
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa
File: 3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: 8vjTtzziGfu/ngmZunGEeO0JiQFTfyauFha81IqepA0=
Subject key identifier: 4C:C1:8A:03:CD:9F:31:D2:C9:3E:C0:5F:B7:7C:F5:E4:DA:4D:54:0F
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 4E016ADF0D593D5746EE0555353C7BCEDA586136
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:17:58 +0000
ROA not before: Mon 13 Apr 2026 03:12:58 +0000
ROA not after: Mon 12 Apr 2027 03:17:58 +0000
asID: 58834
IP address blocks: 124.240.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:01:6a:df:0d:59:3d:57:46:ee:05:55:35:3c:7b:ce:da:58:61:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:12:58 2026 GMT
Not After : Apr 12 03:17:58 2027 GMT
Subject: CN=4CC18A03CD9F31D2C93EC05FB77CF5E4DA4D540F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:03:02:c7:15:27:c8:3c:1b:a2:e8:05:11:
ff:b7:9a:48:d0:f8:d5:a0:2c:ef:c8:da:57:48:48:
c2:74:04:3a:d4:62:1e:57:21:46:67:ff:25:4f:ef:
c5:86:9b:12:f7:e0:c1:4e:a2:1f:cd:e3:67:83:a0:
d7:b2:e3:51:04:05:a9:1e:26:74:91:6c:4f:f7:9d:
7b:10:35:6a:2b:b5:4d:8b:2d:45:85:fb:14:e7:57:
ad:25:e2:e5:b3:be:3a:59:3f:1f:26:1e:20:0b:b4:
0c:b7:63:ef:89:f4:d8:f3:aa:04:88:c7:90:7a:30:
17:d0:50:d6:35:23:d0:fb:2c:12:9f:f8:cd:6f:f9:
29:be:04:8f:fa:eb:4a:f3:22:a5:8d:ca:7a:17:d6:
21:0d:51:fc:78:75:13:33:1b:69:05:0c:58:b0:8c:
63:be:15:87:0c:78:05:bf:8e:c2:a7:0e:2d:4e:b2:
d8:58:25:7e:4f:d0:31:96:56:72:da:ee:81:1a:19:
bc:b7:74:c8:75:e3:1b:85:84:80:4b:08:c5:e0:3a:
e3:d3:c3:05:eb:d4:d6:0a:8c:57:c4:96:4f:57:21:
16:1d:07:57:da:4f:06:cf:52:b0:f6:1c:27:65:da:
40:d7:87:d2:27:ad:3e:26:ca:e2:5b:b8:9c:c8:1a:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C1:8A:03:CD:9F:31:D2:C9:3E:C0:5F:B7:7C:F5:E4:DA:4D:54:0F
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e3131322e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.112.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:cb:3c:2c:00:08:b9:14:2e:4a:23:66:50:ce:5c:d1:51:db:
22:77:1f:06:a1:9f:6a:ec:4d:9e:2e:0d:81:a4:73:cd:95:94:
b1:7b:3e:a0:53:8e:e7:54:ac:5b:e0:b9:41:4d:46:cf:8f:3b:
1c:5c:da:32:8c:9f:d5:60:5a:1e:19:08:57:37:d7:5c:89:c8:
76:ac:e5:80:e1:1e:ec:f9:be:7b:ab:24:53:40:9a:fc:37:9b:
e6:06:15:9a:c0:fb:3e:3c:24:37:cb:20:b3:c0:08:4a:e4:ca:
34:63:16:2b:81:cb:f8:4e:a2:04:ab:61:c9:27:e7:6e:e3:52:
dd:4d:80:1c:6f:f8:92:f3:50:41:e2:0f:c8:b0:5a:45:b7:dd:
0c:4d:73:b1:23:b9:4e:89:e2:75:62:cc:4d:44:ec:64:24:f7:
f2:43:a2:31:80:06:4f:22:95:0b:3a:34:7c:2a:f4:2c:9f:e0:
6f:dc:7a:76:2c:8e:86:3f:8a:09:76:37:34:2b:45:1e:c0:19:
ed:d3:0c:8b:b9:36:fe:c7:a2:37:84:6d:e0:d7:75:ae:a6:42:
41:0d:cc:59:49:98:84:85:e2:e7:f4:aa:15:6c:af:8e:4f:99:
51:3e:1d:c5:8f:0c:26:32:4d:ab:5c:1d:ed:e6:af:e9:09:9f:
58:e2:34:b0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUTgFq3w1ZPVdG7gVVNTx7ztpYYTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTMwMzEyNThaFw0yNzA0MTIwMzE3NThaMDMxMTAvBgNV
BAMTKDRDQzE4QTAzQ0Q5RjMxRDJDOTNFQzA1RkI3N0NGNUU0REE0RDU0MEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTqgMCxxUnyDwbougFEf+3mkjQ
+NWgLO/I2ldISMJ0BDrUYh5XIUZn/yVP78WGmxL34MFOoh/N42eDoNey41EEBake
JnSRbE/3nXsQNWortU2LLUWF+xTnV60l4uWzvjpZPx8mHiALtAy3Y++J9NjzqgSI
x5B6MBfQUNY1I9D7LBKf+M1v+Sm+BI/660rzIqWNynoX1iENUfx4dRMzG2kFDFiw
jGO+FYcMeAW/jsKnDi1OsthYJX5P0DGWVnLa7oEaGby3dMh14xuFhIBLCMXgOuPT
wwXr1NYKjFfElk9XIRYdB1faTwbPUrD2HCdl2kDXh9InrT4myuJbuJzIGgB/AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUTMGKA82fMdLJPsBft3z15NpNVA8wHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk3OTY3MTQ1NTMzNDUvMC8zMTMyMzQyZTMy
MzQzMDJlMzEzMTMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEBHzwcDANBgkqhkiG9w0BAQsFAAOCAQEAmss8LAAIuRQuSiNmUM5c
0VHbIncfBqGfauxNni4NgaRzzZWUsXs+oFOO51SsW+C5QU1Gz487HFzaMoyf1WBa
HhkIVzfXXInIdqzlgOEe7Pm+e6skU0Ca/Deb5gYVmsD7PjwkN8sgs8AISuTKNGMW
K4HL+E6iBKthySfnbuNS3U2AHG/4kvNQQeIPyLBaRbfdDE1zsSO5TonidWLMTUTs
ZCT38kOiMYAGTyKVCzo0fCr0LJ/gb9x6diyOhj+KCXY3NCtFHsAZ7dMMi7k2/sei
N4Rt4Nd1rqZCQQ3MWUmYhIXi5/SqFWyvjk+ZUT4dxY8MJjJNq1wd7eav6QmfWOI0
sA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:36 2026 by rpki-client