
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3132382e302f32302d3230203d3e20313334373634.roa
File: 3132342e3137322e3132382e302f32302d3230203d3e20313334373634.roa (raw, json)
Hash identifier: sIw2rlpkcXOmtedJJQjffU3mep2nK4nzxppeBujT50c=
Subject key identifier: 06:C6:16:9E:1F:B9:F4:B3:3D:F2:7A:77:B5:1F:76:17:DB:F1:A2:06
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 2EDF79C0D6DA25D35E02D375AAB903CB85B70114
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3132382e302f32302d3230203d3e20313334373634.roa
Signing time: Tue 14 Apr 2026 03:29:05 +0000
ROA not before: Tue 14 Apr 2026 03:24:05 +0000
ROA not after: Tue 13 Apr 2027 03:29:05 +0000
asID: 134764
IP address blocks: 124.172.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:df:79:c0:d6:da:25:d3:5e:02:d3:75:aa:b9:03:cb:85:b7:01:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:24:05 2026 GMT
Not After : Apr 13 03:29:05 2027 GMT
Subject: CN=06C6169E1FB9F4B33DF27A77B51F7617DBF1A206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f3:0a:e4:7b:7a:5d:1d:5c:2e:0a:53:6f:93:
e2:c6:ac:d0:8c:3e:fb:e3:3a:f2:2e:10:74:d9:ec:
f2:62:6b:88:19:bc:43:7f:d8:7a:72:b3:23:dc:7d:
1f:57:a8:b2:4b:8d:09:e8:41:b1:b4:33:4d:d7:8b:
9a:06:89:a4:3f:3f:d6:b8:dc:37:bb:9c:d2:bf:53:
d0:6a:42:35:f0:bc:83:19:4f:90:4d:ce:49:bf:e5:
6d:75:58:b2:37:0d:27:23:66:4c:53:bc:59:c2:11:
40:32:af:28:36:41:17:66:02:17:9f:b8:c0:04:ba:
6f:cb:21:ca:b1:d1:8f:3f:4e:d9:14:b1:dc:2b:d1:
51:91:74:22:49:ac:b2:e6:2e:bd:13:9a:cc:7e:df:
a6:be:4c:a9:e8:2a:42:a6:de:e8:df:c9:b6:83:82:
6b:b8:fa:43:a0:aa:24:6c:f8:a6:c6:de:e1:f9:39:
a4:2b:30:a5:bb:63:dc:07:af:45:35:67:36:16:b9:
bf:d3:55:fa:b5:e2:14:78:3a:0c:ba:d5:22:54:d7:
05:88:83:25:33:98:8a:ac:2e:3f:85:95:b1:b7:f7:
40:4f:15:99:07:0c:33:66:44:25:8b:50:58:9f:cc:
e7:8a:8a:61:f9:9c:22:95:f2:f5:41:bf:df:71:de:
6a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C6:16:9E:1F:B9:F4:B3:3D:F2:7A:77:B5:1F:76:17:DB:F1:A2:06
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3132382e302f32302d3230203d3e20313334373634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.172.128.0/20
Signature Algorithm: sha256WithRSAEncryption
54:91:ba:94:f8:4e:dd:74:58:8f:e6:70:1f:90:2f:f7:ed:e7:
00:46:9a:73:99:4b:05:c8:98:5d:66:2c:13:39:e8:bb:6f:a4:
1b:e4:e7:7b:1b:1e:29:cb:90:2f:82:de:60:ba:df:eb:41:06:
5b:8e:9c:d6:6e:19:2f:61:ce:ca:66:bf:5b:af:f1:e5:2a:f4:
2c:23:b6:51:ed:9b:20:23:4a:27:94:87:83:ee:b8:79:87:5d:
90:76:81:ae:6d:8f:dd:6d:fe:2c:69:ee:29:06:96:50:bf:01:
f2:68:8a:6b:87:57:6e:b7:b6:6b:75:46:9f:df:0d:d8:3c:b2:
90:b2:e2:e8:3f:4f:af:3d:be:df:f2:8a:d8:ae:a5:e5:03:00:
b7:fa:c8:0c:64:77:c0:56:d7:7a:f3:72:a8:1e:fa:03:8f:86:
9d:16:ab:67:17:06:76:8b:2c:25:7a:d0:c1:7a:1d:66:9e:4a:
de:12:40:d4:69:f2:28:55:0e:50:db:c5:4a:e7:14:e5:80:00:
ed:9f:42:7e:e4:2b:52:b9:dd:54:8f:a4:ec:5f:94:e7:8c:b4:
1e:f6:60:61:9a:b2:60:3c:3e:33:b6:10:f8:aa:68:8f:36:97:
47:a8:df:01:2e:85:84:5f:a3:4c:77:4d:60:49:47:63:0e:53:
1b:6a:84:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:50:01 2026 by rpki-client