
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138342e302f32312d3231203d3e203538383334.roa
File: 3230322e3136382e3138342e302f32312d3231203d3e203538383334.roa (raw, json)
Hash identifier: Laetjwrz4ctYybp6U/5hbQEK+JGryx37yT0BMBLTL7E=
Subject key identifier: 64:BC:23:5E:F8:A8:7A:BA:7A:A1:38:B4:99:F3:45:30:09:9D:61:CC
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 3A55FA1EC571952F04E57F9B4C7FEED3F9A1AF24
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138342e302f32312d3231203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:02:24 +0000
ROA not before: Mon 13 Apr 2026 02:57:24 +0000
ROA not after: Mon 12 Apr 2027 03:02:24 +0000
asID: 58834
IP address blocks: 202.168.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:55:fa:1e:c5:71:95:2f:04:e5:7f:9b:4c:7f:ee:d3:f9:a1:af:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 02:57:24 2026 GMT
Not After : Apr 12 03:02:24 2027 GMT
Subject: CN=64BC235EF8A87ABA7AA138B499F34530099D61CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:97:b6:2c:15:9f:ad:e3:67:b3:4b:a6:de:
7c:4c:88:54:97:f6:06:d2:a9:d2:86:bc:3b:ea:c9:
ab:c6:ef:c7:f7:3e:4b:db:73:b5:c4:d2:a5:9b:21:
64:da:6e:f0:80:30:f2:16:de:0d:33:66:5e:94:69:
df:12:25:a4:54:a5:36:a5:d4:e2:f4:3f:d3:d3:cc:
b5:e6:b5:5b:84:50:71:3d:55:8a:29:4e:8b:a1:95:
b9:d8:92:38:5f:56:d7:5f:f3:d1:f8:e7:c4:17:2b:
01:b7:a9:4c:ed:fa:8b:9f:f2:44:a5:7d:e9:4d:86:
9f:ea:cd:c2:7c:6b:53:12:ba:60:88:22:25:c6:cb:
8c:0a:79:b8:a5:b4:71:11:fa:d8:11:54:7e:81:96:
64:4f:08:dd:ce:2c:93:74:89:7e:b8:99:21:51:2b:
6b:f2:b2:90:0d:af:a6:60:c1:50:dc:03:e8:51:96:
a4:36:70:67:99:81:d2:da:77:eb:f9:7d:65:e9:45:
6e:2b:11:ee:9b:ad:cf:78:dd:72:99:85:81:f7:7a:
cb:78:90:73:2d:f6:25:f8:6e:e7:6d:02:a1:d0:f8:
55:67:e3:69:64:cb:33:d1:e8:ec:eb:7d:13:64:20:
b2:e8:5b:31:84:01:ac:cd:02:a6:6f:bd:99:bc:85:
03:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BC:23:5E:F8:A8:7A:BA:7A:A1:38:B4:99:F3:45:30:09:9D:61:CC
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138342e302f32312d3231203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.184.0/21
Signature Algorithm: sha256WithRSAEncryption
71:3d:5c:09:92:7b:33:bd:e6:5e:94:3b:43:e6:16:3b:65:c0:
3c:e1:95:77:d1:78:05:01:a9:d9:ce:8f:f3:e2:e3:42:3f:de:
1c:d6:ab:b3:7d:c7:50:6b:11:49:a5:3f:38:dd:a3:f1:88:3e:
7f:0a:f8:e3:82:1e:28:5c:92:0f:f9:ff:ac:76:5a:bf:ac:fb:
13:d0:3d:0e:31:f5:0b:60:0b:07:69:2b:fc:8e:b0:16:0d:7f:
6a:80:14:1b:17:52:68:b9:d6:15:61:08:9e:79:8e:1c:44:92:
9c:1c:6d:45:cb:d9:b6:b1:db:2f:f1:58:51:df:05:28:0b:8a:
24:f7:9d:50:68:c6:9e:80:21:09:76:60:2b:4c:67:24:71:ef:
87:55:6f:a5:39:d3:39:3b:cb:8b:83:70:d2:6a:ec:fa:75:43:
86:2e:8c:dc:4e:da:91:3b:9b:f7:79:22:92:47:c8:bc:3a:64:
2f:6d:29:ac:fa:d1:54:c5:0f:30:e8:9f:4b:d0:40:41:1d:17:
b1:01:d8:bf:8a:8e:21:51:7b:bb:51:21:b3:ea:d1:99:22:da:
a1:3a:cf:6c:f9:70:23:12:70:87:2b:93:bb:41:75:8e:ef:43:
d6:b4:05:df:4f:e0:72:fc:81:55:7e:98:79:17:35:a2:3b:e6:
63:e3:1c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:09 2026 by rpki-client