
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20323037353530.roa
File: 3132342e3137322e302e302f31372d3234203d3e20323037353530.roa (raw, json)
Hash identifier: OyY8PmgtzTR0jpT/VqZbFxCYKsQ4otMG6MJCPtlqGyk=
Subject key identifier: 6F:D9:D3:E0:72:72:19:DC:9A:7E:3C:4E:DA:E5:7B:D8:3F:A5:35:33
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 13CFAF95E1B51F999C17B0BA4274A527C75A387D
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20323037353530.roa
Signing time: Fri 11 Sep 2026 12:25:25 +0000
ROA not before: Fri 11 Sep 2026 12:20:25 +0000
ROA not after: Fri 10 Sep 2027 12:25:25 +0000
asID: 207550
IP address blocks: 124.172.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:cf:af:95:e1:b5:1f:99:9c:17:b0:ba:42:74:a5:27:c7:5a:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:25 2026 GMT
Not After : Sep 10 12:25:25 2027 GMT
Subject: CN=6FD9D3E0727219DC9A7E3C4EDAE57BD83FA53533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:03:75:73:d0:69:14:b7:53:60:58:28:b1:a9:
8c:5e:8c:fb:d5:a8:47:4a:68:70:02:28:25:af:5d:
a1:c8:78:d0:73:1f:95:57:24:ea:6b:c1:b7:56:51:
13:28:7f:d5:79:a3:5b:44:44:43:6f:55:4e:93:e0:
52:63:fe:8b:42:07:78:93:2b:d1:28:bc:bd:b3:84:
56:63:72:99:5f:32:77:5a:1c:09:18:43:07:b1:6e:
08:80:a5:01:a0:15:3c:ac:6b:6a:96:a8:07:3a:f4:
3c:21:64:2e:a5:89:2c:f1:4c:a5:29:03:e9:66:16:
10:70:f7:a3:02:0f:31:80:96:79:a2:3c:d0:2c:44:
5c:2d:5e:df:ab:4c:2a:a1:1e:9c:7a:10:6b:6c:41:
99:67:2e:70:ed:18:0b:12:5c:46:39:0b:24:2b:23:
9d:25:ac:eb:a6:b9:d7:58:61:1f:bf:20:1d:6c:98:
ff:31:e2:c6:69:17:9f:04:fb:26:99:cc:8e:8d:11:
1d:88:fc:ac:5c:58:c5:e8:ce:de:35:62:07:69:86:
c7:96:88:17:b4:7d:52:da:01:12:b2:30:61:d7:0c:
bd:57:8e:29:ff:a4:ad:1b:16:ae:68:33:07:81:7e:
34:e7:7c:2a:f9:c3:51:66:ec:ff:0c:08:16:be:9c:
28:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:D3:E0:72:72:19:DC:9A:7E:3C:4E:DA:E5:7B:D8:3F:A5:35:33
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.172.0.0/17
Signature Algorithm: sha256WithRSAEncryption
71:89:52:48:4b:3f:db:d5:f5:24:a8:7f:73:03:a4:ec:42:a7:
8e:de:54:d8:28:28:f6:43:0e:12:6a:e9:cc:ce:50:52:ef:bd:
3b:e2:93:59:ee:d5:72:9c:32:4c:24:d3:76:90:3f:fc:8b:45:
8c:e7:81:1c:1e:ba:f6:bd:1b:a1:6c:ad:47:cf:aa:21:52:d9:
93:29:a9:1c:de:1c:8a:35:81:f2:39:f8:d3:b6:79:fa:3c:53:
2d:95:da:d6:73:56:89:36:4a:9e:ce:5f:10:df:1c:a6:d6:51:
36:e8:77:5b:6c:38:e3:15:40:8d:a0:4f:0b:c5:09:bb:88:46:
50:c2:89:e7:83:39:3b:bb:13:f2:52:c8:95:91:b7:76:8f:44:
b7:ff:be:99:ed:5f:69:f1:42:61:ad:fb:60:e5:ce:ef:0e:cf:
41:c6:9f:a4:f4:df:8e:5b:6b:80:d2:52:18:d2:11:ae:8f:65:
37:e3:44:6b:d7:c5:ce:87:b1:60:08:f9:f9:ba:0f:c1:75:7a:
f1:a3:2d:98:79:2f:62:b7:45:c4:4f:b1:99:a8:c5:a6:4a:f9:
d7:f1:8b:88:12:2a:0f:80:72:ac:a8:1d:58:8d:68:ec:84:95:
8b:5d:aa:22:44:ff:e7:c2:27:0f:18:32:40:4e:e6:0f:70:0c:
7f:d7:eb:27
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Sep 21 23:53:12 2026 by rpki-client