
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e33372e302f32342d3234203d3e203233373731.roa
File: 3132342e34372e33372e302f32342d3234203d3e203233373731.roa (raw, json)
Hash identifier: XuTsL6FFmlhdq/DaiDoVMBr4LMcVY3+mp6PXtl8RjVc=
Subject key identifier: 8A:41:3C:81:1F:14:A2:A9:FE:4C:91:A6:0B:74:25:B0:8D:1E:80:9E
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 255B47310755D30CCFBF251C426EE2F2FD2D43F4
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e33372e302f32342d3234203d3e203233373731.roa
Signing time: Mon 20 Apr 2026 02:22:34 +0000
ROA not before: Mon 20 Apr 2026 02:17:34 +0000
ROA not after: Mon 19 Apr 2027 02:22:34 +0000
asID: 23771
IP address blocks: 124.47.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:5b:47:31:07:55:d3:0c:cf:bf:25:1c:42:6e:e2:f2:fd:2d:43:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 20 02:17:34 2026 GMT
Not After : Apr 19 02:22:34 2027 GMT
Subject: CN=8A413C811F14A2A9FE4C91A60B7425B08D1E809E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:b6:0a:86:e1:2b:86:89:ef:82:ca:b6:2b:
49:a0:c3:e4:6e:6d:c5:ef:da:28:74:21:ff:53:01:
e3:6d:50:ab:fa:29:92:e3:99:d4:93:3b:d5:5a:cc:
5e:16:e9:2f:f0:fb:d1:09:12:6f:02:bd:61:08:33:
1b:27:49:8d:f5:14:d5:1d:34:17:65:db:a2:a7:8c:
ee:fa:2d:df:0a:54:25:7c:f5:79:db:f4:cb:fb:f1:
b5:29:4e:c1:b8:4e:c8:1a:95:a7:10:21:f6:a2:b3:
74:87:60:26:65:d2:05:0d:8c:6c:89:b3:c9:ad:87:
d1:6c:02:8d:86:8e:69:05:d7:5b:e2:26:f7:ad:2b:
09:68:bc:2a:66:a9:9c:04:24:e4:70:d6:aa:cb:9b:
14:0e:e3:74:39:96:e2:7b:c8:20:4d:8a:4f:79:b6:
04:25:47:50:9d:28:55:c9:93:51:61:c6:bb:c7:72:
32:ec:af:9a:57:64:1d:d2:bc:a5:e9:22:fa:82:26:
bc:81:2c:c7:7d:ea:97:11:3c:63:7b:b5:90:36:80:
55:37:2a:f8:d1:7e:91:f5:28:60:ea:2e:11:1e:eb:
54:34:09:7f:cd:a3:36:68:d8:6d:82:88:63:22:1f:
dc:ce:8a:e8:70:16:cc:da:15:d0:8a:b0:7b:2a:d2:
97:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:3C:81:1F:14:A2:A9:FE:4C:91:A6:0B:74:25:B0:8D:1E:80:9E
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3132342e34372e33372e302f32342d3234203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.47.37.0/24
Signature Algorithm: sha256WithRSAEncryption
37:7e:56:e3:84:aa:14:ab:6a:8d:66:a1:cb:22:a3:4f:c4:bc:
ad:eb:65:ef:95:34:5a:3b:66:d3:f1:20:30:31:ca:0b:9a:7e:
a3:67:7d:36:48:2f:9b:27:eb:65:89:99:4f:9c:f7:04:01:82:
15:b6:e1:a2:e7:4b:0b:b3:7b:95:4b:12:25:d2:f9:7f:5c:e0:
42:6b:4c:35:5a:d1:9b:0a:50:df:8f:c8:14:90:75:7b:e8:67:
9d:ec:d0:db:dc:56:7e:74:e8:c2:37:c7:55:63:1d:cd:b7:5c:
91:4b:d1:10:44:7f:d4:7d:b9:67:fc:54:f1:7b:d4:5b:07:85:
c2:64:37:86:cb:07:25:e6:ed:a6:dc:95:c0:94:30:01:82:4f:
5a:82:77:77:ba:51:3f:80:92:ed:8f:8c:9d:c8:82:de:e8:71:
74:58:85:a8:6e:13:db:10:23:aa:1e:84:21:cc:96:f4:6b:c8:
75:cf:d9:27:ee:77:40:9a:95:94:e5:85:d0:5f:91:16:9f:b6:
ed:c8:41:00:e9:85:9f:14:05:01:c7:a1:79:23:7d:9e:2d:b4:
5f:3e:e4:0c:1c:cb:bf:25:a5:8a:6b:59:4b:a1:22:23:03:e9:
f3:c3:ea:82:84:9a:3d:16:59:3d:61:68:de:01:ef:c3:1e:f2:
3b:a5:ad:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:53:45 2026 by rpki-client