
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3134342e302f32302d3230203d3e203538383334.roa
File: 3131392e322e3134342e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: s5ph3773Hey1p4RT8jlrf2JQWaiQwNUdi1L5htxJIsM=
Subject key identifier: 41:AF:1B:75:05:00:85:5A:F7:BD:B5:38:63:40:31:FE:CF:D4:C7:AD
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 3856375FFEF327167E102977B1A2993255BD59AA
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3134342e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:25:19 +0000
ROA not before: Mon 13 Apr 2026 03:20:19 +0000
ROA not after: Mon 12 Apr 2027 03:25:19 +0000
asID: 58834
IP address blocks: 119.2.144.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:56:37:5f:fe:f3:27:16:7e:10:29:77:b1:a2:99:32:55:bd:59:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:20:19 2026 GMT
Not After : Apr 12 03:25:19 2027 GMT
Subject: CN=41AF1B750500855AF7BDB538634031FECFD4C7AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f0:62:56:13:a1:84:06:a1:f0:0d:d6:dd:dc:
f8:18:8c:d0:ac:fe:9d:1d:5f:d2:cd:1e:f2:f5:42:
5a:cb:7c:eb:fb:87:46:a7:14:a4:53:fd:73:b8:f4:
fb:e5:2d:b9:be:42:38:d9:ff:fd:5e:60:82:6d:5a:
2e:05:e1:3d:20:80:db:6d:ff:3d:fa:fa:4c:eb:3d:
b4:a5:c3:da:92:c8:1a:e3:ed:7d:a5:50:a2:69:d6:
a3:e1:4e:cf:18:b2:33:72:b6:db:c8:54:5f:ad:6e:
9d:28:15:05:5a:f1:f7:50:26:01:79:c7:4a:ab:3a:
69:4c:5d:ef:9d:1b:bc:55:3b:b8:b1:3a:fe:6b:e0:
77:4c:37:13:c8:15:76:d5:d9:b7:e1:6b:e3:1a:fb:
77:d8:ea:0e:3d:08:03:62:0e:e5:fc:51:d8:e6:94:
9b:4a:80:0a:5a:31:f1:7f:4e:f1:42:7c:62:e7:52:
d6:11:74:11:94:51:a6:d1:20:c6:d2:07:fd:40:7d:
ea:03:de:2a:39:1d:44:18:be:c5:bf:b4:e0:43:f7:
bc:51:c8:4e:6b:59:86:82:e3:1c:5b:a4:4d:4e:37:
34:55:76:07:6a:8f:c7:47:b6:b1:0a:12:5e:ec:ad:
4b:95:ab:27:4c:4b:12:d4:94:c0:76:60:e0:c8:a1:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:1B:75:05:00:85:5A:F7:BD:B5:38:63:40:31:FE:CF:D4:C7:AD
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3131392e322e3134342e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.144.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:63:2f:6b:75:5d:46:a3:c9:65:d6:8a:56:e3:43:6f:6b:64:
e5:7e:ac:71:a4:bd:dc:c5:4a:5c:d7:66:99:d2:b0:6e:77:76:
9e:81:62:9f:f5:be:a6:53:4b:26:45:06:8a:f8:1a:62:ee:a8:
6c:06:cd:8c:d2:e3:fb:62:67:f8:04:e5:b8:9c:db:8f:34:49:
e4:ae:f0:75:3b:dc:49:bc:86:75:c7:82:ac:d6:c1:d3:98:ca:
03:1f:71:91:9d:64:55:99:91:b2:ae:1f:a2:58:7a:91:85:39:
15:9d:5c:ea:97:2f:4e:eb:0f:ad:22:c2:9e:50:ef:66:b7:93:
87:a7:75:d5:0a:18:0a:f2:79:5b:1d:7e:99:bd:80:80:90:c9:
94:82:9c:ed:89:ad:3d:67:2c:b0:a5:1d:0c:c0:f0:ff:90:c8:
4e:5b:dd:49:85:44:7c:b2:72:86:f4:88:0a:26:20:ca:cf:c3:
74:50:a5:b1:ef:f2:7b:4b:c2:70:fb:4c:06:23:eb:bc:f6:f9:
4d:87:06:37:75:df:1c:3c:fa:44:c5:e8:d7:32:a2:c1:85:42:
3f:6e:00:90:26:8b:b1:6e:26:3c:1f:84:1c:42:16:d9:38:74:
5a:d0:0d:bd:93:72:cd:60:23:59:a1:a8:90:d0:c8:d0:da:b4:
72:dc:a9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:19 2026 by rpki-client