
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
File: 3132342e3137332e302e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier: ZGXO+n5sutjMsYxHE6o8kMFvdGE3SokpmalL39RcquA=
Subject key identifier: 25:0F:FB:59:2C:D6:DB:73:E0:37:00:8C:2E:8B:79:50:7E:9C:50:CA
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 3DD5E683BFB4F6D9D852B1093F96356D583038C6
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
Signing time: Fri 05 Jun 2026 10:22:55 +0000
ROA not before: Fri 05 Jun 2026 10:17:55 +0000
ROA not after: Fri 04 Jun 2027 10:22:55 +0000
asID: 9304
IP address blocks: 124.173.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 23:15:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:d5:e6:83:bf:b4:f6:d9:d8:52:b1:09:3f:96:35:6d:58:30:38:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Jun 5 10:17:55 2026 GMT
Not After : Jun 4 10:22:55 2027 GMT
Subject: CN=250FFB592CD6DB73E037008C2E8B79507E9C50CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:20:7c:7c:b9:2f:d9:69:79:c5:bd:92:6c:dd:
bd:78:d5:b2:84:3b:c4:44:00:71:6e:97:7b:3d:e9:
3a:f6:ab:44:9f:60:cc:c5:35:b6:75:6e:90:4c:69:
d5:98:4e:04:12:86:b3:ea:9a:3a:f1:e4:db:cb:f2:
da:15:28:c0:66:e0:20:8f:92:4b:71:04:69:9a:5d:
11:b4:f7:b7:b2:e9:15:36:fd:7f:e1:c5:e7:19:4b:
98:a0:47:e1:4a:f0:e8:10:6c:a1:4f:14:13:10:0d:
4f:4c:0c:3e:4d:d7:27:6c:ad:c9:27:9b:68:08:ef:
9e:94:4b:e3:10:5c:b0:02:1c:f7:90:34:f4:70:ba:
3f:14:a4:f6:67:b2:6e:e3:2b:f8:d4:8c:e3:73:7a:
2b:82:79:28:bb:02:63:0f:1f:e9:6a:29:ac:79:5d:
03:87:67:fe:07:66:4e:74:a2:fd:9a:f9:8c:7d:57:
db:e8:cb:c8:ba:a7:31:e8:13:9d:be:d4:45:06:f2:
c9:fa:d5:2a:71:b9:fe:cf:87:b3:53:e3:5a:08:95:
62:8c:8f:e4:3d:2a:24:05:d6:dd:fc:21:45:0b:07:
6c:b0:50:d8:8e:3a:38:57:42:08:25:da:e1:3c:6f:
69:99:d3:27:15:61:21:30:a3:d4:a7:1b:59:a9:ba:
1f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:0F:FB:59:2C:D6:DB:73:E0:37:00:8C:2E:8B:79:50:7E:9C:50:CA
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.0.0/18
Signature Algorithm: sha256WithRSAEncryption
8f:ad:27:4b:d5:4b:0f:96:b3:c1:b0:12:0f:38:59:79:98:bf:
f4:0a:ad:d2:31:45:01:bf:e6:85:dc:ec:8a:ba:f7:8d:56:5a:
f7:d4:1b:de:85:21:c9:98:d9:bc:26:40:d2:1c:2c:2b:1f:28:
2c:f7:fb:9e:7e:80:2d:bb:7e:cc:40:e3:e8:54:ac:69:58:e1:
d9:d2:41:fa:8a:58:64:86:8c:be:3a:0c:7f:c2:5a:80:89:c9:
d7:4b:ff:d6:fb:a8:59:06:c5:c5:62:59:02:6b:aa:6f:29:38:
25:5b:f5:c8:61:29:c4:8e:92:f6:74:c1:7a:e3:0f:55:ee:a5:
f2:0b:a4:7a:76:14:b5:17:b7:22:85:d3:07:c7:1f:0a:4b:42:
f0:a9:72:85:42:c4:b8:e4:3b:a0:1d:b6:09:0a:a0:cd:36:d5:
e1:35:bb:df:06:52:bd:06:ef:90:f2:6b:a3:ad:14:c6:d1:f1:
00:2a:a2:47:47:a3:da:72:12:aa:1c:1f:92:77:d8:66:dc:03:
3a:8c:d1:af:96:72:28:a9:bf:b6:ea:f5:c2:95:4e:15:dc:9c:
22:71:fe:b4:48:e4:20:47:48:67:a9:33:d0:24:44:99:f6:35:
1d:ab:1a:c9:79:cd:ef:a2:c5:40:8b:0a:1a:98:f1:5b:6c:55:
6f:ef:4c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:50 2026 by rpki-client