
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa
File: 3132342e3137332e302e302f31382d3234203d3e2030.roa (raw, json)
Hash identifier: RIKCM171CIY8W4bjdqWf1/b9TtuCfvea7/NQ1gyF5+Y=
Subject key identifier: A2:15:3A:45:99:10:61:E6:0B:C6:DC:6D:79:AA:96:D9:D5:44:7A:1E
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 0B33BB34F8339FAE65E1A30B56C4C82ED5A500C5
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa
Signing time: Fri 16 Oct 2026 02:32:26 +0000
ROA not before: Fri 16 Oct 2026 02:27:26 +0000
ROA not after: Fri 15 Oct 2027 02:32:26 +0000
asID: 0
IP address blocks: 124.173.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 06 Nov 2026 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:33:bb:34:f8:33:9f:ae:65:e1:a3:0b:56:c4:c8:2e:d5:a5:00:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Oct 16 02:27:26 2026 GMT
Not After : Oct 15 02:32:26 2027 GMT
Subject: CN=A2153A45991061E60BC6DC6D79AA96D9D5447A1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c9:04:81:98:94:12:7d:18:3d:76:2a:f4:35:
28:90:e8:fa:52:84:f3:d1:ca:17:90:fd:30:4a:4d:
e3:f7:e5:39:4f:a8:74:3f:8b:b1:23:63:56:1e:af:
96:36:ee:7d:16:0d:83:c2:b0:d0:a4:5e:b4:8b:62:
36:8d:90:f4:3c:0a:cd:9d:19:ce:cf:61:fb:a2:4e:
16:cb:41:e7:68:58:fa:d8:e0:bb:b6:00:1a:02:f5:
c1:95:52:5c:fd:70:4e:8d:6a:43:5b:ee:f5:49:7d:
bc:24:74:47:6f:2b:8f:6e:81:44:6f:11:00:3f:61:
a3:c6:4e:15:ba:31:02:fd:b0:c1:5a:be:f7:f7:94:
83:c1:2c:79:67:11:74:97:d9:c7:14:2a:8e:10:df:
2d:63:e7:0c:e3:23:61:1f:7b:49:24:ba:8f:1e:5a:
61:c3:94:f0:fc:e7:ab:a6:c6:97:28:5a:8f:2c:fd:
37:cb:1d:59:5e:c8:20:f0:5d:43:4c:1f:3b:86:49:
46:78:1a:3b:b3:f4:fc:6d:96:aa:1c:26:83:be:a3:
fd:e1:f5:24:ab:82:5b:dd:9a:9f:4e:21:1f:20:a4:
86:e4:05:66:7f:2c:3a:e1:df:1f:c6:65:93:cd:0c:
4a:9a:b1:cb:80:b5:4e:99:5f:40:9e:99:1b:61:c6:
26:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:15:3A:45:99:10:61:E6:0B:C6:DC:6D:79:AA:96:D9:D5:44:7A:1E
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9e:aa:b8:31:a0:d7:1b:74:40:2e:6b:14:69:7c:8e:c7:96:ab:
93:18:d1:38:3a:8e:bd:4e:3c:14:ae:b2:0a:6d:ea:e9:20:0c:
d5:4c:07:0d:7c:7a:77:e6:eb:79:05:7d:ce:2f:52:42:3d:d7:
04:09:65:1f:dc:d9:38:4c:69:22:59:f7:e1:50:ff:38:14:00:
6c:85:60:c9:28:5a:36:25:2e:2b:6b:17:74:a7:7f:ca:aa:bd:
94:8b:d3:a4:9a:70:e4:b6:88:8b:1a:f2:e3:76:5b:de:6f:10:
7d:db:d4:60:09:7b:98:60:76:ac:08:7f:60:dc:3d:d7:c3:c5:
c3:7f:e7:01:1f:8a:b3:8f:52:21:ef:6d:11:27:90:f5:6f:85:
6e:43:4a:ca:34:ed:82:38:e6:7a:2e:4c:66:d0:9b:b4:9f:88:
88:d9:f1:f2:ed:2b:4d:34:c1:49:be:ec:34:b7:b1:0c:f6:20:
21:32:37:1d:9e:ea:bd:be:1e:7b:b3:25:68:9b:50:71:05:c2:
ab:fa:f9:07:78:3f:e7:13:59:68:d8:8a:5f:63:2f:ca:91:25:
4f:84:1f:bd:ea:2b:30:36:5b:a5:23:8e:8b:77:b7:de:a9:c4:
6a:1a:14:a9:be:db:e2:67:e0:71:cb:6c:b5:38:5d:0d:64:2d:
26:2b:3e:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:03:32 2026 by rpki-client