
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2032393134.roa
File: 3132342e3137332e302e302f31382d3234203d3e2032393134.roa (raw, json)
Hash identifier: JjUlBmSlBHaeGkefK7reiNhZaX/vAzvh8NH16y1neNY=
Subject key identifier: E3:A4:1B:82:AB:1E:D7:FC:F2:93:54:5D:7D:BF:E3:67:D4:93:A0:0C
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 50D775DC28B0D9F8EB118E2A2EDCFC4076966AD1
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2032393134.roa
Signing time: Fri 11 Sep 2026 12:25:26 +0000
ROA not before: Fri 11 Sep 2026 12:20:26 +0000
ROA not after: Fri 10 Sep 2027 12:25:26 +0000
asID: 2914
IP address blocks: 124.173.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d7:75:dc:28:b0:d9:f8:eb:11:8e:2a:2e:dc:fc:40:76:96:6a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:26 2026 GMT
Not After : Sep 10 12:25:26 2027 GMT
Subject: CN=E3A41B82AB1ED7FCF293545D7DBFE367D493A00C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5d:57:01:10:fb:28:74:69:62:b0:73:82:ee:
fe:20:e2:57:24:80:ba:c1:77:6a:d3:ae:c5:cd:8d:
c1:1b:91:07:39:a0:b9:08:5f:0e:d2:11:67:fd:6b:
2f:63:b1:13:da:17:09:f0:7b:86:d1:a6:a4:80:e9:
ff:a5:ed:ef:7d:f2:17:e8:4e:03:c2:9d:e3:38:74:
13:99:5a:49:c6:f3:f2:17:d2:6c:19:47:b5:14:d7:
f6:82:d0:d5:34:bf:fb:77:25:c4:1c:fe:be:51:08:
30:e9:f6:38:06:80:87:fd:46:1a:13:8b:3a:7b:16:
ae:b2:ae:d6:20:22:5f:dd:d4:0f:ba:59:b9:f8:bb:
1f:61:d5:05:e1:5e:f6:05:bd:39:8f:38:b2:8d:4c:
92:59:c0:66:4b:3d:2a:cf:fe:28:39:66:f9:d1:af:
c6:e3:1b:e3:26:3f:94:76:11:f9:a7:51:21:fb:af:
a9:46:9a:00:d8:fd:9f:87:6e:93:ee:37:82:f1:d6:
28:c7:e1:ef:64:08:1a:1c:04:de:1e:6a:31:13:bf:
20:33:4c:54:fb:88:fc:23:f7:15:57:30:e6:59:9d:
4e:bf:65:3c:2f:35:85:14:ab:29:a5:31:64:3c:d5:
a7:7a:4c:23:0c:e2:b7:62:1f:b6:e6:3a:4e:4d:c8:
36:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A4:1B:82:AB:1E:D7:FC:F2:93:54:5D:7D:BF:E3:67:D4:93:A0:0C
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.0.0/18
Signature Algorithm: sha256WithRSAEncryption
6d:cc:d7:32:8e:67:a7:29:16:79:73:d3:9f:0f:99:fa:67:e9:
1f:e3:98:28:04:6a:03:01:0b:ea:d3:f4:d8:76:36:f9:02:9b:
1a:a1:65:43:0c:6c:20:a6:d4:1e:41:2d:6c:64:86:96:bf:2e:
d6:c1:4e:eb:27:78:3d:70:d5:1a:61:6b:a6:fd:8d:3e:4a:98:
6b:a9:c2:3b:de:c0:a2:6a:bf:91:a6:59:51:30:80:49:30:43:
89:79:8f:99:13:4a:ab:a6:e5:63:e3:74:e4:1a:35:ca:4d:d2:
a2:00:c6:6a:b8:f0:5d:10:fb:9e:3a:c9:23:0b:44:fd:1c:a5:
13:07:59:86:b4:84:5c:fd:e3:76:6f:bb:4d:df:d2:ce:e1:e5:
20:54:9d:0f:de:12:81:7f:e3:60:f6:7a:92:0c:0f:3d:51:f4:
5d:0d:a4:2e:70:58:0e:c4:62:24:79:39:a0:a1:c3:5c:2c:1c:
83:97:43:9d:11:7a:4d:15:bb:44:54:fe:84:d5:48:57:2b:8d:
fe:4a:81:6f:45:1e:53:b6:8a:25:bb:6e:3a:27:9e:7c:39:1b:
23:b8:d2:01:97:e6:8e:27:21:44:c2:bf:c1:f7:d5:63:16:08:
46:76:aa:13:a7:51:2b:a7:e2:ae:2b:c0:ac:24:14:80:9b:f0:
4e:fb:7e:a1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUUNd13Ciw2fjrEY4qLtz8QHaWatEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2
QkY0MjQzRDAeFw0yNjA5MTExMjIwMjZaFw0yNzA5MTAxMjI1MjZaMDMxMTAvBgNV
BAMTKEUzQTQxQjgyQUIxRUQ3RkNGMjkzNTQ1RDdEQkZFMzY3RDQ5M0EwMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqXVcBEPsodGlisHOC7v4g4lck
gLrBd2rTrsXNjcEbkQc5oLkIXw7SEWf9ay9jsRPaFwnwe4bRpqSA6f+l7e998hfo
TgPCneM4dBOZWknG8/IX0mwZR7UU1/aC0NU0v/t3JcQc/r5RCDDp9jgGgIf9RhoT
izp7Fq6yrtYgIl/d1A+6Wbn4ux9h1QXhXvYFvTmPOLKNTJJZwGZLPSrP/ig5ZvnR
r8bjG+MmP5R2EfmnUSH7r6lGmgDY/Z+HbpPuN4Lx1ijH4e9kCBocBN4eajETvyAz
TFT7iPwj9xVXMOZZnU6/ZTwvNYUUqymlMWQ81ad6TCMM4rdiH7bmOk5NyDa9AgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU46Qbgqse1/zyk1Rdfb/jZ9SToAwwHwYDVR0j
BBgwFoAU8yn1GHJPrGleM/XHhTLL9Wv0JD0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0NzgxMjg2Ny8wL0YzMjlGNTE4NzI0RkFDNjk1RTMzRjVDNzg1MzJD
QkY1NkJGNDI0M0QuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjMyOUY1MTg3MjRGQUM2OTVFMzNGNUM3ODUzMkNCRjU2QkY0MjQzRC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3ODEyODY3LzAvMzEzMjM0MmUzMTM3
MzMyZTMwMmUzMDJmMzEzODJkMzIzNDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZ8rQAwDQYJKoZIhvcNAQELBQADggEBAG3M1zKOZ6cpFnlz058Pmfpn6R/jmCgE
agMBC+rT9Nh2NvkCmxqhZUMMbCCm1B5BLWxkhpa/LtbBTusneD1w1Rpha6b9jT5K
mGupwjvewKJqv5GmWVEwgEkwQ4l5j5kTSqum5WPjdOQaNcpN0qIAxmq48F0Q+546
ySMLRP0cpRMHWYa0hFz943Zvu03f0s7h5SBUnQ/eEoF/42D2epIMDz1R9F0NpC5w
WA7EYiR5OaChw1wsHIOXQ50Rek0Vu0RU/oTVSFcrjf5KgW9FHlO2iiW7bjonnnw5
GyO40gGX5o4nIUTCv8H31WMWCEZ2qhOnUSun4q4rwKwkFICb8E77fqE=
-----END CERTIFICATE-----
Generated at Mon Sep 21 18:01:15 2026 by rpki-client