
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e38302e302f32302d3230203d3e203538383334.roa
File: 3132342e3234302e38302e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: UVpGLH8MJSNUix+3JlFcpcB5WXiAOTHo1zGgdlTOVWw=
Subject key identifier: 2D:00:C8:9B:8D:BF:04:CF:F5:5E:88:4B:91:3D:F3:60:B1:BA:68:F2
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 67D388583547B649F8EEAD5AE48C0F764F93F3B7
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e38302e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:15:20 +0000
ROA not before: Mon 13 Apr 2026 03:10:20 +0000
ROA not after: Mon 12 Apr 2027 03:15:20 +0000
asID: 58834
IP address blocks: 124.240.80.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:d3:88:58:35:47:b6:49:f8:ee:ad:5a:e4:8c:0f:76:4f:93:f3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:10:20 2026 GMT
Not After : Apr 12 03:15:20 2027 GMT
Subject: CN=2D00C89B8DBF04CFF55E884B913DF360B1BA68F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0d:2f:43:db:d8:37:01:6a:2b:27:b6:92:5a:
3d:6a:73:ee:07:7a:e6:54:08:ad:d9:09:e0:25:7d:
c7:cb:55:32:c2:99:82:df:d7:e5:74:66:28:cd:79:
99:24:12:98:68:09:1d:9f:da:5c:de:71:5c:e2:36:
0d:5f:0f:e9:41:86:2c:34:1d:03:92:0e:47:2a:f2:
75:f4:b9:4a:2b:e1:ff:12:e5:87:37:f2:25:33:63:
e9:6e:f1:06:7e:24:94:b9:de:ae:8f:62:2b:66:d4:
50:42:87:06:08:4a:4c:1c:cf:c8:37:0f:38:66:5b:
78:4a:84:27:f5:1a:81:59:a1:9f:fd:7c:8e:d7:bf:
3d:75:01:39:c3:95:28:33:e7:a6:3c:84:e0:8d:38:
24:07:f8:12:8f:0f:93:99:70:d6:8b:3c:12:88:98:
7f:c4:90:ff:d5:db:39:ee:3e:96:55:13:4b:b5:0e:
9a:85:1f:07:16:f9:ed:19:72:6a:27:f6:f5:24:a6:
c1:55:d3:7b:b7:64:35:51:02:d4:30:63:64:77:ea:
88:89:74:94:8c:36:7f:04:57:df:7f:70:bb:44:7b:
cc:d6:9a:90:d2:98:c4:a0:54:ae:1a:bc:6a:c6:0d:
11:b7:cc:ae:49:b2:97:af:b0:cc:6a:5f:ba:4c:b1:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:00:C8:9B:8D:BF:04:CF:F5:5E:88:4B:91:3D:F3:60:B1:BA:68:F2
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e38302e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.80.0/20
Signature Algorithm: sha256WithRSAEncryption
aa:a1:46:54:0c:b8:97:2c:61:5b:ed:fc:6d:aa:47:26:9b:6b:
3e:69:30:ab:e5:70:ad:8f:8f:6b:c5:98:9b:4e:92:a2:b7:cd:
77:51:2a:37:4b:db:e9:2c:2b:6d:da:92:9e:b3:eb:d3:14:e1:
68:98:4f:0e:99:41:3a:47:50:95:7d:2b:07:17:70:fe:ae:a7:
6b:5d:64:84:dd:77:00:82:28:c0:94:2f:44:e8:c6:3e:e0:68:
08:70:12:26:c8:42:62:86:67:92:a6:66:87:df:87:45:0c:e2:
e4:14:db:cb:5e:fb:4c:4a:cb:95:b8:ca:51:c8:c5:41:6a:25:
80:83:11:cf:ab:46:8c:16:c3:d1:a2:23:a1:25:d9:50:f5:d0:
08:35:77:2c:6c:ad:53:29:53:bf:3a:2e:75:77:8e:51:42:b4:
a4:80:d2:1b:1b:b2:13:62:75:d9:6f:30:e2:e2:c2:c4:6e:14:
c9:78:6d:27:08:f0:6d:6b:e9:99:28:64:3d:27:b1:4c:88:ba:
33:dc:1d:96:3e:32:5b:9d:d5:6f:c0:85:72:69:8c:66:94:be:
64:5c:91:ff:f8:af:92:78:39:67:87:e7:a1:d4:68:07:60:ca:
65:97:20:97:a4:dc:17:75:d8:ab:b9:b1:4c:a4:6f:9a:27:69:
00:1d:18:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:40 2026 by rpki-client