
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3139203d3e203137383136.roa
File: 3230322e3136382e3136302e302f31392d3139203d3e203137383136.roa (raw, json)
Hash identifier: N4n5YGUlr8DeOENofLpOHA7WFwEftfsypOLIS1Kbw04=
Subject key identifier: 34:9C:38:42:6D:72:27:57:B0:FD:6A:84:44:DD:CD:39:48:12:15:3A
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 4A87324E2260CEB212F280722A818424B2FCE54E
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3139203d3e203137383136.roa
Signing time: Fri 24 Apr 2026 03:16:00 +0000
ROA not before: Fri 24 Apr 2026 03:11:00 +0000
ROA not after: Fri 23 Apr 2027 03:16:00 +0000
asID: 17816
IP address blocks: 202.168.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:87:32:4e:22:60:ce:b2:12:f2:80:72:2a:81:84:24:b2:fc:e5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 24 03:11:00 2026 GMT
Not After : Apr 23 03:16:00 2027 GMT
Subject: CN=349C38426D722757B0FD6A8444DDCD394812153A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:30:47:7e:3a:ee:cc:15:41:36:5c:3a:f1:
64:ee:2f:0f:85:56:ad:c8:54:f8:16:45:27:f4:d0:
ff:b8:60:9d:27:10:dc:ce:4b:11:3f:44:c8:ad:6a:
66:59:a0:d3:65:7f:58:2e:2e:0a:76:08:90:16:c6:
5d:37:53:0d:5c:01:7e:74:d2:42:07:49:b3:92:b6:
30:45:ab:2b:22:1e:e3:9d:9e:2e:db:59:f3:bb:b6:
42:9c:ac:4d:48:e2:57:28:90:e9:20:4e:81:6a:9d:
40:b6:56:f4:0c:ec:b0:85:42:ed:71:51:a9:12:b5:
8f:7c:84:b5:24:1a:ac:39:3c:21:d0:92:34:a0:d8:
c4:dc:3b:c2:02:fb:73:db:da:5f:dd:24:4f:77:8c:
79:79:10:0f:fa:36:37:a4:93:e7:74:d5:ef:69:4b:
94:16:78:7b:12:fb:57:a6:c2:85:86:a2:5c:98:da:
ec:d9:b6:3e:a0:4a:da:1c:46:8d:6a:61:b0:d5:51:
95:75:e9:6a:2c:67:ff:50:02:59:61:cf:a4:0b:34:
70:3f:a4:2a:c6:d3:44:57:4d:1c:d5:8d:a3:df:be:
52:31:26:91:d4:7d:a5:68:90:99:88:59:8f:8b:41:
ea:d1:42:39:d1:fe:66:a4:d1:5c:7a:46:af:b9:13:
1c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:38:42:6D:72:27:57:B0:FD:6A:84:44:DD:CD:39:48:12:15:3A
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230322e3136382e3136302e302f31392d3139203d3e203137383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.168.160.0/19
Signature Algorithm: sha256WithRSAEncryption
53:4b:5d:4d:db:fd:b2:eb:45:0e:6f:84:18:f4:b5:ec:92:5c:
1b:66:1d:4d:f6:85:8d:ad:d8:b3:69:34:1a:a2:1f:29:5b:73:
b2:19:ac:71:28:ef:61:0c:26:bb:a5:e6:74:e4:af:1e:ea:31:
ff:98:26:b2:3a:a9:7d:3b:4f:7b:86:31:ce:29:db:1d:3e:70:
46:4e:b9:7c:d5:37:7b:59:11:97:25:58:9b:94:2e:8e:8c:fc:
1e:cb:da:5e:32:a4:5c:fe:cf:dc:cc:5a:53:35:9c:85:17:f4:
15:ea:64:3f:a0:b2:fe:38:14:8f:a6:30:e0:5f:99:68:f8:84:
ee:11:8a:1c:68:ff:2a:a3:62:7a:e6:03:e5:e6:91:65:2f:be:
9a:8c:7e:d9:12:34:e3:6d:cb:28:c3:90:c2:86:7a:67:91:47:
16:e0:10:c5:4c:de:2c:2b:84:73:08:b5:8a:c4:7c:dc:33:74:
3e:94:0d:e8:9e:e9:f2:4c:42:43:3b:c2:35:45:06:72:29:7f:
36:a4:27:85:8a:67:e1:70:4c:a7:a9:7c:23:00:62:6a:60:66:
a9:f4:a2:84:e3:35:0a:61:81:51:e6:82:a4:73:06:8d:b2:ff:
f9:bc:5f:69:2b:2c:60:72:09:82:21:25:46:25:fc:59:8e:b9:
02:c3:f6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:14:28 2026 by rpki-client