
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31382e302f32332d3233203d3e203233373731.roa
File: 3230322e3135302e31382e302f32332d3233203d3e203233373731.roa (raw, json)
Hash identifier: APocDbXRQg2wv31o48BTtqj07rqk2V0kwxEFZ1QU8xY=
Subject key identifier: 12:A2:2E:A0:C1:C8:8D:86:5D:C5:29:DD:98:E1:37:00:73:2F:68:08
Certificate issuer: /CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Certificate serial: 022065466736F9418DEC1C52572B0567CCD97D61
Authority key identifier: FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31382e302f32332d3233203d3e203233373731.roa
Signing time: Mon 20 Apr 2026 02:23:09 +0000
ROA not before: Mon 20 Apr 2026 02:18:09 +0000
ROA not after: Mon 19 Apr 2027 02:23:09 +0000
asID: 23771
IP address blocks: 202.150.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 09:06:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:20:65:46:67:36:f9:41:8d:ec:1c:52:57:2b:05:67:cc:d9:7d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB7B794F123725FE800A647F3F7E8BE99B1F5B2C
Validity
Not Before: Apr 20 02:18:09 2026 GMT
Not After : Apr 19 02:23:09 2027 GMT
Subject: CN=12A22EA0C1C88D865DC529DD98E13700732F6808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:47:47:90:d7:8e:a3:d1:5d:8f:6d:ed:2b:c1:
56:80:3e:5c:8c:47:c5:ea:99:eb:86:70:a8:6b:cf:
1d:c4:f8:d4:56:36:2f:aa:f7:04:90:52:36:99:6a:
ee:1d:e2:fa:73:7a:6c:60:8b:22:f7:d1:82:09:d0:
54:3b:02:9d:d1:fd:0a:b2:74:6a:62:4d:cd:19:55:
99:12:66:b3:f5:d1:f8:96:64:c1:67:cb:b3:d5:43:
35:92:0b:82:df:da:4c:a4:1f:7a:f9:73:f9:e8:a1:
71:98:ba:a8:0f:41:d3:01:3e:93:65:4c:0b:c6:a8:
9c:78:d2:61:bd:54:b6:64:85:5f:ee:7a:c2:ec:5e:
24:e4:7d:d0:5e:7d:ef:1a:9c:cd:4e:70:4a:b5:36:
08:74:d2:b0:6e:fc:4e:b6:6b:a4:64:72:ec:b2:53:
e6:71:66:1a:b1:02:23:bf:a2:7d:2e:c0:48:ae:da:
1f:28:2a:f2:9e:d1:7f:54:d6:92:4e:8a:bc:e9:ad:
96:f6:74:fb:37:72:eb:80:79:2d:65:a6:46:fc:f2:
ff:f2:73:0d:86:00:25:c2:a2:52:fb:4b:5c:2b:d9:
d0:7b:c9:be:4f:fe:12:46:3c:dd:52:bc:c6:b9:5e:
2a:f6:2d:46:97:50:b9:33:62:a3:5c:69:ae:c3:51:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:A2:2E:A0:C1:C8:8D:86:5D:C5:29:DD:98:E1:37:00:73:2F:68:08
X509v3 Authority Key Identifier:
keyid:FB:7B:79:4F:12:37:25:FE:80:0A:64:7F:3F:7E:8B:E9:9B:1F:5B:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB7B794F123725FE800A647F3F7E8BE99B1F5B2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372048386/0/3230322e3135302e31382e302f32332d3233203d3e203233373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.150.18.0/23
Signature Algorithm: sha256WithRSAEncryption
56:d9:1b:74:c1:a0:06:48:47:63:b5:73:e3:d3:45:23:22:b5:
a0:df:bb:77:95:20:b0:7e:2d:e7:6e:e7:30:39:12:c4:13:bc:
ad:72:fa:30:26:0d:c7:87:ef:69:e1:b3:01:23:31:d8:8e:62:
ad:1e:70:b4:b4:62:a8:00:7f:44:a6:b0:3b:8c:24:14:d3:b9:
3d:88:ab:23:2c:15:08:34:a8:61:12:6b:89:35:91:e0:cd:f5:
62:85:40:9f:df:93:f3:62:e3:63:fe:01:51:84:44:09:aa:f7:
23:6d:de:24:21:b6:8f:a5:73:5c:92:b8:9b:f5:33:b9:52:06:
a4:e7:7c:6c:ee:e8:d8:cb:6d:24:85:6d:b4:5f:c0:87:aa:24:
94:36:c2:1f:61:b4:9a:97:d2:31:cf:c5:55:ed:c8:0f:54:5e:
e2:33:39:de:12:c1:30:95:2c:85:cf:cb:85:11:67:bb:94:0c:
56:3b:1f:01:8f:ce:f5:a0:e2:33:9e:75:b5:5a:35:ca:62:79:
8e:6a:a6:27:31:40:56:af:39:b0:80:2e:9f:45:a7:61:3a:00:
27:57:ec:fc:8f:0c:c4:38:ae:d0:a1:60:d9:03:d6:99:f3:a9:
f0:bf:1c:99:23:4d:5a:61:72:d6:99:82:6a:d8:d9:15:95:01:
fc:ef:d5:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 19:53:45 2026 by rpki-client