
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f32302d3230203d3e203538383334.roa
File: 3132342e3234302e33322e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: Nij/2ZIBPpmJD5R975pwgZCaTfPHT0kows43BFYL108=
Subject key identifier: B9:D7:7E:49:FB:20:4E:99:0B:B9:D0:AD:4A:93:7B:03:69:4F:72:C6
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 5122C4A95C998D7E335764C0B7CBBB2383AFCF04
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:17:58 +0000
ROA not before: Mon 13 Apr 2026 03:12:58 +0000
ROA not after: Mon 12 Apr 2027 03:17:58 +0000
asID: 58834
IP address blocks: 124.240.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:22:c4:a9:5c:99:8d:7e:33:57:64:c0:b7:cb:bb:23:83:af:cf:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:12:58 2026 GMT
Not After : Apr 12 03:17:58 2027 GMT
Subject: CN=B9D77E49FB204E990BB9D0AD4A937B03694F72C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c1:08:4d:a3:50:27:33:e3:e6:cf:88:87:45:
4f:77:4e:06:5a:c2:07:d7:30:ed:55:8d:41:b0:98:
88:f9:80:39:3a:95:07:65:ff:1a:bf:fe:46:e4:a5:
3a:15:84:c5:db:bf:e7:61:e7:c1:a4:8d:99:87:fb:
d9:a0:c0:12:e8:ac:97:5e:d4:3e:83:ad:c0:c7:b1:
67:6e:7b:98:5b:c3:10:03:6b:e6:2f:2b:9d:dc:0c:
23:82:d2:6c:67:20:b0:e2:dc:8f:cd:63:fd:2b:c9:
53:64:39:9f:f5:8e:cd:a3:57:7c:a8:b9:7b:41:bb:
f7:9d:e8:28:72:1f:39:d5:43:de:d8:8e:95:17:43:
1b:fa:e3:c5:c5:3b:94:20:8b:a7:90:15:bf:81:cd:
b0:a8:c2:f4:55:b4:57:7f:26:85:51:bf:e2:0f:83:
74:8a:ae:0e:09:88:56:49:ff:b1:8c:8a:8b:e1:7f:
d8:1b:cf:ef:38:a6:4b:5d:5f:13:bf:7d:cd:69:a8:
37:bf:57:2c:8a:b2:df:4c:44:5f:d0:21:1d:48:7a:
df:9b:d6:01:0b:f5:55:03:12:67:ce:8c:60:85:b1:
b9:b6:47:a0:6b:9d:b4:72:87:5f:8b:e3:8c:38:54:
cf:54:3e:cc:68:32:83:99:7e:ca:13:d4:53:37:95:
14:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D7:7E:49:FB:20:4E:99:0B:B9:D0:AD:4A:93:7B:03:69:4F:72:C6
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e33322e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.32.0/20
Signature Algorithm: sha256WithRSAEncryption
34:a1:28:0c:1e:de:e8:59:f2:03:31:d9:a7:1b:7e:8e:08:3b:
af:d1:f3:2f:df:74:14:41:5e:18:82:65:c3:a8:82:f6:15:57:
69:38:7d:e4:38:5f:f6:57:36:e1:6c:5d:d6:dc:95:fc:71:d2:
2e:d4:54:4a:c8:d5:9f:1d:7a:2f:45:a3:47:06:37:29:8f:fa:
ef:62:bc:24:75:a9:7c:9f:f6:16:ea:b4:e1:e7:2a:23:3c:a9:
f5:e8:02:e5:41:65:b2:47:30:0b:24:7b:a4:88:f7:6a:ef:91:
f2:15:de:65:82:4c:0f:46:4b:50:b6:7e:2a:6f:cd:80:16:0e:
66:23:12:35:70:75:b3:22:73:82:7a:34:6b:79:ea:79:ae:50:
ac:b5:87:02:d9:5c:e4:ec:81:5b:e6:a6:7a:72:09:29:40:ce:
58:90:14:c9:51:a6:d8:14:78:b5:e5:56:05:ba:5f:da:73:26:
c7:7d:c6:71:81:d2:c4:20:03:09:26:d5:26:a0:11:e1:e3:1c:
e8:9b:21:2f:41:5f:8d:11:f6:8f:90:9e:86:2e:72:26:f3:d2:
fb:58:a9:ce:19:44:4d:9f:c8:6d:a5:d0:d3:0c:0c:a4:4d:5e:
f0:a7:6b:d8:cc:f8:a9:65:81:52:14:d6:18:78:94:be:24:13:
84:d9:61:be
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUSLEqVyZjX4zV2TAt8u7I4OvzwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTMwMzEyNThaFw0yNzA0MTIwMzE3NThaMDMxMTAvBgNV
BAMTKEI5RDc3RTQ5RkIyMDRFOTkwQkI5RDBBRDRBOTM3QjAzNjk0RjcyQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiwQhNo1AnM+Pmz4iHRU93TgZa
wgfXMO1VjUGwmIj5gDk6lQdl/xq//kbkpToVhMXbv+dh58GkjZmH+9mgwBLorJde
1D6DrcDHsWdue5hbwxADa+YvK53cDCOC0mxnILDi3I/NY/0ryVNkOZ/1js2jV3yo
uXtBu/ed6ChyHznVQ97YjpUXQxv648XFO5Qgi6eQFb+BzbCowvRVtFd/JoVRv+IP
g3SKrg4JiFZJ/7GMiovhf9gbz+84pktdXxO/fc1pqDe/VyyKst9MRF/QIR1Iet+b
1gEL9VUDEmfOjGCFsbm2R6BrnbRyh1+L44w4VM9UPsxoMoOZfsoT1FM3lRTNAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUudd+SfsgTpkLudCtSpN7A2lPcsYwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDU1MzM0NS8wLzMxMzIzNDJlMzIz
NDMwMmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzUzODM4MzMzNC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBHzwIDANBgkqhkiG9w0BAQsFAAOCAQEANKEoDB7e6FnyAzHZpxt+jgg7
r9HzL990FEFeGIJlw6iC9hVXaTh95Dhf9lc24Wxd1tyV/HHSLtRUSsjVnx16L0Wj
RwY3KY/672K8JHWpfJ/2Fuq04ecqIzyp9egC5UFlskcwCyR7pIj3au+R8hXeZYJM
D0ZLULZ+Km/NgBYOZiMSNXB1syJzgno0a3nqea5QrLWHAtlc5OyBW+amenIJKUDO
WJAUyVGm2BR4teVWBbpf2nMmx33GcYHSxCADCSbVJqAR4eMc6JshL0FfjRH2j5Ce
hi5yJvPS+1ipzhlETZ/IbaXQ0wwMpE1e8Kdr2Mz4qWWBUhTWGHiUviQThNlhvg==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:38 2026 by rpki-client