
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e39362e302f32302d3230203d3e203538383334.roa
File: 3132342e3234302e39362e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: j+WJIbGWKVfD8HnvGHF9Lr04Ugx2DV+9KsbS/p4b8ts=
Subject key identifier: DE:5A:47:B9:6F:76:26:0E:C4:65:43:23:C5:B3:38:06:58:B3:14:7A
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 2EBB3DEBFD32B3BCF1BFCAD5D04E7A5CFE00B2E4
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e39362e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:13:49 +0000
ROA not before: Mon 13 Apr 2026 03:08:49 +0000
ROA not after: Mon 12 Apr 2027 03:13:49 +0000
asID: 58834
IP address blocks: 124.240.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:bb:3d:eb:fd:32:b3:bc:f1:bf:ca:d5:d0:4e:7a:5c:fe:00:b2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:08:49 2026 GMT
Not After : Apr 12 03:13:49 2027 GMT
Subject: CN=DE5A47B96F76260EC4654323C5B3380658B3147A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3e:57:04:39:10:cf:4b:dc:ef:73:80:77:1a:
33:b0:22:80:49:7b:57:0d:85:40:4b:59:25:5e:fa:
32:28:46:0f:40:2f:16:06:d6:34:c4:82:49:a6:a4:
33:1e:46:33:76:25:83:56:82:a3:9e:90:37:a8:dc:
b9:1f:ae:8e:f7:6b:a7:f0:3a:f6:93:69:4d:c9:87:
04:5b:f2:71:91:eb:da:13:96:77:e4:ec:03:90:b5:
25:80:02:1d:f9:4a:18:d8:be:f6:98:4a:3d:4c:4e:
52:fb:2e:e9:bc:64:ab:db:e3:18:79:c5:01:8e:9f:
83:3d:b0:1f:e4:24:c2:ca:95:ac:35:00:a1:e4:fd:
e8:11:b2:9d:44:a8:a5:e0:5e:1e:5c:47:f2:6b:5a:
e7:46:87:5e:7a:dd:6d:c7:9a:e9:8a:c8:98:6e:01:
fe:db:14:4b:8f:88:82:45:36:35:6f:94:8f:98:37:
d8:83:9e:c3:1f:29:54:b6:5f:08:32:c3:6f:0d:c3:
82:26:82:24:7b:5b:7b:0f:e1:8a:67:32:21:96:e6:
40:5f:7c:2b:55:c3:01:81:c9:e4:c4:50:66:89:f1:
81:05:d9:26:dd:d6:cf:98:6f:bd:d2:90:d2:4c:c9:
e0:7e:b2:03:05:83:a6:a8:5d:87:a5:cf:10:22:4b:
5a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5A:47:B9:6F:76:26:0E:C4:65:43:23:C5:B3:38:06:58:B3:14:7A
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e3234302e39362e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.240.96.0/20
Signature Algorithm: sha256WithRSAEncryption
03:68:47:80:89:b6:8d:aa:8d:36:98:91:6b:5f:b2:51:7c:12:
21:86:9a:49:45:bd:fa:e3:de:75:d9:d4:83:ba:39:92:58:86:
b3:2a:98:2f:9f:02:4e:91:11:09:95:77:22:3c:fd:87:96:ed:
e6:b8:59:68:4d:a0:3a:13:01:f4:9d:7b:42:05:2e:79:fe:4b:
ae:0b:53:2c:c8:9b:d0:c9:a5:52:4d:04:39:fe:28:06:f6:f1:
7d:cb:fa:09:80:ba:9c:94:bf:74:f6:85:09:d9:c4:d4:00:93:
41:f0:e2:b6:cb:f7:fe:a6:c9:77:19:6f:2b:a7:92:25:39:c0:
d1:95:a8:ee:e3:1b:e9:26:cd:5f:4b:7e:97:13:e3:0f:f6:92:
c7:f7:e7:ad:94:bf:82:5a:a0:70:82:4c:eb:f5:fc:e6:6e:5b:
28:d5:7a:13:ae:02:9b:6e:99:fe:96:da:0d:16:1e:01:d6:7e:
c9:cb:78:71:3d:4e:e2:da:39:93:ee:54:00:f6:05:ce:d2:44:
a0:71:ac:39:b2:db:22:f9:17:73:c3:15:78:bf:fc:76:3d:27:
a6:50:8b:91:de:0e:cc:0c:e6:a4:05:27:43:7b:52:a5:93:23:
80:5c:28:f0:d4:5b:94:18:1c:9c:c0:0d:26:15:e2:a1:7c:4f:
bd:9d:23:8e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:39 2026 by rpki-client