
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa
File: 3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: /yW3yOsGOt0PfcuUyz7M1t/tirb0GWB0N8yiLNU81AE=
Subject key identifier: 58:6B:A7:F3:4A:AC:AF:9B:99:2D:BF:A8:62:67:87:F5:C5:A6:AC:B8
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 3BC9624A5642034C087136C5195432A1047B9FAB
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa
Signing time: Wed 06 May 2026 06:24:29 +0000
ROA not before: Wed 06 May 2026 06:19:29 +0000
ROA not after: Wed 05 May 2027 06:24:29 +0000
asID: 198486
IP address blocks: 119.59.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c9:62:4a:56:42:03:4c:08:71:36:c5:19:54:32:a1:04:7b:9f:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:19:29 2026 GMT
Not After : May 5 06:24:29 2027 GMT
Subject: CN=586BA7F34AACAF9B992DBFA8626787F5C5A6ACB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3c:19:fe:da:fd:1e:72:1e:27:be:ad:e0:da:
88:5b:19:c0:ce:ef:1c:b3:da:35:f3:bc:85:01:03:
32:77:43:62:7f:4c:23:0a:54:9e:6c:e7:1b:7a:36:
65:e3:24:c8:f8:4e:45:eb:bb:b9:a8:d2:b5:53:1f:
4e:f6:d6:af:33:78:8d:a1:15:2e:fb:66:e5:39:34:
65:55:c4:28:59:f7:08:a2:1c:01:9e:78:6e:d5:a0:
89:63:6d:68:97:80:d6:b6:ea:29:94:ad:58:d2:25:
45:59:07:dc:e7:62:38:0b:7e:b4:73:a1:e8:9e:e7:
1d:1a:ed:21:3f:db:86:df:4a:53:7b:c1:0e:81:a8:
b8:16:0b:3a:a9:f6:fb:38:4f:60:ce:2d:31:f1:26:
92:fd:f8:47:19:0a:b8:af:51:64:c2:d1:56:da:60:
0d:fc:77:6b:22:c8:98:c5:de:75:74:3d:84:9d:a6:
19:7f:cd:29:92:15:0a:fb:da:86:f0:3b:c6:66:94:
57:29:7e:15:1a:0f:b2:f0:ae:11:39:93:4e:ca:27:
18:36:01:e9:57:f1:b7:44:97:0c:f8:34:f1:a3:bf:
17:d2:41:7d:05:82:6b:98:00:18:db:64:d5:81:cb:
96:07:9c:96:35:d2:f2:37:91:8d:32:ad:2b:d2:14:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6B:A7:F3:4A:AC:AF:9B:99:2D:BF:A8:62:67:87:F5:C5:A6:AC:B8
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3131392e35392e3133312e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.59.131.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7a:89:06:00:86:6e:9f:7e:39:ed:75:2e:ea:bf:5c:7e:62:
e6:33:48:64:02:e5:38:77:3b:b5:9a:06:76:47:c9:c5:99:4f:
91:aa:70:31:91:52:50:f8:34:ec:f5:6d:94:48:2f:a3:43:bb:
23:59:3b:c2:a3:cc:cd:b8:ac:0f:58:ba:b2:68:53:5f:78:7f:
27:55:23:92:0d:d5:e2:56:02:e7:45:59:a8:e9:cf:89:5c:e4:
86:2a:e0:aa:4e:f8:5c:b2:f9:a8:5a:3b:d5:86:79:c7:a1:ab:
34:05:87:10:8b:12:a7:c5:96:e9:c7:ff:69:56:fd:f8:de:cf:
64:50:54:fe:8b:7a:34:7f:98:5c:fa:1b:ca:40:89:ce:e2:f3:
ba:ce:41:ab:10:1d:e8:66:b3:40:7f:a2:94:2c:45:f7:bc:32:
78:a9:b7:0d:3d:45:84:3a:24:e6:e7:0b:e1:32:2f:a2:8b:5a:
6c:9f:ce:67:b2:df:5f:13:e5:c7:ef:93:82:87:c0:b2:6f:3d:
f9:dd:52:3b:8e:e8:23:62:96:92:44:bd:f8:bb:0b:09:07:0a:
90:49:57:7c:ff:9b:f4:89:bd:cd:a6:c8:b1:17:03:84:41:01:
d4:89:c2:92:33:0d:e0:63:2b:2a:8b:18:9e:63:db:84:01:0c:
97:b3:74:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:26:48 2026 by rpki-client