
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f31392d3139203d3e203137383136.roa
File: 3230332e3133322e33322e302f31392d3139203d3e203137383136.roa (raw, json)
Hash identifier: JHV9DWtHd25XcNBYusyloRBERX6MOPXS5ADm/HT/qQ4=
Subject key identifier: 9A:54:EC:5C:7F:5C:5C:76:0D:BF:CA:0D:8E:9E:22:E2:54:39:B0:6F
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 654F90531ACAA24F16974D12CBCDB49642A2DCEA
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f31392d3139203d3e203137383136.roa
Signing time: Fri 24 Apr 2026 03:16:00 +0000
ROA not before: Fri 24 Apr 2026 03:11:00 +0000
ROA not after: Fri 23 Apr 2027 03:16:00 +0000
asID: 17816
IP address blocks: 203.132.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:59:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:4f:90:53:1a:ca:a2:4f:16:97:4d:12:cb:cd:b4:96:42:a2:dc:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Apr 24 03:11:00 2026 GMT
Not After : Apr 23 03:16:00 2027 GMT
Subject: CN=9A54EC5C7F5C5C760DBFCA0D8E9E22E25439B06F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:11:e2:2d:a0:c8:9c:91:71:6e:93:a5:8c:f2:
a3:dd:93:33:7e:b0:c0:a2:d4:03:78:35:22:30:0e:
d3:00:91:24:6f:80:6f:89:f2:0a:75:f2:ca:1f:78:
aa:e6:17:6a:4b:8e:28:b8:00:f8:b3:4a:19:1e:f4:
41:c1:6b:bf:41:f5:fe:40:50:df:5d:d6:80:fa:44:
5c:c0:11:99:d5:c5:88:e9:5b:4e:52:e2:7f:89:46:
90:ed:d6:a8:5d:8d:36:8f:5c:43:dc:62:9c:d2:ae:
4d:b1:ee:16:5e:5c:72:fc:86:ab:4e:73:7f:98:e0:
07:fa:c4:a9:24:c5:4c:9f:9a:15:7f:d8:b4:fc:47:
dd:fa:03:05:4d:85:72:f8:d1:53:da:a6:29:b4:90:
65:02:22:f1:a2:1f:d5:ab:fd:58:2c:f5:b6:26:1e:
c7:af:ca:37:66:08:e8:c6:fd:9d:61:a3:ba:e3:c1:
fd:e9:32:99:ac:0b:b5:f0:b8:04:81:91:bb:04:4c:
3c:1a:2f:2f:fd:51:d2:92:ef:0b:83:28:13:0e:92:
57:2a:a7:4e:ac:f3:eb:3b:10:30:7c:cb:e4:aa:1a:
55:19:5d:05:1d:8e:43:64:f4:53:88:02:7d:0d:58:
0d:f1:f5:1b:b1:39:ec:2d:7e:fa:ba:38:ec:18:7b:
26:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:EC:5C:7F:5C:5C:76:0D:BF:CA:0D:8E:9E:22:E2:54:39:B0:6F
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3230332e3133322e33322e302f31392d3139203d3e203137383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.132.32.0/19
Signature Algorithm: sha256WithRSAEncryption
71:6e:02:13:dd:8b:3e:ef:b7:f8:48:a5:a1:1f:e8:ac:5a:ba:
70:f9:f7:9f:f5:0b:bf:10:a4:e6:29:20:29:e3:41:0a:e9:c4:
0a:ce:93:c0:41:93:47:86:8d:5a:f4:ea:09:5f:d2:73:2a:a4:
10:e8:52:00:01:e6:e5:40:f0:01:93:8d:bf:ac:c4:2a:89:94:
b9:7c:71:d8:86:4a:d9:f3:20:b7:50:dd:2f:c2:f6:8a:71:dd:
e1:4d:3a:25:d7:93:e2:bc:50:55:e5:01:e4:20:c7:de:5c:8a:
d2:3c:70:3b:6c:c9:30:2b:32:fa:b6:ce:0f:ea:40:6e:2d:ce:
a6:2e:59:cc:bf:4a:e4:25:9b:c5:5f:6b:20:ac:2e:92:57:35:
b8:fb:3a:e2:33:cb:43:a4:7d:fa:5a:f9:2b:cf:87:0b:1a:01:
6b:eb:e1:ad:d2:0c:ea:d3:85:57:c3:5d:59:d9:be:71:d8:74:
33:4f:f5:6b:75:c6:c1:43:2b:38:08:f5:de:d7:49:2f:e3:40:
39:c9:44:38:91:60:dc:ef:21:33:a7:d8:81:72:1a:a8:ec:ad:
b5:01:65:03:7c:9f:dd:7d:f2:70:74:d9:27:64:d0:86:eb:34:
e3:89:e5:be:74:8a:21:be:ef:76:15:c4:b8:ed:27:44:b4:d4:
dc:1c:24:95
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:21 2026 by rpki-client