:c2:20:42:45:ab:44:b2:c8:4e:d1:e5:2a:d2:
92:c0:3e:97:09:45:21:49:f7:a0:29:bc:d0:3e:e5:
22:ba:f1:02:c4:13:8e:a2:9a:66:e4:3e:85:fc:d8:
33:10:0b:a2:7c:d2:ed:26:c5:9a:c8:9b:40:44:bb:
d4:40:e0:26:37:c3:95:8a:4d:86:00:e6:a4:d3:63:
4e:67:f8:dd:5c:e8:92:65:12:6a:2d:8d:55:cb:07:
98:c6:ea:b7:06:41:cf:69:9b:99:fb:62:47:56:b9:
6d:8e:40:e9:41:19:58:b9:17:d9:03:8e:4a:7c:f0:
21:c5:5e:34:ed:c2:d5:4b:67:5a:36:09:fb:a2:f0:
23:f0:6a:5c:57:5a:31:f8:93:ee:dc:16:80:76:e1:
cc:2b:0a:9b:ba:e8:36:95:b5:e3:08:9e:57:e1:76:
0b:32:ce:03:76:93:1d:63:3e:98:f0:bc:48:96:f5:
0e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:88:53:3B:C7:AF:6C:EE:35:11:63:05:67:13:09:62:0C:84:9D:7F
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3132392e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.129.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b2:1d:02:8a:2f:f9:5b:b1:a2:26:2a:2d:c8:fb:98:8c:4c:
61:63:18:65:1c:3d:18:f8:38:5f:18:0c:79:fd:24:2f:aa:e4:
9d:e4:68:9a:fb:ef:9b:16:b0:80:03:1c:cd:63:1f:39:8f:10:
6f:bb:49:de:42:64:77:e5:1c:d0:fc:14:64:8d:ca:04:e1:76:
0f:4c:13:c7:17:b2:0c:06:99:f1:5c:d3:2f:ac:b1:8b:a5:89:
24:18:b6:de:21:ed:70:a4:b1:00:38:cf:c1:91:e1:8b:1e:28:
73:59:38:bd:74:54:f5:97:d4:01:f1:c0:00:f2:47:91:29:ef:
1f:ca:34:6f:75:31:23:48:87:43:2d:ad:fd:c1:3b:75:dd:53:
a0:f6:94:14:23:29:b2:3e:62:75:08:53:8a:5a:47:9c:aa:50:
3d:43:77:21:44:b8:f2:c7:8c:48:a8:2a:0a:87:ee:9f:ec:63:
22:b7:08:34:15:4a:70:ae:28:e5:24:28:10:6f:cc:bd:bd:98:
4d:d9:05:05:7a:e9:3d:00:f6:ae:cd:bf:39:7b:22:07:35:2e:
a2:88:28:89:c6:70:da:34:51:d6:73:ef:8c:ca:33:25:8f:a7:
c5:2a:fc:c2:03:4b:24:63:b8:b2:c9:2e:b0:bb:c7:2d:39:34:
94:13:15:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:45:17 2026 by rpki-client