
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e302e302f31382d3138203d3e203233373731.roa
File: 3132342e34372e302e302f31382d3138203d3e203233373731.roa (raw, json)
Hash identifier: cEFa0DCQPYgCOcXyCHupYXtjBewPyZjexOVg7SvoozA=
Subject key identifier: 56:12:1C:BC:7F:26:21:86:EA:20:81:56:38:F9:20:37:B3:BE:EF:89
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 26511531C8CDEF606EF01A29463DD83C1AF10835
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e302e302f31382d3138203d3e203233373731.roa
Signing time: Tue 14 Apr 2026 02:17:59 +0000
ROA not before: Tue 14 Apr 2026 02:12:59 +0000
ROA not after: Tue 13 Apr 2027 02:17:59 +0000
asID: 23771
IP address blocks: 124.47.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:51:15:31:c8:cd:ef:60:6e:f0:1a:29:46:3d:d8:3c:1a:f1:08:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 14 02:12:59 2026 GMT
Not After : Apr 13 02:17:59 2027 GMT
Subject: CN=56121CBC7F262186EA20815638F92037B3BEEF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b8:52:e1:f2:be:d5:96:9d:e6:11:f4:7d:ad:
65:f4:27:d4:7d:67:71:30:91:b0:12:04:0c:ea:9e:
7f:e2:ab:20:0c:8c:ab:55:10:fd:ff:1d:c3:64:93:
10:af:b3:a0:35:c3:a7:8e:b0:b2:d9:9b:0c:7e:1d:
88:84:d7:36:42:e5:00:05:92:ce:5f:ad:c1:68:2e:
cb:f8:66:c5:d2:27:8b:6e:68:d7:3b:96:d9:69:28:
0f:7e:66:36:1c:c6:e3:75:58:4b:2b:ab:cf:b6:17:
ac:09:16:ef:a4:0d:3b:47:a7:fd:c9:b7:cb:b1:f4:
ed:05:1b:88:99:d4:bb:e2:42:3e:4b:ad:7a:50:87:
d4:ee:6a:31:ce:c2:44:83:e0:01:ed:16:89:ab:71:
0c:05:59:a0:6c:f2:b8:be:a7:b5:cf:0e:23:18:31:
c0:80:a1:36:d4:5f:6e:c6:24:bd:00:73:73:22:73:
e0:39:62:36:cc:c3:58:61:a0:17:40:36:a1:27:44:
a2:84:81:6d:9a:b6:2d:13:62:ce:09:99:a3:01:79:
31:62:34:01:50:46:b2:3f:9e:61:62:48:18:1f:c2:
65:ab:5b:7a:56:60:91:1e:24:19:c9:97:0e:d8:4c:
6f:ee:49:1c:12:df:b5:e0:48:88:40:a2:bb:d8:05:
ce:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:12:1C:BC:7F:26:21:86:EA:20:81:56:38:F9:20:37:B3:BE:EF:89
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e302e302f31382d3138203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.47.0.0/18
Signature Algorithm: sha256WithRSAEncryption
47:38:60:65:bd:82:57:d6:9e:3a:51:96:7e:4c:4b:fd:40:bf:
09:3d:de:bf:cc:42:85:33:9b:d4:d4:5f:73:5d:3a:4c:c7:dc:
e4:98:98:59:a5:b3:16:d6:f4:31:c2:83:c5:68:b5:d6:85:c9:
50:7a:b8:35:20:c5:42:ab:80:06:2a:dc:d2:53:23:98:cd:34:
3a:87:19:81:3f:af:df:15:f9:38:dc:96:c9:84:d2:5d:2d:a7:
1d:08:69:24:63:c4:b2:10:05:88:21:00:8c:f1:74:e6:e8:7b:
a2:04:1b:0b:77:d0:90:b8:0b:88:81:e7:f7:31:22:15:81:e2:
6e:af:f1:97:0f:09:ca:ee:a2:16:64:72:8e:a5:d9:88:55:95:
2b:3a:3c:60:a1:24:c3:48:5d:9b:ae:f2:03:2b:2a:d5:f0:ab:
be:d1:70:15:0e:ec:8a:50:0a:b3:de:d8:04:c0:b9:16:e9:fc:
9d:4b:c4:6b:c1:6b:2a:cb:82:06:6a:6f:89:f6:f8:a8:34:82:
0a:4d:86:60:19:2e:2f:22:e2:6c:1a:cd:be:36:b0:01:33:bd:
5d:0a:fd:f5:d0:81:5f:da:c4:3f:42:a9:b5:fb:13:99:de:29:
1e:ab:0c:f9:e4:de:d8:85:a0:23:f1:ee:90:c7:b1:db:d1:5f:
d8:bd:cd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:55:04 2026 by rpki-client