
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
File: 3132342e3137322e302e302f31372d3234203d3e2039333034.roa (raw, json)
Hash identifier: wzhjUixHxuEn25XEbItvavgici2ZTpc31bNca5UY+Hs=
Subject key identifier: 88:A9:F4:75:64:73:C5:DD:36:40:40:EE:40:5C:B4:AC:C9:01:8F:0A
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 6B3ED2BF794FA833F6CAF9A4B181788B9E9544FC
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
Signing time: Fri 05 Jun 2026 10:22:55 +0000
ROA not before: Fri 05 Jun 2026 10:17:55 +0000
ROA not after: Fri 04 Jun 2027 10:22:55 +0000
asID: 9304
IP address blocks: 124.172.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3e:d2:bf:79:4f:a8:33:f6:ca:f9:a4:b1:81:78:8b:9e:95:44:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Jun 5 10:17:55 2026 GMT
Not After : Jun 4 10:22:55 2027 GMT
Subject: CN=88A9F4756473C5DD364040EE405CB4ACC9018F0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b9:38:2c:4a:fe:ce:39:78:52:8a:85:2d:93:
91:08:a9:d4:ad:6f:fa:ed:71:bb:69:d5:18:02:9b:
e5:87:d8:26:bd:19:a7:90:89:ea:92:fe:c4:37:8e:
25:27:04:16:0d:e7:7d:a2:78:0e:f5:ea:68:c8:53:
ac:b3:ff:0b:51:97:23:db:f9:a2:86:08:97:fc:fe:
f4:5c:f6:41:10:3e:af:21:ca:f2:95:c2:c0:ed:ec:
5a:66:1a:d2:36:64:72:11:fe:77:48:92:70:b0:92:
a2:7b:e2:7f:c6:21:28:f5:43:5b:11:03:8c:70:d0:
c4:25:c4:ec:be:22:a4:6a:83:5a:68:d6:c8:13:23:
b7:d3:ea:27:ec:26:c7:81:54:a2:22:33:dd:fd:2d:
f6:4e:96:3a:33:64:71:b7:2c:c5:21:2a:65:57:7e:
5b:6b:20:58:34:e7:33:0d:a0:95:c6:d5:66:6c:68:
70:63:3c:c7:ad:67:10:57:eb:71:5f:8e:e7:ff:65:
ef:2c:a9:f8:2e:5d:c4:35:48:5f:fe:25:9d:97:5b:
2a:a0:a2:b9:ca:6d:65:53:34:b4:e5:96:65:76:db:
72:d1:31:7c:d1:42:e3:dd:7e:09:9d:0d:b3:ee:02:
37:c3:1d:58:63:a6:07:51:1a:10:e3:ef:65:d8:ea:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A9:F4:75:64:73:C5:DD:36:40:40:EE:40:5C:B4:AC:C9:01:8F:0A
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.172.0.0/17
Signature Algorithm: sha256WithRSAEncryption
01:bb:dc:eb:e0:7b:d3:4d:d4:7c:54:01:e0:54:24:04:79:01:
89:f8:3a:54:a0:32:ee:23:6e:f7:65:ef:fd:06:65:cc:ac:16:
11:d5:5a:6b:64:21:8a:fc:ff:d1:e7:23:d4:14:c0:cf:3d:7a:
89:47:dd:76:61:fb:04:dc:db:30:cc:01:64:bf:0d:d4:24:0f:
5d:98:67:22:2a:19:58:e9:f2:48:64:c7:3e:24:bc:9e:9a:54:
79:4b:66:52:5f:9f:5c:57:39:a8:69:25:3a:60:73:58:ec:87:
d2:2f:30:82:b3:a1:4c:ae:e7:c1:c4:58:55:59:df:80:8e:7a:
ad:3f:96:50:ba:0c:f9:d6:0b:84:e5:fc:a7:36:6c:ba:e1:85:
ef:08:ea:83:23:9f:b0:36:11:4a:9f:fb:2f:55:76:c2:6c:a1:
97:b7:ae:c3:e1:16:83:7e:ba:23:c1:26:80:de:f8:a1:da:ee:
79:bd:62:a2:b3:84:6e:a4:26:07:4d:a8:0f:16:74:0f:51:c7:
9e:89:46:a8:22:8d:25:67:e4:ad:21:3d:cd:82:ee:9c:58:9a:
7f:d0:db:9c:e2:59:c7:71:2f:1c:e1:1b:12:7c:ec:fd:36:53:
c0:7f:34:86:d1:69:e3:1f:44:ad:78:30:3c:65:53:31:5f:19:
6b:0e:97:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:07:19 2026 by rpki-client