
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31392d3139203d3e203538383334.roa
File: 3132342e3234302e302e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier: ADSwHNSbXS8pC/lk7fi6gCrIoe7AoXRxvOdx+o5NV2U=
Subject key identifier: 8B:3B:D5:EC:AA:7F:4D:A9:03:04:F0:3B:1C:AB:7E:7E:47:F6:E3:08
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 292E34D9015AE49516799C65C7077FF3713A81D3
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31392d3139203d3e203538383334.roa
Signing time: Fri 29 May 2026 08:04:08 +0000
ROA not before: Fri 29 May 2026 07:59:08 +0000
ROA not after: Fri 28 May 2027 08:04:08 +0000
asID: 58834
IP address blocks: 124.240.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:26:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2e:34:d9:01:5a:e4:95:16:79:9c:65:c7:07:7f:f3:71:3a:81:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: May 29 07:59:08 2026 GMT
Not After : May 28 08:04:08 2027 GMT
Subject: CN=8B3BD5ECAA7F4DA90304F03B1CAB7E7E47F6E308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:36:31:08:fe:22:f0:93:25:c3:f2:ea:d0:12:
3d:ef:43:0a:21:fc:e2:1c:97:f7:ed:6d:d4:1e:a7:
af:4f:2c:c2:e9:5b:1b:60:4a:3b:d9:40:2d:de:f9:
03:54:e2:27:33:eb:26:05:ab:f7:33:0b:30:8b:be:
83:a4:4b:0e:4e:d5:4a:2c:97:3c:50:11:e8:15:13:
42:bb:62:1c:48:6a:8b:80:b0:64:32:3b:a7:30:ba:
ae:1c:fc:cd:89:77:51:37:da:a9:08:30:34:95:ec:
e4:5b:a8:93:cc:49:13:d7:61:08:0f:d8:77:57:6e:
f4:61:53:d5:89:06:5c:af:73:bc:ca:78:db:e0:68:
91:d5:d5:cd:81:50:38:36:fd:3b:44:69:33:13:bc:
6c:c2:be:0d:7a:42:c3:a7:10:bc:65:a7:45:87:89:
42:3d:02:fe:72:c9:8c:ca:91:1e:92:29:fd:52:f7:
55:57:5f:d1:59:e9:30:49:7a:e3:07:58:96:e5:96:
c7:07:5d:45:10:be:f7:35:cd:62:66:6e:1c:ad:39:
03:ea:7d:9b:9f:a7:c4:94:83:b4:a6:91:ae:43:fe:
cb:bf:76:b1:f8:0f:ac:90:f6:85:96:e2:32:30:d7:
27:ab:5a:5f:a3:c6:23:93:95:dd:4b:f4:c0:ae:57:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:3B:D5:EC:AA:7F:4D:A9:03:04:F0:3B:1C:AB:7E:7E:47:F6:E3:08
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e302e302f31392d3139203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.0.0/19
Signature Algorithm: sha256WithRSAEncryption
62:0a:2e:c9:3a:04:d8:ee:a7:e1:03:9b:b1:69:ea:1e:f6:b9:
f9:3d:e7:d3:8e:21:d2:34:47:5b:42:6e:65:07:e6:ef:58:a8:
46:d2:8a:3e:a0:9c:bb:d8:80:cc:25:3e:a6:f1:36:8b:25:09:
28:fa:27:eb:7d:26:5a:8d:26:21:1e:46:b2:72:3e:0e:fc:86:
bf:60:e8:62:df:2c:e7:51:42:f4:81:b0:4c:0a:f2:84:c8:32:
6c:cd:0b:81:92:69:84:ee:61:81:73:ba:67:a0:e3:c0:e3:17:
6e:63:de:65:bc:8c:c8:fe:69:02:23:dd:52:dd:35:75:03:74:
88:c4:90:48:b5:a0:50:b3:06:b3:2f:33:e8:a2:24:8e:63:f5:
27:a1:e9:db:cf:23:d2:71:fa:50:4f:9d:94:01:86:e9:1c:69:
c1:8a:24:da:f1:f3:40:cf:ae:da:d6:db:0b:22:4b:87:9a:ea:
ee:6c:04:9b:40:68:f3:0e:e7:8a:d1:1e:96:ef:55:12:47:ec:
9d:1b:86:6d:7d:35:4d:d8:87:d8:e6:1d:30:a2:73:9b:8a:8d:
8f:0d:a1:6d:4e:5e:ed:cc:01:38:3f:a4:04:49:e2:d4:eb:71:
41:07:fd:16:ee:2b:f1:fd:4f:94:cc:1c:32:d8:e6:b0:b4:0f:
b2:68:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:55:56 2026 by rpki-client