
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31372d3137203d3e2030.roa
File: 3132342e32392e302e302f31372d3137203d3e2030.roa (raw, json)
Hash identifier: AFC+2F7V0OlKTW0gJStf8nyFv5MFnxQyG5oT+WeY17w=
Subject key identifier: 7F:47:CE:8A:9F:97:F0:49:6B:5D:A0:7B:05:00:9C:DB:45:A9:B6:87
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 55DAE583CDBD7543BE765E5B7141A47F832FB646
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31372d3137203d3e2030.roa
Signing time: Mon 13 Apr 2026 03:38:57 +0000
ROA not before: Mon 13 Apr 2026 03:33:57 +0000
ROA not after: Mon 12 Apr 2027 03:38:57 +0000
asID: 0
IP address blocks: 124.29.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:da:e5:83:cd:bd:75:43:be:76:5e:5b:71:41:a4:7f:83:2f:b6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:33:57 2026 GMT
Not After : Apr 12 03:38:57 2027 GMT
Subject: CN=7F47CE8A9F97F0496B5DA07B05009CDB45A9B687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:23:98:59:13:2a:08:71:ed:4d:97:f8:96:fb:
8f:98:78:f4:6d:b5:f1:97:d8:f4:e0:46:67:dd:a6:
57:b6:cb:1a:f5:8a:a0:14:22:73:88:c9:fd:cb:e1:
53:5e:f0:db:38:38:c2:a2:fb:b8:4f:18:77:f7:d5:
52:50:90:9b:ae:a4:ff:66:91:65:f9:d9:dc:80:7b:
9c:71:a4:fa:cc:13:c5:88:e7:87:60:1a:cc:37:e1:
80:a3:fd:40:b9:8b:33:9d:19:d4:1c:c9:cf:35:14:
a1:d3:f5:3a:45:3d:86:53:0f:cc:58:18:a1:3e:1d:
c6:2c:01:cb:e0:21:33:ca:1f:c5:45:e2:7e:63:c9:
b5:1f:0a:0d:b8:b6:0d:38:64:05:d2:ae:96:b7:83:
2f:07:f0:e7:b5:23:54:4d:b9:fe:bf:6c:7d:3a:de:
16:ea:d0:9c:a5:27:15:07:79:cc:d4:8a:d5:bb:b3:
98:be:9b:c4:a2:f6:36:fc:de:b0:0b:81:7b:6b:f8:
40:05:32:30:d8:e8:e9:2b:44:e2:f3:f9:06:96:9f:
ec:fb:33:b0:96:e8:aa:d9:69:4d:48:54:5e:04:d3:
92:4d:ce:71:50:50:f7:8f:36:98:19:32:e3:89:2e:
54:93:c2:25:a4:94:ea:6a:23:88:dd:8f:ce:0f:ad:
9e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:47:CE:8A:9F:97:F0:49:6B:5D:A0:7B:05:00:9C:DB:45:A9:B6:87
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31372d3137203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.29.0.0/17
Signature Algorithm: sha256WithRSAEncryption
14:d1:7d:46:ec:c1:19:6e:27:c5:8f:d1:95:2e:1f:62:a8:93:
fe:1c:80:b0:a2:55:a1:f1:5e:ac:cb:17:74:2b:34:58:68:a7:
77:77:81:fb:39:21:d3:e1:a9:d6:c6:9b:e7:03:11:d6:ea:69:
b8:b2:45:48:44:6b:b9:ed:c4:11:ad:c7:84:a2:cf:e1:11:c1:
