
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
File: 3132342e3137332e302e302f31382d3234203d3e2039333034.roa (raw, json)
Hash identifier: VeTnhbeQG+gh+xmdtbL0azq+4X3B5Fk7lOPCdSpovd0=
Subject key identifier: C9:A8:4F:CC:8F:FB:8E:E4:C1:C7:E4:40:3E:22:90:E6:82:AF:CD:B3
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 0347CE7A538FC0C1283BA2A8E8FDCB859868AF42
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
Signing time: Fri 11 Sep 2026 12:25:24 +0000
ROA not before: Fri 11 Sep 2026 12:20:24 +0000
ROA not after: Fri 10 Sep 2027 12:25:24 +0000
asID: 9304
IP address blocks: 124.173.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 00:27:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:47:ce:7a:53:8f:c0:c1:28:3b:a2:a8:e8:fd:cb:85:98:68:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:24 2026 GMT
Not After : Sep 10 12:25:24 2027 GMT
Subject: CN=C9A84FCC8FFB8EE4C1C7E4403E2290E682AFCDB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:fd:75:a6:a5:f7:4d:b6:79:0c:8b:99:b1:
e0:71:70:11:b7:15:24:77:51:80:81:af:3b:7c:0f:
de:34:7b:82:ff:72:cd:66:e0:d7:6a:37:95:6d:c5:
db:2b:14:2d:9e:e1:a1:7d:e5:9c:aa:fd:5e:e3:51:
e3:af:a5:01:21:47:be:dc:db:72:15:b0:85:b2:2e:
2c:ba:6f:cd:65:98:b7:c5:35:ad:5b:ad:54:87:95:
ca:e0:53:13:f1:a5:52:b4:6d:cf:c8:45:79:f4:70:
64:60:0a:fb:ee:d1:ad:6a:57:b2:c4:86:e3:bc:19:
9b:bb:e1:60:5a:3f:d2:9e:1d:bc:3f:4f:2d:5b:ac:
fa:6c:08:8b:2e:c5:af:eb:f7:94:51:cf:7b:db:fb:
c3:9d:73:6a:ee:66:fb:0d:c3:20:b3:fb:cc:0e:43:
ad:38:d4:99:48:6f:f9:22:9d:59:29:48:af:2d:bb:
ff:0c:de:46:de:44:ce:47:ee:1c:c4:48:26:16:d4:
61:4f:4e:e7:c3:a9:73:9a:12:c3:0b:75:ea:05:4a:
52:85:79:c0:77:03:5b:c3:8f:f5:3e:81:9b:48:42:
a3:ba:61:69:c9:d2:21:98:b1:57:21:8f:f9:07:b3:
10:28:81:c2:d3:fa:bd:19:0b:ab:8b:75:0c:7f:47:
ee:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A8:4F:CC:8F:FB:8E:E4:C1:C7:E4:40:3E:22:90:E6:82:AF:CD:B3
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e2039333034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.0.0/18
Signature Algorithm: sha256WithRSAEncryption
4a:21:64:78:50:52:1e:2a:68:89:cf:66:2d:92:fc:64:56:7a:
80:52:8b:9b:d4:ac:d3:f2:7c:da:9c:1e:22:9a:10:65:9d:b0:
be:4c:75:f1:b5:a9:ec:c5:9d:4a:a9:50:bc:7d:41:d1:25:e1:
1e:83:bc:45:e5:f6:c3:03:01:96:e8:d4:8d:e4:13:e8:95:9a:
c5:49:f1:70:94:62:d6:98:ce:e7:2d:b7:12:25:3b:86:c0:dd:
02:33:29:bb:d0:04:1a:c2:e8:d7:01:f6:ef:b9:5a:fb:df:bd:
d1:1c:05:d9:3c:bf:f6:1d:0f:09:18:e7:51:5f:6c:6c:10:1f:
cb:ea:62:95:72:2a:8b:d2:6b:08:7d:2a:9b:a7:0c:7f:f1:1f:
46:24:2b:da:58:ed:64:41:df:25:c5:6f:f2:a0:36:79:d0:b7:
de:a9:ee:8a:6a:25:44:f2:63:a0:29:05:05:c0:73:0c:e6:8d:
92:02:fb:75:8e:07:d1:39:37:d3:ab:14:0f:7b:8f:37:b0:b5:
7f:aa:91:ad:61:7e:c7:e5:02:40:90:7b:b1:a8:0f:38:fb:26:
6f:91:54:9e:40:6e:c3:0f:f3:94:be:0f:96:10:ee:d7:d6:bd:
23:ee:69:52:4a:23:1b:f3:03:4c:eb:c2:d6:9c:a3:f6:49:37:
e8:9f:3c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:44:29 2026 by rpki-client