
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e32322e302e302f31352d3135203d3e203233373731.roa
File: 3132342e32322e302e302f31352d3135203d3e203233373731.roa (raw, json)
Hash identifier: No0KbpPfVclt6n566p70/nKn/lYy7MLgaeZGGN9EsL8=
Subject key identifier: E8:68:71:14:04:54:04:4D:05:74:5F:5F:31:2F:F3:C0:46:BB:32:E4
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 0ED03638B9088BDE9A05B1C725B1810E025B45BA
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e32322e302e302f31352d3135203d3e203233373731.roa
Signing time: Tue 14 Apr 2026 02:17:59 +0000
ROA not before: Tue 14 Apr 2026 02:12:59 +0000
ROA not after: Tue 13 Apr 2027 02:17:59 +0000
asID: 23771
IP address blocks: 124.22.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:d0:36:38:b9:08:8b:de:9a:05:b1:c7:25:b1:81:0e:02:5b:45:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 14 02:12:59 2026 GMT
Not After : Apr 13 02:17:59 2027 GMT
Subject: CN=E86871140454044D05745F5F312FF3C046BB32E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:99:73:ae:08:9b:a7:6a:8d:99:39:65:98:56:
aa:b8:5f:fd:27:6b:5b:43:67:3a:f1:f3:5c:17:2e:
c9:02:1f:ed:02:e2:51:e2:9b:13:31:34:97:85:f8:
22:e2:e7:62:f0:7e:4a:cc:b0:a8:6e:1f:c0:02:d3:
2a:ef:4e:5f:61:52:5e:fb:a2:95:ef:33:70:19:96:
52:17:1c:d5:db:ea:bf:71:0c:e8:d7:0e:ff:fa:52:
30:62:65:b1:9e:52:df:cc:66:90:96:47:60:7c:9d:
63:c0:d7:a4:81:da:09:2c:70:94:bd:5a:f6:57:b5:
8c:7c:64:6e:08:7d:c7:70:7b:f0:0e:e3:dc:f0:94:
50:9b:f9:e4:c9:cd:17:1b:c1:35:92:e6:8a:22:67:
a6:bf:a5:d9:a3:38:aa:a2:d5:45:80:7e:b3:b9:b2:
0c:fb:80:e6:50:b0:d9:aa:71:5a:2e:39:5b:59:54:
0c:a0:f5:3e:08:cb:d6:e2:33:27:88:52:2f:06:29:
cf:54:29:67:53:26:98:3d:47:6c:73:64:21:79:c8:
48:55:96:75:75:14:a1:62:10:28:67:16:c6:18:21:
75:02:5e:b7:1c:bf:7a:16:88:ee:61:c5:44:f1:6c:
bf:ae:7e:81:c9:94:79:61:e3:0e:10:8e:99:5b:cd:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:68:71:14:04:54:04:4D:05:74:5F:5F:31:2F:F3:C0:46:BB:32:E4
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e32322e302e302f31352d3135203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.22.0.0/15
Signature Algorithm: sha256WithRSAEncryption
0c:62:71:d6:df:91:0d:67:79:9e:d9:68:d1:5d:b4:53:92:d1:
9d:cd:84:7b:39:c6:b0:81:33:66:46:db:c3:ff:62:86:1d:90:
65:9d:6f:6c:a4:ab:32:c1:0d:ff:5f:6f:19:6f:54:84:83:89:
1d:2c:2e:23:55:86:63:3b:99:68:dc:41:bf:d9:11:be:cd:6b:
88:9b:ac:ee:07:c1:6e:1f:d1:eb:64:5c:1c:55:f5:d7:04:78:
58:01:ac:b6:f2:05:e0:f9:e8:0b:8c:39:85:fe:d2:88:3a:b1:
8e:7b:58:14:23:c8:9f:ad:e3:e0:75:95:db:dc:ac:43:6a:e4:
36:e4:28:e4:7c:74:4e:a9:12:7e:9d:18:e9:f5:30:5b:bd:54:
3c:7e:64:e5:e6:c8:26:5a:53:6f:ef:e2:ef:99:cb:96:f8:4b:
65:e1:ee:24:5a:d1:e6:c3:75:af:b5:15:3d:c1:4e:0a:d3:3e:
50:29:b4:cb:e5:af:d7:11:fe:7e:f7:27:44:37:71:b8:87:26:
3c:43:5f:5a:e4:97:fe:48:cc:e6:31:cd:58:e6:0b:4e:7c:41:
6c:79:6d:56:06:24:17:ce:2a:83:38:81:f4:09:2e:de:25:60:
15:1f:6b:2a:de:95:51:07:a1:94:4d:d1:75:6a:be:67:48:cf:
9a:ed:15:82
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIUDtA2OLkIi96aBbHHJbGBDgJbRbowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5
QjFGNUIyQzAeFw0yNjA0MTQwMjEyNTlaFw0yNzA0MTMwMjE3NTlaMDMxMTAvBgNV
BAMTKEU4Njg3MTE0MDQ1NDA0NEQwNTc0NUY1RjMxMkZGM0MwNDZCQjMyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmXOuCJunao2ZOWWYVqq4X/0n
a1tDZzrx81wXLskCH+0C4lHimxMxNJeF+CLi52LwfkrMsKhuH8AC0yrvTl9hUl77
opXvM3AZllIXHNXb6r9xDOjXDv/6UjBiZbGeUt/MZpCWR2B8nWPA16SB2gkscJS9
WvZXtYx8ZG4Ifcdwe/AO49zwlFCb+eTJzRcbwTWS5ooiZ6a/pdmjOKqi1UWAfrO5
sgz7gOZQsNmqcVouOVtZVAyg9T4Iy9biMyeIUi8GKc9UKWdTJpg9R2xzZCF5yEhV
lnV1FKFiEChnFsYYIXUCXrccv3oWiO5hxUTxbL+ufoHJlHlh4w4QjplbzTcrAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQU6GhxFARUBE0FdF9fMS/zwEa7MuQwHwYDVR0j
BBgwFoAU+3t5TxI3Jf6ACmR/P36L6ZsfWywwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjcyMzM3MjA0ODM4Ni8wL0ZCN0I3OTRGMTIzNzI1RkU4MDBBNjQ3RjNGN0U4
QkU5OUIxRjVCMkMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkI3Qjc5NEYxMjM3MjVGRTgwMEE2NDdGM0Y3RThCRTk5QjFGNUIyQy5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2NzIzMzcyMDQ4Mzg2LzAvMzEzMjM0MmUzMjMy
MmUzMDJlMzAyZjMxMzUyZDMxMzUyMDNkM2UyMDMyMzMzNzM3MzEucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwF8FjANBgkqhkiG9w0BAQsFAAOCAQEADGJx1t+RDWd5ntlo0V20U5LRnc2EeznG
sIEzZkbbw/9ihh2QZZ1vbKSrMsEN/19vGW9UhIOJHSwuI1WGYzuZaNxBv9kRvs1r
iJus7gfBbh/R62RcHFX11wR4WAGstvIF4PnoC4w5hf7SiDqxjntYFCPIn63j4HWV
29ysQ2rkNuQo5Hx0TqkSfp0Y6fUwW71UPH5k5ebIJlpTb+/i75nLlvhLZeHuJFrR
5sN1r7UVPcFOCtM+UCm0y+Wv1xH+fvcnRDdxuIcmPENfWuSX/kjM5jHNWOYLTnxB
bHltVgYkF84qgziB9Aku3iVgFR9rKt6VUQehlE3RdWq+Z0jPmu0Vgg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 23:54:52 2026 by rpki-client