
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e33322e302f31392d3139203d3e2030.roa
File: 3131392e33322e33322e302f31392d3139203d3e2030.roa (raw, json)
Hash identifier: KAv7JFmc2eAGqlJxLoglC7Fii2wBDkBK3jZ/Qb5tvM4=
Subject key identifier: 40:A5:60:E0:18:A9:5F:C6:9C:C1:DF:48:CF:96:E2:AC:4B:C2:AC:7E
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 7B1E424404678487F297D437756F0AF543649CF2
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e33322e302f31392d3139203d3e2030.roa
Signing time: Tue 14 Apr 2026 03:22:34 +0000
ROA not before: Tue 14 Apr 2026 03:17:34 +0000
ROA not after: Tue 13 Apr 2027 03:22:34 +0000
asID: 0
IP address blocks: 119.32.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1e:42:44:04:67:84:87:f2:97:d4:37:75:6f:0a:f5:43:64:9c:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 14 03:17:34 2026 GMT
Not After : Apr 13 03:22:34 2027 GMT
Subject: CN=40A560E018A95FC69CC1DF48CF96E2AC4BC2AC7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d3:d9:7e:fa:73:21:4c:49:4b:bb:e0:54:aa:
53:10:a6:3a:df:0a:39:e7:03:b1:a0:42:db:eb:46:
e0:64:7b:e1:14:31:17:e0:50:75:af:94:28:e0:fc:
2f:dd:1a:cd:e6:74:b7:4e:88:1a:ca:e0:75:ad:06:
a0:2d:84:82:57:97:0a:ff:a2:b6:58:ad:eb:a9:ed:
c0:8c:ba:39:ec:ef:9e:c1:fe:2d:8d:43:ad:5c:6a:
1a:06:a4:35:39:79:ac:30:ee:1c:f8:89:5e:6d:32:
8e:c2:1f:eb:4c:51:1c:87:b4:99:b8:a8:4b:ab:ef:
d2:1d:36:dd:5e:d8:47:df:ae:14:b2:b8:42:03:d2:
fe:a2:5f:5f:e3:6d:dd:a2:87:2d:98:59:62:83:1e:
c2:0b:ed:14:19:9a:b7:f4:59:8a:59:81:b2:77:d6:
c0:a3:e9:84:d4:d8:2c:2e:d7:ac:13:34:6f:51:39:
5f:29:b4:08:8b:1a:16:76:e9:02:7f:8c:87:cf:14:
bc:c9:de:d1:7e:f2:11:90:dc:4d:69:c1:47:67:63:
6f:14:4f:02:fa:23:45:a0:b4:8e:5b:25:3e:a0:e4:
56:3b:82:19:fd:2c:ce:81:8b:20:97:12:ba:5b:79:
36:95:a3:1e:3c:d8:32:e5:b7:fc:b2:13:46:43:5a:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:60:E0:18:A9:5F:C6:9C:C1:DF:48:CF:96:E2:AC:4B:C2:AC:7E
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e33322e33322e302f31392d3139203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.32.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1c:b9:b0:bf:c7:8e:cc:83:44:ed:1f:fe:bc:f9:7a:ef:a3:5d:
81:94:a4:70:33:9f:e5:9d:0a:dc:4c:30:17:72:71:ee:95:05:
3c:a9:c5:b9:b7:22:66:0e:c4:ef:c6:bb:61:a8:36:bc:67:cb:
8a:c9:16:d2:52:e7:3c:06:26:4a:88:4c:fc:8d:c6:e7:eb:c2:
74:5f:4a:e2:c9:9e:44:9c:2e:41:c1:5e:5a:a7:d0:8e:99:42:
b5:39:e4:ac:4a:aa:d1:14:ae:33:75:8e:bf:ae:94:67:16:f9:
30:cd:d8:a9:06:00:ef:f2:c4:64:38:a8:35:3c:97:af:67:9e:
ec:7d:7f:8c:33:f6:5f:69:6c:54:2c:cb:84:d4:53:2e:30:52:
f1:3d:23:db:5f:28:f7:9e:35:00:13:08:27:e8:b6:01:e7:a2:
5e:be:1e:51:c6:88:00:a5:64:f4:52:88:14:19:cc:09:19:94:
7c:78:e3:a6:5e:65:c0:45:3c:2f:b9:14:3f:0b:2f:ea:c6:ab:
c4:07:ee:61:cb:95:12:8c:91:ea:33:e6:dd:5e:c6:93:b6:f0:
4c:71:ca:d9:2f:29:69:60:1c:9f:28:1f:da:75:d5:a1:d4:25:
cf:08:4c:5d:82:af:8d:85:a1:c4:55:38:01:23:ae:f1:0e:54:
a5:af:f4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:39 2026 by rpki-client