
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31372d3137203d3e203538383334.roa
File: 3132342e32392e302e302f31372d3137203d3e203538383334.roa (raw, json)
Hash identifier: jUmL8cg25ROWTepf9WezXCPWUu3lIXWTeSyLx99bdJM=
Subject key identifier: AA:48:E3:F9:32:D1:A5:10:08:8B:5F:0D:75:7E:C5:EE:43:07:11:97
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 43641DB64F338DDE4B8FCA30C1E90FFCDABBDF0A
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31372d3137203d3e203538383334.roa
Signing time: Thu 11 Jun 2026 07:30:45 +0000
ROA not before: Thu 11 Jun 2026 07:25:45 +0000
ROA not after: Thu 10 Jun 2027 07:30:45 +0000
asID: 58834
IP address blocks: 124.29.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:64:1d:b6:4f:33:8d:de:4b:8f:ca:30:c1:e9:0f:fc:da:bb:df:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Jun 11 07:25:45 2026 GMT
Not After : Jun 10 07:30:45 2027 GMT
Subject: CN=AA48E3F932D1A510088B5F0D757EC5EE43071197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:2e:52:d7:d1:8e:21:3e:5b:c6:43:3a:85:
d9:63:57:29:2a:ef:c3:1b:f9:57:00:5e:2b:99:ea:
a3:b1:74:4b:e3:7e:9e:18:6a:62:ba:3e:06:f3:38:
a9:27:b4:aa:ed:b5:a4:9e:dd:16:db:33:60:1d:f6:
cd:a1:ea:76:ba:e5:8d:96:e7:51:f3:49:44:37:37:
a9:f1:90:3f:9a:a8:7f:15:3e:58:01:cc:94:50:d9:
6f:61:28:5b:29:52:61:fe:2b:1c:dc:f3:9a:6c:9b:
9f:2b:0d:95:68:fc:70:61:91:6a:e6:f2:20:aa:83:
78:3d:e1:b1:60:d4:cf:fa:ba:2b:99:47:13:2f:70:
e5:6d:54:ec:73:6f:36:b3:f7:30:5c:c3:6f:c8:0a:
26:e4:dc:a5:ad:db:7d:92:c5:23:25:f7:f3:64:92:
38:62:73:0d:00:a5:c2:43:5c:aa:97:ce:d0:62:b7:
58:b8:ee:0e:f1:ba:90:5b:2f:a7:7b:81:59:aa:53:
bf:e0:e3:ad:19:0f:aa:ae:43:4b:f1:d4:5d:34:4a:
7d:87:51:53:57:e8:a2:16:24:a1:51:d1:ba:34:8b:
29:4b:55:e7:a6:d0:4a:43:8f:0b:37:3c:5f:80:00:
ca:44:1c:b9:75:a0:71:9f:99:57:70:b7:dc:85:b3:
15:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:48:E3:F9:32:D1:A5:10:08:8B:5F:0D:75:7E:C5:EE:43:07:11:97
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31372d3137203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.29.0.0/17
Signature Algorithm: sha256WithRSAEncryption
99:ae:a4:ca:e2:bc:ad:c7:f5:23:fd:f5:0f:45:8a:9b:21:49:
aa:69:56:4a:32:ae:7b:7b:e5:b1:a1:70:27:4b:02:52:83:9e:
f8:4c:ce:a6:96:e6:65:20:53:85:5d:b4:ea:f1:87:39:80:3d:
23:ef:52:25:01:e1:33:4f:f7:38:ed:c4:28:77:20:72:8e:5c:
fe:dd:25:f4:d5:20:12:0a:ea:90:88:98:e6:51:58:46:e8:ad:
80:cd:48:6c:d4:03:d2:81:dd:22:21:2a:a4:ec:29:b8:25:29:
eb:eb:03:76:03:78:28:fd:d3:17:66:61:4d:01:8a:a5:d2:e7:
15:49:ee:47:94:04:62:82:ae:5a:2d:c0:38:33:bf:35:63:32:
cf:23:91:61:26:b8:fe:1e:eb:40:f2:1d:fa:46:80:bd:5a:b8:
51:ef:ae:92:02:69:0b:d9:5a:42:84:cc:b9:20:92:2e:1e:da:
02:ed:c9:c4:fd:08:a6:06:90:21:14:40:ac:41:01:61:5c:8e:
44:6d:15:73:93:97:b3:74:f2:53:6c:7b:f5:9e:62:d1:28:c7:
6b:cf:1f:53:2b:7c:af:51:18:94:a9:5d:d4:f1:19:11:b5:0f:
41:f8:59:bd:fa:d0:d0:4f:0a:6f:63:0e:7c:5e:e6:aa:ea:6a:
02:53:0a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:35:30 2026 by rpki-client