
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138382e302f32322d3232203d3e203538383334.roa
File: 3230322e3136382e3138382e302f32322d3232203d3e203538383334.roa (raw, json)
Hash identifier: e2XJpCbJcJMIqNIKgqWIxhQB/VgjKD9j9MjE6AE3Pts=
Subject key identifier: 2C:C5:62:BC:F3:7B:31:D3:AE:E9:21:0D:75:78:B5:3C:2F:D4:91:49
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 2336E5191F709838E9A6035B6B1CF865E51A7D72
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138382e302f32322d3232203d3e203538383334.roa
Signing time: Thu 16 Apr 2026 01:45:02 +0000
ROA not before: Thu 16 Apr 2026 01:40:02 +0000
ROA not after: Thu 15 Apr 2027 01:45:02 +0000
asID: 58834
IP address blocks: 202.168.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:36:e5:19:1f:70:98:38:e9:a6:03:5b:6b:1c:f8:65:e5:1a:7d:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 16 01:40:02 2026 GMT
Not After : Apr 15 01:45:02 2027 GMT
Subject: CN=2CC562BCF37B31D3AEE9210D7578B53C2FD49149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:0e:f3:02:63:75:6d:50:c3:6c:cb:2a:cc:
08:5a:c5:f0:ab:bd:91:a5:29:11:b7:59:d7:10:0d:
9c:d2:b5:06:07:00:d7:38:2f:1e:40:09:31:b5:8d:
b7:54:05:2f:e4:4a:13:bd:03:7d:45:f3:26:7f:31:
af:0d:a3:4a:db:88:1c:db:f5:14:fa:05:8a:7f:fc:
f6:bf:74:e3:bd:ae:84:fd:fc:9c:13:52:c7:c4:ea:
b1:d2:17:b7:1f:83:2d:33:31:16:8c:6d:d8:54:af:
3a:37:ab:da:63:a1:50:1e:e1:c3:e3:ca:f3:0c:d1:
d7:cb:2e:84:06:9b:3a:e9:5b:2c:d4:ae:1d:71:99:
2e:19:e1:9b:5a:fa:5d:a9:3d:e2:1c:5c:68:dd:37:
fd:6f:7b:14:a1:3c:25:d8:92:c2:0d:95:8f:ad:ad:
e7:46:03:80:3e:5e:f6:b6:13:b1:73:f7:23:9f:2f:
8a:73:c4:70:bc:8c:58:0b:ff:06:4d:19:c7:bd:c4:
d0:99:b1:ac:5d:38:e7:ff:c2:79:71:c2:f3:97:b2:
9c:8a:44:4d:85:6c:ad:3a:76:59:4c:1a:4d:97:84:
c1:f2:26:40:9b:5c:63:05:40:b4:8f:d9:46:95:60:
bf:48:7d:a5:01:d6:5c:73:f0:98:72:8d:da:6e:a7:
38:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C5:62:BC:F3:7B:31:D3:AE:E9:21:0D:75:78:B5:3C:2F:D4:91:49
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138382e302f32322d3232203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.188.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:80:1b:2d:c6:e1:19:be:0e:1d:7d:b9:7e:01:74:6f:4c:cc:
fa:35:ca:00:3b:7d:ed:a8:dd:b3:fb:f8:11:c1:ed:c5:6b:53:
3a:11:ed:9f:25:37:46:fb:c2:65:b5:bb:6e:2b:1d:7c:08:b8:
ab:9e:15:f9:88:a0:33:60:70:1b:84:bd:eb:14:79:59:4a:d2:
5b:2a:2f:2f:2d:c1:12:e6:c5:41:df:0e:5e:c9:50:a1:51:fa:
b3:8e:d2:75:2d:30:b0:af:5b:ae:2a:51:bb:21:37:dc:9f:58:
dd:a6:8e:2a:8f:44:a2:ef:ea:49:bd:78:21:d3:16:08:75:b0:
80:b5:4e:38:1d:43:b5:d9:6e:31:55:87:fe:09:e7:71:e2:56:
fa:91:4c:d9:5a:e0:97:5d:9e:73:22:e2:49:8a:79:69:d1:87:
a2:b7:d6:22:73:ec:54:6e:0e:20:ad:92:4c:8c:01:f4:c6:e5:
30:87:9e:4f:dc:05:8b:f8:3a:b9:68:9a:1e:4d:4f:06:82:d5:
35:1a:fd:42:78:53:89:fa:b3:af:e5:27:7f:9f:82:0c:50:a4:
8a:94:70:53:7b:0f:7d:52:b1:2a:a6:5a:0c:7a:e3:07:74:4b:
3f:57:2f:24:32:55:aa:2e:35:1e:b8:6e:32:d3:67:4b:52:6b:
c1:f7:44:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:05:15 2026 by rpki-client