
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa
File: 3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa (raw, json)
Hash identifier: vgV+KiCL7Jh1Hpz3MBlVM5eiO1wvYW4p4cVHC26reZc=
Subject key identifier: 26:80:58:A2:07:20:DF:AC:FF:DA:01:4C:3C:B6:36:49:AB:31:73:19
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 568881FB1EA9F50F2067BCEBF011C8BA79D757
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa
Signing time: Tue 14 Apr 2026 03:32:11 +0000
ROA not before: Tue 14 Apr 2026 03:27:11 +0000
ROA not after: Tue 13 Apr 2027 03:32:11 +0000
asID: 136200
IP address blocks: 124.172.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 08:55:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:88:81:fb:1e:a9:f5:0f:20:67:bc:eb:f0:11:c8:ba:79:d7:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Apr 14 03:27:11 2026 GMT
Not After : Apr 13 03:32:11 2027 GMT
Subject: CN=268058A20720DFACFFDA014C3CB63649AB317319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:fb:3c:df:74:46:54:a2:b2:d9:2f:8d:a3:
cc:17:16:d6:d2:74:8d:5f:6b:1a:b9:a8:e2:3b:fc:
eb:5c:3f:48:fd:b8:3a:ab:da:eb:1e:de:be:59:8c:
5b:33:7d:d9:cc:1b:e3:17:38:49:2f:ad:17:21:c2:
3d:75:13:4a:25:4f:4d:09:7e:79:60:aa:bb:eb:11:
ce:96:0c:69:06:81:ac:b2:7d:41:ed:8d:97:12:20:
03:3c:08:17:96:db:f6:65:45:2d:1d:66:ba:1d:00:
9e:6e:92:ea:cc:2d:66:48:ee:2b:78:d5:3b:c3:7b:
92:99:b1:e3:5e:e8:da:9b:70:b5:e2:fd:0a:17:66:
1a:af:c9:1a:93:34:f5:16:13:5c:b4:af:34:16:e7:
8c:0b:f7:ba:d8:e6:7d:48:a8:16:81:74:98:e1:e0:
43:76:4c:97:67:20:7a:da:cc:0c:74:5f:b7:08:53:
a8:e3:0e:34:37:12:b8:b7:92:3e:80:1f:de:d6:a9:
90:54:46:58:dd:71:0f:1c:a2:72:c3:bd:13:1f:30:
8d:d7:e5:b1:16:dd:07:13:53:93:34:da:7d:30:08:
02:e1:ab:93:7a:94:49:41:be:8c:ea:4e:ce:33:87:
8f:1b:79:e0:28:d9:08:6f:3c:8f:b7:55:02:0a:96:
a1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:80:58:A2:07:20:DF:AC:FF:DA:01:4C:3C:B6:36:49:AB:31:73:19
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e3136302e302f31392d3139203d3e20313336323030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.172.160.0/19
Signature Algorithm: sha256WithRSAEncryption
51:fa:65:40:c6:b9:e1:72:98:36:17:b2:00:ac:c8:86:3f:69:
f0:19:10:e3:da:3d:b3:02:8a:82:a8:ea:d9:ac:f3:4d:43:40:
3d:cf:b9:05:bd:8b:26:a7:df:0f:5b:7c:db:46:71:e2:7a:a8:
b3:b6:3a:9d:cc:e6:03:00:82:c2:6f:67:fb:3e:d3:c2:38:ff:
f0:4d:13:15:7c:da:b4:44:b2:d7:9f:29:95:56:18:70:03:de:
8b:79:c8:c7:ca:03:a8:ca:d9:d0:6b:43:7c:5a:b2:25:0c:99:
8e:3c:36:20:7d:9f:58:1a:7f:5a:d5:c9:29:39:62:96:28:35:
6b:59:b4:7f:b3:a6:35:36:53:cc:fd:95:7a:24:03:32:ef:ec:
0e:9f:ec:24:2b:c3:19:e9:a2:05:2d:44:9c:3d:9f:60:1c:07:
50:e2:df:5e:7a:7c:89:4a:db:6b:24:28:ba:4e:22:b3:e6:8d:
2b:1e:7f:b3:64:fa:8d:c3:d4:7d:e3:2b:2f:2e:1d:77:e6:3a:
f8:83:c8:24:9b:17:73:dd:8f:68:1a:d2:46:e6:c8:c9:b8:d4:
95:41:3e:28:bf:31:3b:ce:25:2e:26:0b:e0:c5:f4:5a:41:a0:
45:e5:e7:c8:42:3c:16:12:f1:81:ce:a1:aa:2b:f4:ee:18:86:
87:66:4f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:26:34 2026 by rpki-client