
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa
File: 3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: yPEOw1/lb8YkORumw9J0+ZXMyO+84f5BkaRvZWRcAxs=
Subject key identifier: A2:77:C4:92:1B:CC:81:A6:5F:28:0A:B0:63:03:85:D9:86:01:92:2B
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 165967F117358CC107D079450326196E2A1233F9
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa
Signing time: Mon 13 Jul 2026 03:46:39 +0000
ROA not before: Mon 13 Jul 2026 03:41:39 +0000
ROA not after: Mon 12 Jul 2027 03:46:39 +0000
asID: 198486
IP address blocks: 119.59.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:59:67:f1:17:35:8c:c1:07:d0:79:45:03:26:19:6e:2a:12:33:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:39 2026 GMT
Not After : Jul 12 03:46:39 2027 GMT
Subject: CN=A277C4921BCC81A65F280AB0630385D98601922B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:e2:c8:e5:fc:2a:68:a4:d0:62:e7:60:cc:
89:23:9c:e1:b6:ae:76:74:7a:1f:e4:58:d1:7f:be:
6d:75:de:b5:8a:b3:e9:24:00:65:e5:d5:b0:7b:a1:
7f:89:8e:ea:75:e6:a3:64:a0:19:d3:7e:21:52:87:
60:9e:fb:ff:4c:2d:85:86:a5:89:ce:14:8a:0a:09:
0c:29:a4:fe:1a:b1:a7:2f:3a:8c:d7:b9:b8:45:e7:
65:35:8d:2e:07:f1:03:fa:47:23:f6:78:ad:a1:9b:
24:31:d4:69:4d:03:33:36:85:ad:4a:20:0c:e9:d0:
d6:fc:c4:c7:12:34:4f:c5:b9:60:33:d4:59:ed:b1:
f0:35:4c:c2:54:d5:f5:4e:97:b9:8d:3c:91:a7:ff:
45:bb:e0:d9:b8:ca:b7:1d:81:08:a2:e0:55:80:dd:
71:f8:b4:b8:ab:e8:00:4e:70:08:f0:a8:e1:01:4d:
e9:02:a4:04:c8:6c:3f:6d:f3:56:5c:32:04:bd:27:
1e:10:c6:e6:2b:5b:37:7c:79:18:eb:15:fd:cc:f7:
08:29:51:80:43:40:41:7f:29:9c:f4:4e:c6:ce:f1:
7a:20:96:ca:ee:5f:e4:7c:86:90:bc:3d:7d:5d:52:
02:11:18:d5:d8:0c:03:a4:2d:93:a4:3e:07:c4:a7:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:77:C4:92:1B:CC:81:A6:5F:28:0A:B0:63:03:85:D9:86:01:92:2B
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133302e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.130.0/24
Signature Algorithm: sha256WithRSAEncryption
18:1c:d7:ca:c4:53:41:ce:39:f8:21:64:cd:45:81:8e:cf:74:
cb:30:b8:73:31:ac:1d:39:d6:73:40:3a:c2:77:4d:b7:0b:0b:
5a:53:a4:5e:18:94:30:ea:ee:08:19:39:b6:b7:a7:a1:f5:9a:
c3:10:b9:90:16:47:b2:e9:d9:38:74:3f:db:0b:11:96:74:44:
e9:fb:86:5a:a0:f7:5c:5b:d0:18:9d:06:a7:b5:23:d5:1c:9e:
d2:3a:ff:0d:49:75:b0:18:56:e9:f6:c6:01:db:a6:e3:34:eb:
36:dc:e5:70:82:9b:3c:99:2d:d5:0b:4a:2d:60:8c:27:e4:10:
64:a4:d1:50:2d:e9:37:b3:f2:47:ba:36:79:19:ba:d0:44:a4:
62:98:02:8b:d5:7e:bb:77:a2:43:3b:b5:f2:68:ba:5a:1d:55:
49:af:22:d8:2c:3c:23:e7:8b:b3:b1:64:4c:9f:f4:70:67:ff:
cd:4a:e0:93:83:e0:bc:a7:1b:0d:4e:7e:98:7e:d0:ed:7f:8d:
23:80:73:59:43:b9:28:cb:4d:e0:77:62:c9:05:78:87:ac:61:
d4:13:e9:6a:12:ce:1f:cd:45:14:36:da:01:4e:86:b6:23:56:
32:10:32:da:76:60:c4:61:58:4c:b5:44:97:db:4b:d1:37:79:
42:6f:92:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:02:32 2026 by rpki-client