
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e31362e302f32312d3231203d3e2030.roa
File: 3131362e3139392e31362e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier: SY+QeJyZKI56R/FLonHcjg6yzyV5T1u8dn/kdVCfPyM=
Subject key identifier: 39:33:D9:66:58:02:AA:9E:4C:6B:63:6A:97:62:59:F9:79:75:07:0C
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 22F33765C7EA32F0ADB67B2749AAE9F82B79C7B0
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e31362e302f32312d3231203d3e2030.roa
Signing time: Tue 14 Apr 2026 03:19:28 +0000
ROA not before: Tue 14 Apr 2026 03:14:28 +0000
ROA not after: Tue 13 Apr 2027 03:19:28 +0000
asID: 0
IP address blocks: 116.199.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:f3:37:65:c7:ea:32:f0:ad:b6:7b:27:49:aa:e9:f8:2b:79:c7:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 14 03:14:28 2026 GMT
Not After : Apr 13 03:19:28 2027 GMT
Subject: CN=3933D9665802AA9E4C6B636A976259F97975070C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:de:7c:3f:62:9a:d3:92:e8:f6:92:b7:bb:
41:11:27:23:35:1e:de:4a:5c:41:dd:76:57:e0:2f:
03:59:d9:48:b9:50:6d:d8:6d:9d:6c:ec:ec:cf:80:
02:b4:7a:a0:82:d0:76:c6:44:55:c1:83:85:b0:08:
58:2c:ba:32:a1:46:97:31:a3:5f:38:3d:ae:2f:05:
eb:49:e6:93:c8:cc:a5:0b:8d:07:d1:a7:05:9e:c6:
2f:5b:ae:a7:08:73:b6:44:cf:26:8e:a1:17:3d:9b:
cc:aa:11:c9:3d:ef:95:5c:b3:f1:b6:00:51:6f:3d:
73:20:77:87:da:49:b0:ef:0d:da:f3:f8:8f:d5:60:
0a:09:30:25:f9:01:0f:e4:4f:1f:3e:28:df:81:75:
a0:0f:24:a8:87:56:49:44:d0:0f:7d:83:4e:2d:aa:
8f:81:20:df:7e:3a:bb:be:ac:49:8a:56:3c:ff:ba:
1e:3a:65:a0:9b:ce:27:16:8d:fc:e6:33:2e:cc:62:
78:3e:65:c6:34:49:2c:d1:a1:16:12:27:cb:d1:ee:
6b:c0:a5:f1:65:ce:6b:aa:97:ce:0c:c0:0f:ba:39:
b4:44:d1:1e:49:38:47:94:d3:75:f9:cd:78:07:f2:
e1:aa:4c:5d:8c:2d:48:ca:ce:94:3a:4c:68:7f:cd:
38:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:33:D9:66:58:02:AA:9E:4C:6B:63:6A:97:62:59:F9:79:75:07:0C
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e31362e302f32312d3231203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.16.0/21
Signature Algorithm: sha256WithRSAEncryption
af:0a:15:18:dc:30:04:10:66:f1:a8:0a:0e:72:00:a6:67:54:
dd:a2:c3:66:f0:33:15:23:bf:81:6b:3a:6e:21:a4:30:8e:5f:
d6:34:74:54:33:81:f5:f8:ad:a7:3b:66:25:28:4d:4d:47:e8:
ce:e0:f7:1d:05:9d:bb:52:18:db:ba:ad:6d:88:c8:14:00:ca:
4b:67:23:5a:6c:a6:59:6a:17:77:15:37:aa:a7:75:bb:d5:c7:
3b:0c:e3:6b:00:03:a1:c6:79:c9:d2:4d:1a:16:bc:39:14:82:
d4:fb:d6:4b:c0:94:75:b8:2a:48:2f:69:a2:70:14:6e:b3:b2:
9f:a3:4b:b3:28:6a:9a:22:cc:a4:1d:cf:bd:a4:23:78:24:fa:
e6:8c:52:7c:5e:85:0f:5e:c6:af:f7:0f:4a:eb:8f:46:87:b2:
a6:12:1d:2a:b3:be:a2:aa:9a:da:45:cc:a4:23:3b:b0:c9:88:
d8:02:75:89:fd:70:cb:28:e3:95:01:e0:ed:1c:e9:40:8d:4b:
e4:ec:57:f3:a8:83:ba:f7:72:9f:a9:2a:64:24:4e:7b:c6:6a:
a3:1d:23:5a:74:cc:74:cf:e1:76:b9:9b:ff:70:36:f7:9a:cc:
35:7d:26:f3:93:97:71:24:71:f6:6c:d4:53:89:62:7f:d7:a9:
3f:81:27:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:28 2026 by rpki-client