
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37382e36342e302f31382d3234203d3e203137343239.roa
File: 3138302e37382e36342e302f31382d3234203d3e203137343239.roa (raw, json)
Hash identifier: /cNVyVbJSdRCnqNiexmLChpxP6Iee+eb5xD/1Oos7ag=
Subject key identifier: FC:21:C0:D5:63:9C:12:A7:FD:87:D4:A6:66:06:37:07:6B:B9:4D:DB
Certificate issuer: /CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Certificate serial: 5B35611CF5ADEF2FA5037E3109D1BFA4BD506EBF
Authority key identifier: CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37382e36342e302f31382d3234203d3e203137343239.roa
Signing time: Mon 13 Apr 2026 03:31:36 +0000
ROA not before: Mon 13 Apr 2026 03:26:36 +0000
ROA not after: Mon 12 Apr 2027 03:31:36 +0000
asID: 17429
IP address blocks: 180.78.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:35:61:1c:f5:ad:ef:2f:a5:03:7e:31:09:d1:bf:a4:bd:50:6e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF214CDEDC584B3B010FC3A6D0D3DB897219B594
Validity
Not Before: Apr 13 03:26:36 2026 GMT
Not After : Apr 12 03:31:36 2027 GMT
Subject: CN=FC21C0D5639C12A7FD87D4A6660637076BB94DDB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:57:e9:d5:f2:d0:22:e5:97:2a:d2:18:cb:de:
3e:d7:a0:ae:5c:85:6f:11:3c:94:7d:f2:c9:fe:ed:
8e:4c:6f:91:72:f4:f8:cb:43:3e:06:bb:52:e4:1a:
5d:d7:2e:e0:70:e7:b3:3a:65:b3:92:22:5a:85:15:
b7:e1:f4:7a:48:b8:da:de:1b:7a:00:5a:be:07:6e:
5d:a4:9b:43:72:94:de:56:eb:f4:c5:78:83:64:b4:
31:49:73:51:89:c5:e5:04:8a:59:16:8b:77:92:f0:
be:26:7e:c0:1a:51:d3:de:c5:c3:de:ab:43:f4:59:
7a:14:9d:87:ca:36:e5:ee:a2:c2:51:fb:af:9c:0f:
5d:97:97:5b:c1:e2:ed:0c:84:92:d5:cd:06:59:df:
ee:04:09:0e:26:b1:4f:be:3e:76:12:79:fd:1c:c0:
d5:79:cb:74:ef:fb:5c:0f:92:42:d1:0e:d3:3a:8a:
66:f6:06:5f:b0:21:07:33:c8:77:6e:4d:f7:09:88:
ff:9c:82:25:58:dd:06:fb:bb:6c:37:8a:28:89:cb:
55:64:5f:29:90:9b:c5:a6:c9:69:4c:81:7f:07:fe:
24:47:e6:0c:0a:c0:b4:3e:d8:56:17:96:d9:b4:1c:
0a:72:33:36:3f:d0:d6:30:c8:85:2e:e1:bc:59:ac:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:C0:D5:63:9C:12:A7:FD:87:D4:A6:66:06:37:07:6B:B9:4D:DB
X509v3 Authority Key Identifier:
keyid:CF:21:4C:DE:DC:58:4B:3B:01:0F:C3:A6:D0:D3:DB:89:72:19:B5:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CF214CDEDC584B3B010FC3A6D0D3DB897219B594.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142852097/0/3138302e37382e36342e302f31382d3234203d3e203137343239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
180.78.64.0/18
Signature Algorithm: sha256WithRSAEncryption
3b:fb:4a:34:3d:19:08:7d:d3:f6:02:ec:04:8e:92:0f:2c:16:
96:67:ba:64:54:db:1d:8b:e4:33:ef:06:c3:e2:ef:d5:d0:23:
b8:8d:c0:d5:be:82:6a:97:b5:46:b9:74:f3:50:b5:e3:b6:f8:
eb:eb:63:86:dd:68:20:7b:ff:7d:e6:90:0a:d6:e7:4a:aa:61:
48:d3:46:21:c8:80:13:d1:6c:c3:a1:ae:3d:9c:83:8a:6e:16:
cd:5f:a3:2f:fd:84:ec:2c:70:d2:50:40:10:1c:cc:e6:ee:27:
fe:9f:2e:b1:d0:af:28:27:ed:33:82:89:1a:d5:7e:9d:57:de:
85:50:71:8a:3c:ae:42:8a:b7:76:56:6a:54:b8:43:7e:6b:83:
ac:79:8a:99:7f:13:32:68:84:af:6f:aa:ea:43:4d:ed:ed:6b:
66:bd:c6:40:ab:6d:6b:88:d1:1e:04:6e:39:c9:8c:64:dc:86:
01:9b:62:55:aa:4a:ed:dc:10:ff:26:57:dc:4a:ee:2d:f0:53:
5d:b9:25:f0:c9:a8:b9:3f:cd:e9:62:f6:53:80:88:1f:22:5d:
6b:92:43:c9:bb:a6:ef:15:04:49:bd:11:de:71:a4:ac:47:0a:
b7:05:01:36:c5:0c:7b:c1:ab:68:45:22:b4:7c:2e:f8:3a:92:
d0:ac:08:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:15 2026 by rpki-client