
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138352e302f32342d3234203d3e203538383334.roa
File: 3230322e3136382e3138352e302f32342d3234203d3e203538383334.roa (raw, json)
Hash identifier: dV/7F11Lra6Ovqs4jyoeiBvIg5mziixvdTVbmLyBdSg=
Subject key identifier: CC:1A:BF:FD:F7:0C:6F:85:1F:14:A2:97:B1:CA:50:52:C9:32:39:5F
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 6B2AAFF3A25F146C43B5D3B2BD94898CB321ACE4
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138352e302f32342d3234203d3e203538383334.roa
Signing time: Mon 13 Apr 2026 03:01:23 +0000
ROA not before: Mon 13 Apr 2026 02:56:23 +0000
ROA not after: Mon 12 Apr 2027 03:01:23 +0000
asID: 58834
IP address blocks: 202.168.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:57:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2a:af:f3:a2:5f:14:6c:43:b5:d3:b2:bd:94:89:8c:b3:21:ac:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 13 02:56:23 2026 GMT
Not After : Apr 12 03:01:23 2027 GMT
Subject: CN=CC1ABFFDF70C6F851F14A297B1CA5052C932395F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e8:08:a7:f1:99:fe:47:29:5e:92:21:3a:0c:
b0:dc:cc:65:9a:c6:44:d5:b9:4a:57:5f:3a:ad:5f:
b4:65:14:39:9a:9e:f1:e2:8d:51:14:98:2f:b3:75:
f9:3c:7e:c2:bd:2c:f9:a9:99:e3:fd:fa:c7:d6:20:
7f:45:29:6d:99:03:28:4a:1e:44:63:90:b0:bb:e7:
75:89:e9:6f:af:50:cf:0e:bd:00:99:70:23:31:1a:
e7:45:44:37:62:f5:23:d9:f4:27:c1:87:64:26:dd:
f5:55:6c:5e:35:52:f5:f3:bb:2b:9f:57:d8:ff:d5:
9d:7d:37:a5:10:e8:ed:44:22:f1:bb:3a:fa:93:4a:
6e:54:2e:9f:eb:bc:5a:f2:e8:97:99:8b:2a:bf:19:
fa:19:db:ff:c0:5c:b1:bc:f4:1f:ee:02:52:5a:ac:
75:65:1d:c7:8d:92:04:1e:b4:cc:c5:a1:83:54:a6:
b4:35:fc:94:74:fe:6e:1d:f7:cd:b5:65:fa:e4:71:
38:b7:0c:84:52:c5:86:9a:57:4e:e7:79:91:30:1a:
05:cc:d8:c9:b1:b6:cc:2d:d2:dc:69:10:35:80:ee:
0e:ea:80:65:24:0f:0c:0b:5e:08:4d:35:51:ba:f9:
f7:a4:0f:16:2e:8c:b2:9f:a5:67:78:65:01:83:cf:
84:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:BF:FD:F7:0C:6F:85:1F:14:A2:97:B1:CA:50:52:C9:32:39:5F
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3138352e302f32342d3234203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.185.0/24
Signature Algorithm: sha256WithRSAEncryption
62:92:e2:7b:0c:48:c6:4f:fc:ea:64:70:a9:79:5c:10:56:55:
84:eb:7b:25:03:a5:c1:d0:e3:a3:de:da:df:d5:d9:ef:64:db:
05:b2:72:53:73:53:71:ca:08:0d:08:b1:09:f8:e1:01:43:2b:
0f:a4:df:c5:b1:6f:d9:d3:6d:75:b8:94:35:8e:d3:95:34:5d:
b6:42:76:ea:cb:d4:98:91:a1:13:26:74:a9:4e:70:0a:58:3e:
03:08:36:44:ee:d9:10:f9:7c:88:d9:24:d2:b4:1d:53:6c:07:
b3:aa:f6:ad:58:1d:1a:d5:aa:4c:28:6e:d8:6a:40:c2:2d:74:
89:95:53:72:cb:4b:b9:1c:be:cc:4d:9c:67:ae:b1:91:76:9b:
87:43:70:42:29:d0:36:fb:d8:fc:c6:7b:8c:d5:ea:eb:23:75:
fb:5e:b4:40:3c:9c:84:ca:eb:9a:6d:84:ee:dd:38:76:60:97:
18:b9:23:ef:35:97:6d:e7:c3:2c:aa:ec:76:54:81:b9:3f:e2:
c6:df:82:88:7e:f7:2e:3f:72:a7:99:71:b5:09:8d:85:a5:f1:
58:59:60:f7:c9:89:96:d2:a7:e5:99:f2:8a:b4:79:7b:62:5b:
32:d6:60:75:b2:03:02:e7:e2:65:0c:75:b1:67:0b:95:11:57:
2e:8d:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:08 2026 by rpki-client