
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e32382e302f32322d3232203d3e20313334373733.roa
File: 3131392e33322e32382e302f32322d3232203d3e20313334373733.roa (raw, json)
Hash identifier: PmGpq07lCRQS2bv6OVrYfbkvtWS9xSIaeHROLuiWJV8=
Subject key identifier: 92:15:85:06:04:E6:DD:9A:76:1C:4B:C1:3F:B2:DD:A5:22:1D:33:29
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 1D3D27212E60DA959FF43D45A56C843375F51088
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e32382e302f32322d3232203d3e20313334373733.roa
Signing time: Tue 14 Apr 2026 03:22:33 +0000
ROA not before: Tue 14 Apr 2026 03:17:33 +0000
ROA not after: Tue 13 Apr 2027 03:22:33 +0000
asID: 134773
IP address blocks: 119.32.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:3d:27:21:2e:60:da:95:9f:f4:3d:45:a5:6c:84:33:75:f5:10:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 14 03:17:33 2026 GMT
Not After : Apr 13 03:22:33 2027 GMT
Subject: CN=9215850604E6DD9A761C4BC13FB2DDA5221D3329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4d:9c:bd:11:3f:6c:ef:1f:45:82:ff:41:38:
f2:fd:a5:36:97:bf:ed:81:a7:63:8f:db:4c:84:a3:
6f:a3:94:8d:06:a5:25:ed:82:2e:fc:f2:c5:f9:d5:
97:8c:10:1d:f8:d0:2d:79:62:b7:7b:ba:0f:f7:71:
92:19:e6:6a:c2:ca:35:aa:58:ff:0c:88:74:22:78:
97:68:f1:16:28:61:08:ac:9e:39:65:16:87:3a:25:
35:27:35:91:6b:3a:6a:42:f8:20:d7:9a:69:f4:cb:
f5:75:26:42:99:1e:74:34:e1:73:be:63:0b:e7:52:
0f:43:0f:7d:44:46:e4:97:50:cc:08:6d:14:52:60:
35:34:a4:5f:41:57:88:ee:36:37:97:a0:e8:1a:33:
aa:65:c2:8b:36:92:30:88:4d:ea:35:f6:0d:74:c9:
57:0e:86:28:b5:54:64:7e:f8:e0:f2:0e:11:a0:d5:
ed:be:82:e7:80:1b:84:3d:8e:8b:4d:57:fe:ce:2c:
6b:bb:69:5f:8d:0a:a1:7e:64:e4:c1:3f:8b:ae:71:
42:cd:ba:9b:df:eb:33:59:52:82:d6:f6:b7:2a:24:
6e:f1:9f:24:ab:ca:78:c8:70:16:ca:4f:5c:50:c1:
a0:05:0d:90:1a:2b:cd:b8:85:d8:25:36:4d:2f:41:
de:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:15:85:06:04:E6:DD:9A:76:1C:4B:C1:3F:B2:DD:A5:22:1D:33:29
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e32382e302f32322d3232203d3e20313334373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.32.28.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:2b:2a:06:1d:2d:b6:59:77:8a:a3:83:1d:e0:df:7d:9a:ef:
6a:c9:58:09:46:68:90:98:3a:65:a1:b2:fd:0c:7a:c6:23:2c:
9c:79:78:62:8c:d3:92:27:58:4c:22:ce:1b:bb:ea:e3:fa:bd:
41:cc:dc:00:d6:b8:f8:62:27:05:73:1b:99:7a:d3:33:d8:c6:
61:64:d2:54:27:14:0e:3d:7e:7f:a6:66:26:b5:8a:ef:92:9d:
95:30:2d:1c:d9:71:2b:b0:8d:42:ca:9a:fc:73:3b:af:48:e1:
1b:c4:5f:bb:fc:f2:2a:99:39:85:e8:6f:a7:6a:d3:aa:4b:1f:
e0:4b:12:8f:57:1b:d6:af:59:8f:5e:8d:09:3b:d7:28:66:f2:
2c:c9:de:6f:7e:1e:08:34:57:40:5d:2e:61:14:f2:94:a9:66:
cd:c8:f1:45:5e:4c:99:fd:93:4c:48:2c:fa:b3:48:88:11:3e:
63:bd:19:73:f0:7e:4c:5c:27:ce:ea:96:c8:26:71:17:a2:1b:
24:77:32:5a:bd:a5:7f:2d:47:d6:2b:15:c6:92:29:b6:05:9a:
a7:db:3a:00:e7:35:24:e4:01:d8:85:17:5f:40:ce:32:ce:1e:
86:7c:4c:4f:1a:12:a3:2d:46:bc:a0:73:88:66:85:72:07:4c:
5d:52:6d:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:00:47 2026 by rpki-client