
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e302e302f31382d3138203d3e2030.roa
File: 3131392e33322e302e302f31382d3138203d3e2030.roa (raw, json)
Hash identifier: LgozNanp8j3ZyXl05vrNcyKAunLrOCNQLG+euFgrvOQ=
Subject key identifier: 0C:A0:FB:08:C3:6E:73:88:14:D9:37:B8:67:8A:7D:DB:C0:35:85:F9
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 28509B50F2E71DE3227A83D179B034A762DC6662
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e302e302f31382d3138203d3e2030.roa
Signing time: Tue 14 Apr 2026 03:22:34 +0000
ROA not before: Tue 14 Apr 2026 03:17:34 +0000
ROA not after: Tue 13 Apr 2027 03:22:34 +0000
asID: 0
IP address blocks: 119.32.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:50:9b:50:f2:e7:1d:e3:22:7a:83:d1:79:b0:34:a7:62:dc:66:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 14 03:17:34 2026 GMT
Not After : Apr 13 03:22:34 2027 GMT
Subject: CN=0CA0FB08C36E738814D937B8678A7DDBC03585F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:5b:dd:c1:c9:37:4b:fb:cc:93:52:6a:c0:
a4:66:d6:9d:ce:38:14:3f:42:d0:4c:ed:24:01:46:
63:34:51:47:55:00:99:aa:e7:61:74:77:73:ef:54:
02:cc:b7:e6:09:c5:34:32:57:6f:6e:b8:ac:78:51:
de:8b:3d:cf:16:c0:4f:6e:62:49:c6:f1:08:ef:d4:
a0:35:c5:6d:18:47:81:44:54:b8:dc:0a:66:45:fd:
f8:d1:3c:67:44:aa:68:30:17:26:6a:ce:4b:f5:af:
4a:6e:9e:10:f5:47:18:1b:96:c0:5a:14:cb:4e:32:
2a:2e:42:ef:f1:13:5e:90:af:ed:fb:0e:5a:8c:0a:
8e:43:24:20:0e:8a:fa:3d:d8:a0:09:2e:80:24:14:
56:d0:51:df:0d:95:15:cc:51:d0:d4:67:cb:28:33:
9f:4e:b5:77:34:98:0a:7b:9b:05:ca:21:eb:84:92:
ef:d5:83:ec:60:b7:80:4d:f4:ae:e5:b3:bd:3e:d1:
19:58:5d:39:ab:e2:e1:ed:be:14:f7:62:83:fb:c9:
8e:0b:d4:91:49:aa:7b:76:93:5a:0c:71:05:e3:46:
8a:91:a6:01:5b:6f:ef:b0:2f:0f:7e:d1:ae:cc:ad:
db:40:08:1d:c5:57:82:db:bd:3e:67:b7:04:b0:2a:
48:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A0:FB:08:C3:6E:73:88:14:D9:37:B8:67:8A:7D:DB:C0:35:85:F9
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e302e302f31382d3138203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.32.0.0/18
Signature Algorithm: sha256WithRSAEncryption
28:e1:5d:a2:b1:9a:c2:f0:f7:9a:a0:bd:3d:23:76:bd:06:26:
32:5b:0a:91:99:b2:0f:5d:93:49:98:61:70:47:cf:d6:18:b8:
03:26:14:3e:b2:ca:90:e8:2c:03:2c:d5:d0:0e:5c:0b:48:ec:
36:30:f9:30:14:e6:20:ae:c9:82:39:b0:03:08:66:29:a1:45:
87:2a:4b:f5:ed:ab:ca:02:cc:87:40:97:2f:19:dd:22:65:65:
54:08:57:7b:f2:0f:91:55:bb:83:94:d9:1d:34:87:3c:1d:54:
2c:48:e9:6c:ef:97:04:78:2b:8a:6c:73:bd:2d:ac:f7:90:27:
40:16:e8:c9:8c:f8:f5:12:fe:e2:3b:96:6f:eb:d7:b8:87:b0:
61:af:eb:b8:b7:24:8f:9a:9f:2f:ed:96:58:f7:3a:79:4e:64:
51:20:56:66:bf:ce:67:3f:c3:bf:44:a2:05:dc:d9:0b:ac:4b:
92:d0:e6:4a:26:26:b5:ca:16:49:db:68:74:14:05:6f:c3:ca:
e1:dd:f6:4c:38:4b:b7:2f:e0:32:6e:e0:cd:2e:b9:5a:ce:28:
08:44:f2:d4:6a:4a:4e:63:25:fd:c2:e6:52:ff:07:fc:fc:e1:
69:23:86:51:8c:28:43:aa:9d:3a:de:71:6d:a4:58:42:e3:69:
8a:39:8d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:45 2026 by rpki-client