
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
File: 3132342e3137322e302e302f31372d3234203d3e2039333034.roa (raw, json)
Hash identifier: wocpl3Tnv8dIsMbES2nIlUUl5pFueWfyjQ1D0QsAisg=
Subject key identifier: 7C:78:B8:AC:6E:FC:76:E7:78:F4:DF:38:CC:6C:C8:A7:22:6E:B4:B8
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 0B7676843DE94F6E8DFC8FEC0818AF74410E9DF3
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
Signing time: Fri 11 Sep 2026 12:25:25 +0000
ROA not before: Fri 11 Sep 2026 12:20:25 +0000
ROA not after: Fri 10 Sep 2027 12:25:25 +0000
asID: 9304
IP address blocks: 124.172.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:76:76:84:3d:e9:4f:6e:8d:fc:8f:ec:08:18:af:74:41:0e:9d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:25 2026 GMT
Not After : Sep 10 12:25:25 2027 GMT
Subject: CN=7C78B8AC6EFC76E778F4DF38CC6CC8A7226EB4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8e:de:bc:62:ea:6a:64:b8:6a:5d:86:5d:38:
20:cf:40:6e:64:04:11:6c:ec:f8:cc:52:b0:8f:a4:
f7:e9:23:ad:74:8b:7f:a5:66:03:aa:1a:37:8f:e0:
27:f8:19:f6:92:3d:b6:7d:57:d8:94:23:5d:55:f6:
f6:cb:02:5f:9f:b3:31:64:7b:85:d8:5d:5e:ae:1d:
13:ce:2c:13:4b:a2:92:be:fe:a2:ce:5b:45:b2:56:
bb:20:57:f9:10:17:55:c1:b4:a1:55:93:30:4f:f1:
5e:2a:2c:58:b9:a0:c1:38:d6:76:b9:e5:6b:52:4e:
c9:b2:9e:5e:ab:02:c2:56:d6:3d:9d:e2:94:93:de:
a8:f1:78:ab:75:a4:e4:a4:91:e9:b1:59:83:96:f9:
00:93:0f:28:c4:7e:dc:28:1e:a6:bc:09:b3:76:24:
65:c3:ef:fb:51:3a:98:39:1d:53:e2:30:e5:70:52:
4f:e8:e0:c7:d7:6b:a5:31:8a:ab:45:e8:27:0f:2c:
ef:fe:9c:0d:5f:b5:d9:77:bf:f1:29:36:fe:10:59:
88:c2:e7:ae:ff:4a:86:41:48:70:04:fc:12:05:e6:
32:af:5f:d5:c1:10:42:0b:f9:01:97:b4:ad:09:4d:
e0:6b:37:48:90:29:8a:2e:01:2a:19:00:e7:d0:fa:
a5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:78:B8:AC:6E:FC:76:E7:78:F4:DF:38:CC:6C:C8:A7:22:6E:B4:B8
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.172.0.0/17
Signature Algorithm: sha256WithRSAEncryption
8e:b4:50:66:11:88:82:4e:d7:64:47:a6:ed:79:84:a3:b3:d0:
ef:9c:da:b4:33:2a:93:6e:e4:78:2a:5c:42:10:71:19:ed:e4:
b8:55:db:b6:a5:52:57:4c:1b:ab:ad:a1:d8:72:e0:11:f0:07:
17:d0:48:91:10:cf:b4:65:ed:7c:f7:c2:8c:bf:4e:f3:18:a8:
c3:8a:1d:77:c8:bd:eb:f4:21:e2:4e:39:02:1a:dd:24:25:c3:
b2:94:12:83:53:02:9f:46:ff:d7:c7:fe:6d:9c:8c:1a:85:03:
76:e5:4a:bb:42:1b:37:41:e3:36:fb:90:ae:86:6a:34:6b:e4:
49:65:8f:a7:74:e6:c0:a0:4b:22:85:0c:c1:6f:cc:18:e0:b1:
ac:3f:46:14:d5:e4:e6:2c:51:fe:d8:fa:89:66:27:12:0f:7c:
97:07:76:cf:39:ca:50:64:f3:13:4c:1a:f7:73:a7:75:08:36:
6e:07:e9:dc:38:01:93:c5:a6:52:b9:d3:04:62:e6:15:e1:16:
2a:91:1d:95:83:a3:ab:cf:05:1f:10:66:f3:ae:d7:11:88:b4:
2d:e9:b7:46:93:36:ab:43:43:6f:c2:14:84:75:d8:8a:da:39:
df:a0:f3:0f:2e:79:99:b1:bb:7f:c4:c6:e7:16:ec:fc:b6:e2:
3d:91:53:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:41:50 2026 by rpki-client