f2:e1:6b:bd:c6:db:bf:09:9e:f5:1a:8a:3d:e0:82:ad:23:b0:
ad:f0:93:b0:a6:bd:5f:72:5e:28:43:27:ef:57:a1:c6:c5:9a:
5f:31:f4:72:03:a0:af:12:4c:e8:06:ec:03:48:fe:4b:e0:a0:
5b:01:88:78:d1:f9:d9:4a:f6:7b:bc:7f:2b:cd:a6:4b:56:9b:
c6:b9:d9:d4:85:97:28:7f:89:df:48:d1:28:ee:99:cf:6d:20:
e8:db:78:db:bf:34:3e:c5:0e:99:b9:52:bc:52:7a:64:1a:3c:
16:9a:ce:00:23:eb:82:b8:7c:0d:bc:da:e0:e6:18:14:37:66:
64:b1:74:34:f6:66:57:46:2e:c0:f5:88:a7:0d:6a:b4:e9:00:
89:19:bf:1c:1b:61:9b:23:24:3d:b2:62:59:7d:f0:d7:15:27:
a5:22:32:75:4e:a2:92:4e:91:c1:b5:20:a4:18:09:b1:83:48:
c6:0c:9f:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgIUVdrlg829dUO+dl5bcUGkf4MvtkYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3
OTBBOUUwRTAeFw0yNjA0MTMwMzMzNTdaFw0yNzA0MTIwMzM4NTdaMDMxMTAvBgNV
BAMTKDdGNDdDRThBOUY5N0YwNDk2QjVEQTA3QjA1MDA5Q0RCNDVBOUI2ODcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYI5hZEyoIce1Nl/iW+4+YePRt
tfGX2PTgRmfdple2yxr1iqAUInOIyf3L4VNe8Ns4OMKi+7hPGHf31VJQkJuupP9m
kWX52dyAe5xxpPrME8WI54dgGsw34YCj/UC5izOdGdQcyc81FKHT9TpFPYZTD8xY
GKE+HcYsAcvgITPKH8VF4n5jybUfCg24tg04ZAXSrpa3gy8H8Oe1I1RNuf6/bH06
3hbq0JylJxUHeczUitW7s5i+m8Si9jb83rALgXtr+EAFMjDY6OkrROLz+QaWn+z7
M7CW6KrZaU1IVF4E05JNznFQUPePNpgZMuOJLlSTwiWklOpqI4jdj84PrZ7hAgMB
AAGjggIHMIICAzAdBgNVHQ4EFgQUf0fOip+X8ElrXaB7BQCc20WptocwHwYDVR0j
BBgwFoAU+xS2GlNcSQAO7S3ZFlAKJnkKng4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDU1MzM0NS8wL0ZCMTRCNjFBNTM1QzQ5MDAwRUVEMkREOTE2NTAw
QTI2NzkwQTlFMEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRkIxNEI2MUE1MzVDNDkwMDBFRUQyREQ5MTY1MDBBMjY3OTBBOUUwRS5jZXIw
gYAGCCsGAQUFBwELBHQwcjBwBggrBgEFBQcwC4ZkcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0NTUzMzQ1LzAvMzEzMjM0MmUzMjM5
MmUzMDJlMzAyZjMxMzcyZDMxMzcyMDNkM2UyMDMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHfB0AMA0G
CSqGSIb3DQEBCwUAA4IBAQAU0X1G7MEZbifFj9GVLh9iqJP+HICwolWh8V6syxd0
KzRYaKd3d4H7OSHT4anWxpvnAxHW6mm4skVIRGu57cQRrceEos/hEcHy4Wu9xtu/
CZ71Goo94IKtI7Ct8JOwpr1fcl4oQyfvV6HGxZpfMfRyA6CvEkzoBuwDSP5L4KBb
AYh40fnZSvZ7vH8rzaZLVpvGudnUhZcof4nfSNEo7pnPbSDo23jbvzQ+xQ6ZuVK8
UnpkGjwWms4AI+uCuHwNvNrg5hgUN2ZksXQ09mZXRi7A9YinDWq06QCJGb8cG2Gb
IyQ9smJZffDXFSelIjJ1TqKSTpHBtSCkGAmxg0jGDJ+t
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:51:42 2026 by rpki-client