
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e20323037353530.roa
File: 3132342e3137332e3139322e302f31382d3234203d3e20323037353530.roa (raw, json)
Hash identifier: TyUmk0sNH823xOsGPH+IDZKTTyWLk3XKjxYE9GQkZqM=
Subject key identifier: FB:18:F9:34:5E:0D:54:20:1C:82:F2:C3:69:45:2E:F2:3C:1C:83:B8
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 28319B0746E3F4877139169D773A63DCF0F1E633
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e20323037353530.roa
Signing time: Fri 11 Sep 2026 12:25:25 +0000
ROA not before: Fri 11 Sep 2026 12:20:25 +0000
ROA not after: Fri 10 Sep 2027 12:25:25 +0000
asID: 207550
IP address blocks: 124.173.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 03:12:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:31:9b:07:46:e3:f4:87:71:39:16:9d:77:3a:63:dc:f0:f1:e6:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:25 2026 GMT
Not After : Sep 10 12:25:25 2027 GMT
Subject: CN=FB18F9345E0D54201C82F2C369452EF23C1C83B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c3:8d:bf:48:f3:4a:4f:a5:af:cb:ee:93:f6:
56:bf:48:e1:98:62:48:b5:7b:52:2e:51:ca:fc:22:
7f:b3:e5:d2:40:f8:02:46:3c:5c:5b:f2:65:b3:ac:
b3:7c:48:fd:b6:44:03:83:ac:98:87:8a:9e:ef:ea:
bd:b0:70:c0:63:70:77:d0:84:1e:e5:b8:5e:c1:9c:
47:6d:60:f2:20:7c:b1:82:11:97:24:f4:aa:3a:4e:
a4:a7:ae:31:51:f0:8b:ca:7a:b5:9a:9e:d1:9e:e0:
af:99:3c:77:a6:59:bd:48:c4:55:ae:ad:d9:18:e1:
59:c8:73:54:17:25:9f:8b:85:22:93:f7:3e:79:45:
b7:4c:ff:e8:bc:23:6a:14:8a:fe:eb:7d:e6:fa:5d:
d7:0e:3c:04:e3:1f:b4:c8:87:b7:f9:28:60:00:5f:
ee:cc:d5:19:97:77:2e:b2:b4:72:6b:f2:cc:6d:6f:
ae:ca:b3:28:6d:a9:0e:57:d6:1b:74:0b:0d:f8:f9:
a0:af:9a:8d:fa:81:c7:5e:93:ce:b7:df:6b:b5:b0:
90:16:f5:e5:14:b8:1f:7f:c6:0a:e1:35:39:7d:7e:
f4:6a:df:e4:1c:5c:a0:8d:03:7b:5a:b4:4b:60:d6:
d3:4d:6d:57:1b:75:ce:9f:89:9d:93:3c:8c:7f:4d:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:18:F9:34:5E:0D:54:20:1C:82:F2:C3:69:45:2E:F2:3C:1C:83:B8
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e20323037353530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.192.0/18
Signature Algorithm: sha256WithRSAEncryption
63:46:ea:7e:d5:00:43:45:6e:83:03:da:09:d7:07:ce:c2:a0:
a5:49:35:5e:ce:cc:aa:88:e2:b0:ea:9d:2f:95:f1:ee:d8:38:
56:fe:b9:6b:67:53:9c:31:37:66:51:34:ec:8c:e1:52:54:bf:
b3:df:61:22:7e:90:f9:e7:94:19:a1:83:da:8e:21:60:75:a2:
21:f1:d3:ef:dc:1a:fb:cc:b1:9b:9b:7f:e7:65:37:8b:fa:23:
aa:7a:96:b9:af:3b:fa:1b:ed:ef:19:90:a6:51:78:3f:d3:67:
23:bf:ca:03:47:cc:5c:6a:16:50:03:af:8c:3b:e2:97:31:10:
b2:72:02:ac:fd:50:aa:8c:ee:b1:c8:96:1a:78:5d:c6:be:35:
3c:81:67:35:9d:d7:6c:1b:d1:6d:99:89:b5:0a:bf:6d:e1:a8:
a7:9a:21:15:08:6c:bc:66:f3:2e:19:7e:8e:25:39:5d:94:f3:
31:6a:ae:d0:61:41:16:a8:5b:a0:a3:f1:23:1c:d9:63:7d:d9:
cc:84:ba:84:ea:ff:12:f9:f7:8a:db:94:44:7e:1c:ba:5c:ac:
89:5c:90:44:e7:fb:7b:6a:08:c0:68:53:9b:26:fa:76:c5:97:
53:d5:93:3a:d2:c8:af:7f:22:6d:78:1b:2c:5f:92:d7:3d:9c:
df:da:b2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:25:17 2026 by rpki-client