
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132312e3139362e302e302f31342d3234203d3e203337393633.roa
File: 3132312e3139362e302e302f31342d3234203d3e203337393633.roa (raw, json)
Hash identifier: VIK42kLl40M62M4NFFaGI0sCW//wqVXcQjLHAswJ7Cs=
Subject key identifier: AC:FD:0C:FB:53:FF:E7:BA:FE:69:C0:61:32:C7:38:39:71:5B:E2:08
Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Certificate serial: 6F8176C498DCFA3CCDB5A890EEC549963CB2E7A8
Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132312e3139362e302e302f31342d3234203d3e203337393633.roa
Signing time: Tue 21 Apr 2026 02:31:28 +0000
ROA not before: Tue 21 Apr 2026 02:26:28 +0000
ROA not after: Tue 20 Apr 2027 02:31:28 +0000
asID: 37963
IP address blocks: 121.196.0.0/14 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 23 Apr 2026 06:19:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:81:76:c4:98:dc:fa:3c:cd:b5:a8:90:ee:c5:49:96:3c:b2:e7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E
Validity
Not Before: Apr 21 02:26:28 2026 GMT
Not After : Apr 20 02:31:28 2027 GMT
Subject: CN=ACFD0CFB53FFE7BAFE69C06132C73839715BE208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:86:31:51:55:00:d9:db:13:ec:ea:33:ba:
f0:04:da:88:af:5e:6f:6c:69:74:33:cf:e2:d1:9b:
f4:cf:94:d1:be:a1:9d:4c:67:1d:3f:bd:4e:84:64:
3a:63:e8:cf:0b:68:ec:e0:1b:0c:3c:24:1b:5c:94:
f8:01:b4:48:51:68:92:d7:0c:a7:c2:74:f9:ca:43:
43:af:d7:00:64:7e:87:58:d9:e2:67:55:ea:4c:96:
fc:7f:c9:9a:66:7c:fd:28:55:53:b9:eb:85:19:f1:
3a:d4:03:a7:9a:c7:b3:44:c0:cb:b5:32:34:87:f5:
23:9a:3a:f7:b6:de:eb:f5:6d:8c:13:59:b8:8d:79:
7f:f5:5b:4c:b7:16:96:51:6d:d9:7d:26:60:30:b2:
a3:96:c9:8e:f5:b0:43:04:83:08:35:90:28:51:49:
6a:bf:f0:72:26:c1:87:47:b0:8e:8a:6e:1d:3b:f6:
c6:7b:9c:08:34:2c:9a:0c:4d:8e:a5:65:10:9b:e2:
69:f6:21:a5:4a:bb:df:49:83:50:03:67:d2:56:16:
bb:97:99:d2:1b:69:6c:57:8c:b3:30:5b:4d:fa:da:
e3:83:af:db:a0:08:17:12:6b:e6:6f:6e:d0:9e:f0:
cd:87:54:69:f0:c9:c6:0f:cb:3d:77:70:c7:74:61:
5e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:FD:0C:FB:53:FF:E7:BA:FE:69:C0:61:32:C7:38:39:71:5B:E2:08
X509v3 Authority Key Identifier:
keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/3132312e3139362e302e302f31342d3234203d3e203337393633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.196.0.0/14
Signature Algorithm: sha256WithRSAEncryption
01:f4:04:c3:66:d1:58:23:85:62:5e:58:5f:57:71:6c:02:ba:
c1:ca:a5:76:79:e4:f9:81:9e:a1:d4:09:43:ab:dc:81:12:89:
a9:82:c2:f4:17:2f:d4:b8:a8:87:72:dd:cd:9e:96:11:09:ca:
04:02:e1:d2:d2:34:6c:f0:21:26:45:a3:36:96:01:73:a9:0e:
17:4b:cc:43:ef:d7:c9:d3:9d:f6:94:53:7e:44:01:d5:0c:3a:
7d:9a:85:df:2c:09:db:ff:65:b2:2a:3c:36:27:e1:e9:75:cf:
7e:54:ee:c2:d1:cf:89:cb:8d:8b:a7:7d:e8:98:84:f4:c4:57:
a0:10:86:c2:c7:79:00:e3:81:4c:c5:42:20:fd:53:3f:c2:ca:
dc:00:f3:9a:d0:87:6d:29:76:96:3b:af:36:af:46:ce:a0:5f:
c1:b3:ed:c6:0a:83:1f:c6:fb:7f:0d:8f:14:79:28:26:58:be:
d8:a2:17:aa:71:b7:44:eb:6f:94:1a:a0:3b:ac:37:6a:d5:d1:
ff:9c:93:01:23:94:ab:34:6a:b1:f3:57:64:17:89:f7:34:80:
bf:5e:b0:62:87:56:e5:d8:b6:64:7c:ec:c1:d0:5f:3a:b6:57:
f7:f5:49:81:47:6d:73:09:19:89:3d:d7:59:b2:08:19:a9:8a:
99:24:98:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:42:11 2026 by rpki-client