
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138302e302f32322d3232203d3e203538383334.roa
File: 3230322e3136382e3138302e302f32322d3232203d3e203538383334.roa (raw, json)
Hash identifier: CMg9TEr3uQikB6ocl7/izwFCrshfAsMuoP2IZ5HHlS4=
Subject key identifier: B5:9B:91:08:12:F3:76:74:89:9C:A2:56:CC:E9:AF:54:A8:BD:7B:95
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 01E880EB3EDF8F66639987CB7F951F3419F85840
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138302e302f32322d3232203d3e203538383334.roa
Signing time: Thu 16 Apr 2026 01:44:28 +0000
ROA not before: Thu 16 Apr 2026 01:39:28 +0000
ROA not after: Thu 15 Apr 2027 01:44:28 +0000
asID: 58834
IP address blocks: 202.168.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:e8:80:eb:3e:df:8f:66:63:99:87:cb:7f:95:1f:34:19:f8:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 16 01:39:28 2026 GMT
Not After : Apr 15 01:44:28 2027 GMT
Subject: CN=B59B910812F37674899CA256CCE9AF54A8BD7B95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:39:49:a3:7a:20:f9:09:d5:63:4e:30:0d:ef:
2d:7e:39:02:9c:37:a9:f8:88:f6:84:c8:0f:1b:92:
d2:2a:96:3f:05:1d:f0:ae:4c:7d:67:de:15:2c:6a:
71:f0:25:ab:6b:c5:ec:a1:e3:d3:48:6e:64:34:0b:
f4:7a:80:ed:3b:f2:a9:1e:3b:5c:30:f9:d1:c5:a2:
dc:50:2c:0c:fd:27:1d:fd:6f:08:c0:25:cf:28:3a:
ef:f9:36:00:05:34:ad:2d:69:f1:e1:d2:40:61:aa:
8a:50:65:87:d8:78:7b:c3:57:cf:95:02:71:e6:c0:
9f:56:1f:8e:19:73:51:54:4c:c9:b1:60:dd:14:44:
57:99:9e:19:f6:ec:29:d7:a4:c7:fe:ca:66:09:28:
2a:dc:0f:a3:04:1e:73:7d:97:99:97:cf:f4:e4:86:
d6:99:c8:e5:88:cf:66:de:43:72:df:83:db:94:7b:
9e:43:4e:da:3c:6b:55:85:d8:bb:da:12:c9:d2:b7:
8c:b7:e8:36:69:b2:ae:11:8f:7a:bb:c9:b9:3f:b2:
32:f5:d4:3e:16:1d:b7:66:83:25:3c:ee:b6:03:30:
3f:28:29:b1:2a:0d:e4:61:22:3a:fb:5a:b8:cf:d8:
42:6f:db:f6:a8:f6:81:b0:69:7e:f4:44:3b:d9:c9:
c1:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:91:08:12:F3:76:74:89:9C:A2:56:CC:E9:AF:54:A8:BD:7B:95
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138302e302f32322d3232203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.180.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:6d:b2:c8:b9:31:93:e1:70:e4:f3:f7:72:90:d2:21:a1:ad:
a3:4b:22:bd:88:2f:0c:f7:a4:e3:2d:b8:b4:dd:34:a8:dd:7e:
2c:ac:ae:96:c0:10:08:db:07:0d:99:20:29:c0:44:52:d4:48:
27:9c:24:96:e9:d0:ef:7d:5a:dd:af:a6:43:63:91:db:e5:95:
ea:94:95:f9:b8:7b:60:2e:86:61:7c:fd:a0:5e:ff:06:ed:6a:
f5:84:a5:71:b9:8a:98:80:3b:ab:7a:a7:a1:7a:de:2b:90:ec:
59:e9:45:4c:41:61:f8:0e:d1:9d:46:dc:9b:09:87:15:af:ac:
ff:33:f3:35:94:70:c1:25:62:2f:38:f8:42:b6:05:13:48:fa:
19:e5:92:e7:5a:4a:e9:ab:c0:77:87:b2:26:f5:8d:f8:50:af:
72:85:e6:16:74:c5:4c:9e:da:e6:af:6c:f5:78:16:cd:0e:a3:
a0:3d:3d:bc:8f:a4:20:9f:5c:2c:eb:73:a8:92:37:55:92:0d:
9e:46:d1:1f:a8:3c:68:8e:eb:e2:50:27:f9:77:a4:1c:80:77:
be:55:4a:a7:4f:cb:74:c7:98:8e:38:91:25:a5:45:94:d2:eb:
69:2d:5e:db:e5:29:a7:6a:a0:f0:d8:b5:6b:94:49:98:f6:1d:
7b:09:dd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:17 2026 by rpki-client