
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e31362e302f32312d3231203d3e2030.roa
File: 3131392e33322e31362e302f32312d3231203d3e2030.roa (raw, json)
Hash identifier: XQw8KHjrmsKPfYGSh/ukvQnmjVX6PK4l42yQBXpTqYg=
Subject key identifier: 17:1B:AB:4D:1F:45:8E:3A:D9:BC:BF:C8:A5:48:5E:77:90:3A:12:B1
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 5B3E90EF55D1E72529D7FEFF7F32F30C2EFC34B4
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e31362e302f32312d3231203d3e2030.roa
Signing time: Tue 14 Apr 2026 03:22:33 +0000
ROA not before: Tue 14 Apr 2026 03:17:33 +0000
ROA not after: Tue 13 Apr 2027 03:22:33 +0000
asID: 0
IP address blocks: 119.32.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:3e:90:ef:55:d1:e7:25:29:d7:fe:ff:7f:32:f3:0c:2e:fc:34:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 14 03:17:33 2026 GMT
Not After : Apr 13 03:22:33 2027 GMT
Subject: CN=171BAB4D1F458E3AD9BCBFC8A5485E77903A12B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:47:5f:52:5a:5b:cf:ac:ef:bc:35:99:44:b9:
e2:9a:72:64:42:1f:55:e0:0f:77:a2:3e:80:46:9a:
75:8a:e1:8a:bc:57:47:8d:1d:1c:99:c3:cd:ee:d5:
5c:51:97:c9:09:06:60:56:c2:84:f2:c7:c5:dc:fb:
74:7c:3d:35:2f:3a:b6:76:d3:e6:f7:ee:f6:56:30:
9b:a3:bc:55:45:5e:90:41:fe:e4:27:f5:9b:d2:35:
86:41:a1:a0:9a:0f:c9:af:fb:e1:4d:03:6a:2b:0d:
e4:00:8d:21:cf:76:21:d6:1a:71:46:3d:59:62:4c:
20:91:9c:ba:6b:a6:c9:ba:de:76:7e:0c:7c:2d:70:
eb:8e:0c:bd:81:97:2d:26:25:3b:71:1a:44:64:91:
02:c2:ea:30:02:98:51:f6:ee:29:ab:7e:93:a2:01:
59:12:c5:b6:49:95:cf:a8:f0:56:69:4d:89:58:94:
1c:e1:e2:b8:af:3e:c0:a9:2b:3c:2d:e0:ed:5a:fb:
ca:fa:c3:22:ee:cb:21:10:e0:c7:83:b4:0e:3a:2f:
3b:d1:ef:03:f7:f8:4d:26:69:77:bf:92:02:25:9c:
34:c3:c1:69:49:7c:7a:59:60:1e:c7:64:d7:5a:75:
f1:a2:9e:e4:32:08:43:77:9e:2a:4f:32:24:e4:6b:
f8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:AB:4D:1F:45:8E:3A:D9:BC:BF:C8:A5:48:5E:77:90:3A:12:B1
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e31362e302f32312d3231203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.32.16.0/21
Signature Algorithm: sha256WithRSAEncryption
56:77:f6:32:b2:fb:bb:3b:46:0e:20:f7:8d:d0:39:b1:89:50:
4e:65:d1:70:dd:66:9a:7b:8c:4d:dd:64:ad:88:62:b4:f9:6a:
ec:a1:c1:7d:79:c4:b8:22:db:5e:14:bd:0c:c9:19:46:87:4b:
d2:3a:2a:6b:4f:e2:59:7a:02:ea:b9:81:0f:54:d8:42:30:f9:
93:f9:6e:f8:2e:92:78:b6:d5:66:76:16:85:68:2d:55:66:a9:
87:a5:6e:8e:6b:82:17:10:60:f3:c6:31:53:74:26:84:6e:ef:
1a:f2:66:84:ed:74:d4:29:61:74:7b:31:81:b3:33:63:06:7b:
90:ca:08:3b:37:f4:83:ca:a6:15:87:89:dd:7e:e7:b2:f4:04:
1f:b2:42:7e:a3:43:8c:11:fa:04:81:bf:52:7f:55:cb:35:e9:
44:4b:81:9c:e2:03:6d:5a:28:c1:9e:67:07:4e:2d:fd:c8:9b:
76:e7:fc:d2:6e:40:9a:12:49:2a:d6:82:dc:fd:0e:9b:71:dd:
67:04:73:ee:6f:b3:e4:58:be:4b:d7:c7:b0:ae:27:87:0b:47:
f9:0d:db:4f:01:1d:da:a9:7b:98:e9:7a:66:ae:d4:65:fe:6d:
55:77:2c:ff:00:a0:51:95:32:09:c0:8c:1e:7b:88:88:da:c0:
86:8b:03:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:41 2026 by rpki-client