
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e31362e302f32302d3230203d3e203538383334.roa
File: 3132342e3234302e31362e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: fN1i4FMBydYvgCY4kanuV1F23VrNsDFDsu3qWtS/n/c=
Subject key identifier: 06:11:A4:DA:08:2B:6C:A4:3A:AB:3E:14:38:A9:2A:F7:88:91:CC:A8
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 04BA70D23F16EA8504162AABB0D7D0F54FF91EA0
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e31362e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:17:58 +0000
ROA not before: Mon 13 Apr 2026 03:12:58 +0000
ROA not after: Mon 12 Apr 2027 03:17:58 +0000
asID: 58834
IP address blocks: 124.240.16.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:ba:70:d2:3f:16:ea:85:04:16:2a:ab:b0:d7:d0:f5:4f:f9:1e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:12:58 2026 GMT
Not After : Apr 12 03:17:58 2027 GMT
Subject: CN=0611A4DA082B6CA43AAB3E1438A92AF78891CCA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:de:b0:d3:84:f8:3d:be:db:29:d9:7d:ca:9c:
24:c3:5e:94:aa:c2:39:25:9d:89:00:7c:4f:f8:84:
85:80:10:7a:96:3a:6a:2f:01:c6:60:31:71:b3:41:
bc:29:57:1d:3b:0a:d8:44:23:e9:96:fc:db:1e:b8:
da:7a:1e:dc:0a:1e:57:96:09:49:82:10:f2:c5:6a:
1a:d4:23:ee:f3:95:fb:0d:40:a9:71:54:b2:96:41:
5c:f2:19:82:ef:2e:9f:d5:09:bf:cc:8e:fc:60:7a:
4b:bd:d1:f4:3f:7a:6e:6a:80:b2:53:4d:69:76:48:
af:f1:e0:c4:e8:7e:2d:72:a0:35:91:22:15:d2:5d:
12:9e:c6:d7:01:98:2b:12:b5:08:1f:78:71:93:31:
a5:a5:75:56:ac:61:f5:fc:cb:74:0e:93:66:45:1b:
5d:c9:fe:1e:20:ee:c9:f8:69:ac:40:fe:64:56:d6:
cd:4c:9d:fa:87:67:51:04:19:0d:59:98:8c:ea:5b:
7c:8a:10:b0:4f:f1:77:6e:30:69:e6:bc:61:81:4d:
fb:16:23:5f:c4:9b:21:23:17:fa:e4:36:8f:69:34:
7e:e9:4e:3f:5f:c6:be:f7:ef:85:bd:11:99:d9:85:
cd:23:ef:87:05:f6:e2:39:40:5d:e5:e6:d1:86:2e:
28:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:11:A4:DA:08:2B:6C:A4:3A:AB:3E:14:38:A9:2A:F7:88:91:CC:A8
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e31362e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.16.0/20
Signature Algorithm: sha256WithRSAEncryption
af:1a:05:17:ae:24:a5:3b:99:20:6b:f7:62:ad:f3:a3:1e:96:
6d:ca:1f:7b:8a:dc:99:90:bb:35:73:19:db:e7:da:c7:31:90:
00:f7:2a:61:16:67:6b:ba:1d:49:5b:42:00:5c:30:b0:1e:9f:
7d:74:ec:66:84:f0:d8:02:44:0a:6c:74:b7:d9:fa:42:08:6c:
7f:84:61:16:3a:7c:e0:1b:89:23:83:9e:5c:f0:28:2d:a2:a1:
35:03:61:2b:f1:5a:dc:ee:24:62:09:73:6e:8c:c9:d0:03:90:
2e:da:1e:8a:ba:1c:a7:54:8f:1c:a9:1c:6d:f0:d7:d1:89:45:
a4:d9:86:8f:7c:00:8d:a1:86:ae:a3:45:9c:64:2b:91:c4:73:
ef:3d:ae:c4:78:82:ec:46:8d:af:f0:40:95:76:96:c8:61:db:
0e:18:5a:27:2b:5b:c2:2e:85:d6:21:c9:97:01:64:e9:0e:24:
2c:6d:01:8d:47:93:f3:de:2a:54:e8:c9:f6:e6:06:37:7b:b3:
52:44:85:7b:80:ed:36:9a:bb:69:8f:62:e0:0c:71:9b:1b:e6:
f5:de:7b:5c:a4:3e:97:cb:be:91:82:50:aa:09:f8:13:2f:de:
81:58:ae:c8:f5:de:ba:6f:1e:f9:1d:e5:ec:7b:8c:d8:8b:69:
68:41:36:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:40 2026 by rpki-client