
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e32342e302f32332d3233203d3e20313334373733.roa
File: 3131362e3139392e32342e302f32332d3233203d3e20313334373733.roa (raw, json)
Hash identifier: m337Wh5Y95dKuCMiggU4WlsaGspwQsll7IzsSIehXt0=
Subject key identifier: 5B:64:57:C8:7D:43:4E:04:34:48:16:C4:1F:3D:2E:1E:B1:93:6D:CA
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 75B0F0F858AE18DC1ED676F8AD08AA63726B0CC2
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e32342e302f32332d3233203d3e20313334373733.roa
Signing time: Tue 14 Apr 2026 03:19:28 +0000
ROA not before: Tue 14 Apr 2026 03:14:28 +0000
ROA not after: Tue 13 Apr 2027 03:19:28 +0000
asID: 134773
IP address blocks: 116.199.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 23:23:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:b0:f0:f8:58:ae:18:dc:1e:d6:76:f8:ad:08:aa:63:72:6b:0c:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 14 03:14:28 2026 GMT
Not After : Apr 13 03:19:28 2027 GMT
Subject: CN=5B6457C87D434E04344816C41F3D2E1EB1936DCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fa:e9:58:27:de:3d:56:92:69:e0:98:ea:6a:
ff:cb:21:43:5b:05:be:91:44:ac:fc:fa:bf:82:1a:
19:80:e1:bb:34:51:fd:cc:5c:a0:a4:d1:ca:67:64:
94:f5:a5:7b:90:18:23:12:eb:c5:32:53:24:f3:db:
3e:3b:09:fe:66:c5:0b:3f:bc:dc:a3:12:7d:3d:a5:
3b:62:1d:0f:e1:57:6e:51:a2:5d:1d:32:a5:11:4f:
b6:5f:03:96:7f:bd:2e:f7:42:c0:29:01:fe:21:44:
9d:e7:49:1c:e7:65:a3:c7:7a:03:19:b3:0b:66:53:
f2:77:f2:60:88:27:fc:f0:1e:9e:80:f4:8a:7c:51:
d0:8f:4f:d2:37:98:49:ef:09:96:37:f5:8b:d3:aa:
e9:b3:b6:28:61:31:9f:6e:6b:89:67:aa:90:af:c9:
9d:3a:9e:bd:9f:24:a4:81:aa:23:fe:b3:9a:15:0c:
af:4e:f9:3d:4d:e3:f3:ba:c2:56:f3:67:98:87:26:
11:c8:e6:06:0e:ed:48:9c:c9:a4:fc:c4:74:38:6b:
38:d5:33:c4:49:e9:d4:94:30:18:c7:0c:6c:c4:f3:
48:d3:ec:09:03:d2:30:3c:82:f2:c3:74:ff:6c:b6:
8f:6b:7e:ea:4b:c8:ba:c3:83:07:70:ed:56:9c:54:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:64:57:C8:7D:43:4E:04:34:48:16:C4:1F:3D:2E:1E:B1:93:6D:CA
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131362e3139392e32342e302f32332d3233203d3e20313334373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.199.24.0/23
Signature Algorithm: sha256WithRSAEncryption
d2:b0:da:9d:43:ca:d8:ef:8e:ea:70:ee:c5:91:57:c1:fa:59:
44:39:43:f2:9b:32:d0:cf:48:5c:4e:bd:61:ab:54:6f:0e:11:
1e:2e:09:d8:a0:88:87:03:6d:69:70:98:86:76:50:18:26:94:
3c:8c:9d:63:26:8a:39:1f:43:a6:84:ec:ed:f2:0a:f9:10:ec:
45:67:aa:f2:1f:3b:af:44:4a:0c:be:3f:5d:8d:45:68:da:df:
98:85:7d:d4:b2:ca:0b:38:90:a1:4b:b1:b2:9c:a8:eb:a1:73:
63:c0:12:b4:89:e8:9c:1c:93:cb:6a:d6:93:f8:e9:c8:72:c3:
77:52:6d:77:00:4c:7d:91:e8:90:3f:d2:89:58:37:31:3b:3c:
e5:3c:cb:ed:38:3e:99:46:6d:de:50:0f:06:8a:b8:52:89:64:
da:32:29:10:89:0b:50:7c:f7:b4:3c:fe:89:bb:e3:98:65:94:
f5:c6:60:b0:e2:e0:02:51:6b:5d:9c:d3:e4:b6:84:ce:f7:84:
9d:d9:b8:f4:b6:df:98:d9:8a:88:fe:aa:48:25:03:b4:a4:9a:
79:95:1f:61:b3:6e:32:32:6a:2e:ca:89:4d:8b:e1:82:89:e2:
20:87:47:79:43:32:0e:e3:3f:42:87:70:e7:60:1c:72:4e:36:
8d:5d:87:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:28:53 2026 by rpki-client