
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230332e3135322e36342e302f31392d3139203d3e203233373731.roa
File: 3230332e3135322e36342e302f31392d3139203d3e203233373731.roa (raw, json)
Hash identifier: Wu4sTDbldOMAEhICk304bLhf/fPKm8ovOZ0PrQMVTDw=
Subject key identifier: 7E:83:C8:89:25:0B:89:75:AA:4A:86:47:94:3C:5E:7E:E0:4F:F6:69
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 1A44BC1A8D47A2D2AAC74F97D235AAB2D15CF1EC
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230332e3135322e36342e302f31392d3139203d3e203233373731.roa
Signing time: Tue 14 Apr 2026 02:17:59 +0000
ROA not before: Tue 14 Apr 2026 02:12:59 +0000
ROA not after: Tue 13 Apr 2027 02:17:59 +0000
asID: 23771
IP address blocks: 203.152.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:16:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:44:bc:1a:8d:47:a2:d2:aa:c7:4f:97:d2:35:aa:b2:d1:5c:f1:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 14 02:12:59 2026 GMT
Not After : Apr 13 02:17:59 2027 GMT
Subject: CN=7E83C889250B8975AA4A8647943C5E7EE04FF669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ed:08:24:9d:c5:db:dd:03:ed:a0:04:9b:72:
85:6d:b2:27:60:ac:d1:17:56:07:4c:db:18:49:6d:
de:51:30:03:4e:ef:46:8f:66:f4:90:3a:46:78:a9:
ce:5c:a9:03:38:e1:d1:3b:0f:69:b7:52:63:4a:3d:
aa:59:2c:46:f8:7a:fd:5e:36:7d:29:da:b3:fe:d2:
86:a1:d4:b7:a7:c2:f7:55:de:97:dd:23:79:af:30:
eb:f5:b6:cc:52:de:e0:d2:3e:99:1d:48:f7:a9:73:
18:10:a2:46:c3:bf:73:24:83:de:57:a4:eb:55:f0:
cf:7f:1e:85:2e:b8:33:78:73:8f:c0:40:93:c4:09:
bf:fc:73:5c:3d:50:89:83:a8:5d:aa:2a:09:35:07:
16:9e:1b:94:13:c3:32:90:6e:9a:de:28:2c:91:c9:
b1:7d:d9:a4:5e:6c:31:11:93:7d:e6:36:8c:3f:8e:
af:d8:62:b5:1e:70:b3:bb:4f:c9:b3:f5:e6:04:e3:
c7:2a:e3:b3:05:68:03:3c:09:87:24:8b:f8:34:ec:
e3:95:65:6c:a0:b0:d5:53:1e:98:9d:17:d1:02:4b:
5c:ae:71:4f:0b:a1:c2:91:f2:71:b5:b7:da:c2:8c:
48:7e:e9:0e:d3:c0:4b:93:9c:18:df:17:2a:9f:51:
ba:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:83:C8:89:25:0B:89:75:AA:4A:86:47:94:3C:5E:7E:E0:4F:F6:69
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230332e3135322e36342e302f31392d3139203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.152.64.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:07:17:fe:36:f2:b3:eb:ae:9c:c5:99:71:d8:ad:6f:02:49:
9e:31:2c:ef:4c:3c:5f:cf:cf:e7:fe:1c:56:ef:8b:b3:7a:34:
b6:83:6a:c3:7b:a0:90:03:d7:66:7c:d7:17:33:a4:3b:35:4c:
eb:46:b8:f3:c9:3d:13:20:93:35:a9:7d:e1:dc:18:63:6a:00:
f2:84:a9:a5:1f:11:34:94:4b:3b:04:f1:05:62:8e:a5:8f:03:
f1:38:5d:f6:a6:61:53:76:9e:ab:a3:96:e8:b5:ea:90:67:9c:
0f:f4:8d:4b:53:ff:a9:54:b9:9b:52:e5:82:17:65:d6:af:a0:
23:a7:a1:6b:be:92:68:f1:3f:54:78:47:18:3f:ed:38:bb:c6:
cc:19:5c:a5:e9:a9:42:d1:d3:6f:9d:27:53:ee:23:83:53:43:
62:a4:8d:ca:31:56:cc:93:3d:3b:e9:90:53:98:bd:32:a7:ec:
d1:f9:2b:7a:62:58:49:48:35:37:03:12:a1:11:11:f1:33:42:
34:85:ec:7f:3d:23:92:fe:2f:bc:b3:ba:0e:8a:6c:5c:8d:8a:
19:47:18:89:ae:6e:21:fc:a6:1d:18:e5:5a:f4:1d:4c:d6:e0:
8b:1e:c5:c9:af:99:54:8e:f9:e3:e8:1d:31:cf:0b:34:e8:a7:
b5:5c:1d:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:41:25 2026 by rpki-client