
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f32302d3230203d3e203538383334.roa
File: 3230322e3136382e3136302e302f32302d3230203d3e203538383334.roa (raw, json)
Hash identifier: mU/NIUNc3hZGPpqgHBB5bj0qCQZBt3We3+qGKkcTV04=
Subject key identifier: AA:AB:9F:A2:C3:4A:DF:44:EC:EE:72:F3:26:16:8E:96:D1:05:48:6C
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 527E2AA05ABC17A3887505DF8AA72B9B0F247B7E
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f32302d3230203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:06:54 +0000
ROA not before: Mon 13 Apr 2026 03:01:54 +0000
ROA not after: Mon 12 Apr 2027 03:06:54 +0000
asID: 58834
IP address blocks: 202.168.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7e:2a:a0:5a:bc:17:a3:88:75:05:df:8a:a7:2b:9b:0f:24:7b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 03:01:54 2026 GMT
Not After : Apr 12 03:06:54 2027 GMT
Subject: CN=AAAB9FA2C34ADF44ECEE72F326168E96D105486C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:0e:39:cb:ac:6a:42:42:31:d0:e0:9c:9e:
29:f2:66:fe:3d:cc:93:d6:b9:f8:28:76:49:c2:b0:
51:26:d8:1b:2d:15:ab:5e:1e:39:fe:9c:de:5e:87:
88:c8:60:57:16:90:1d:c3:7e:36:a5:04:8f:24:03:
05:c0:82:35:8a:2d:31:25:1f:e2:b1:bf:3b:fe:fd:
88:da:60:be:d0:3f:a8:c2:52:3d:1d:01:ae:11:d4:
6f:24:c9:d0:9d:a0:85:c7:70:dd:74:e8:57:a5:5d:
6b:0e:b0:55:9c:66:02:5f:ae:64:b2:15:8a:c3:89:
51:50:84:06:e0:30:35:45:48:7e:42:6b:1e:c0:8f:
12:65:9a:d6:dd:1d:5a:fa:6f:65:43:80:f9:05:a9:
b5:d7:6f:02:6e:8e:c0:58:2c:7a:9a:c7:87:90:76:
82:bd:27:de:d8:95:76:cf:89:00:32:c8:20:17:31:
3a:f3:74:21:eb:87:87:30:6a:1c:72:18:ff:e0:19:
41:24:b0:f8:e3:ab:a3:da:30:73:d3:a5:26:d5:ec:
14:29:cc:66:ca:cc:24:6a:d7:ac:65:e7:7b:9e:9e:
b1:63:1d:8d:03:c6:75:09:4c:fe:68:d6:df:65:54:
d2:e9:96:02:42:a4:b4:3a:f3:fd:77:13:76:0a:c7:
e6:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:9F:A2:C3:4A:DF:44:EC:EE:72:F3:26:16:8E:96:D1:05:48:6C
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f32302d3230203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.160.0/20
Signature Algorithm: sha256WithRSAEncryption
54:c5:2c:ff:dd:60:12:24:f7:bb:a0:ec:d1:6e:f5:2e:b6:1a:
0b:4f:9e:77:b3:ce:2a:59:9a:90:b9:42:72:6a:61:94:86:ef:
55:b2:0a:e9:a8:d2:6b:ba:44:48:4a:76:d0:d4:2a:ae:77:bf:
bf:7c:15:c7:b2:49:ea:e8:38:4f:68:64:20:d3:0d:ea:fd:12:
bd:6b:71:9d:cb:bd:ba:9e:ae:9e:84:20:95:9e:24:26:01:2f:
e4:d2:b3:53:55:0c:de:e7:c2:19:75:f9:ae:50:54:b3:f8:2b:
5a:71:80:a1:90:f6:74:74:c4:5e:5e:6e:aa:f3:0b:bb:36:17:
db:3d:eb:ab:52:4c:d8:be:ca:af:5b:db:81:3d:02:0c:c9:64:
25:9b:88:6b:01:97:0d:b0:21:21:b7:22:41:2e:2c:ff:6f:2d:
73:53:25:90:51:2c:20:10:23:83:0b:02:af:c3:c2:6b:19:2f:
82:f0:5b:05:1e:6e:9c:4c:1c:65:49:81:c3:55:6d:9b:56:0f:
c6:59:40:53:96:21:81:cf:a4:d0:be:4b:bd:09:de:b2:22:9b:
3e:9c:5c:f8:53:f4:a3:f3:6b:c8:12:fe:c8:13:c9:79:96:b8:
26:19:e8:0c:61:78:b0:2f:ad:9f:ce:56:01:37:ec:87:1b:d9:
2c:a0:5a:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:25 2026 by rpki-client