
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e312e302f32342d3234203d3e20313331353336.roa
File: 3132342e31342e312e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier: gqfAZi5D9eRLNFfiI6sUq/JBgetsWJmrTB3FKlauctU=
Subject key identifier: F3:31:49:9D:32:61:58:4E:3D:2C:13:CC:45:23:D3:2A:8F:38:86:BA
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 5F4F673190953265A2DD83A37672F9315A37729A
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e312e302f32342d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:09:35 +0000
ROA not before: Thu 11 Jun 2026 04:04:35 +0000
ROA not after: Thu 10 Jun 2027 04:09:35 +0000
asID: 131536
IP address blocks: 124.14.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:4f:67:31:90:95:32:65:a2:dd:83:a3:76:72:f9:31:5a:37:72:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:04:35 2026 GMT
Not After : Jun 10 04:09:35 2027 GMT
Subject: CN=F331499D3261584E3D2C13CC4523D32A8F3886BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:67:37:72:80:3b:e4:c5:8a:17:ad:cc:83:85:
3b:71:32:dd:d7:25:5f:f4:e1:30:77:30:ba:5e:d5:
28:39:dc:29:1c:6f:87:56:e5:39:a5:f3:b2:d9:e9:
8f:b9:e0:ff:14:c6:28:98:fd:14:ee:f4:a8:de:04:
da:f2:79:7f:44:36:c2:40:d4:bc:c7:2a:4d:ea:b8:
ca:77:a8:d8:ea:91:9a:2b:22:da:03:9c:2c:bb:c2:
cc:a2:96:a7:9f:88:7e:db:b6:94:3b:8d:16:16:57:
9f:1c:0d:24:9a:f5:0d:16:62:73:9d:e2:eb:4b:e9:
d1:31:1b:b6:1d:fb:a9:e8:a6:5c:38:8e:48:b8:a7:
c9:e3:23:d8:d1:fd:85:cd:94:d1:fe:69:1e:1b:ba:
c1:2b:a6:dd:d2:02:85:54:e5:e6:cc:c1:c5:8a:d6:
78:ca:23:4f:eb:58:00:8c:8e:d0:91:b8:a3:d9:e2:
55:62:d0:a1:94:0e:d7:9b:46:1a:0b:2e:ee:ca:51:
bc:2f:7d:c8:26:72:2e:de:b4:62:83:56:7d:f0:e3:
bd:c5:f1:e9:94:b4:52:bd:e3:49:d7:ed:71:49:08:
a8:0d:1d:48:66:6c:91:f1:c1:30:f0:4b:b1:b0:a3:
6d:35:54:13:9d:8f:cc:17:45:09:8c:96:bd:dd:64:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:31:49:9D:32:61:58:4E:3D:2C:13:CC:45:23:D3:2A:8F:38:86:BA
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e312e302f32342d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.1.0/24
Signature Algorithm: sha256WithRSAEncryption
22:21:22:c1:5c:ae:79:55:23:64:86:9f:48:39:ef:8c:d1:11:
e9:c2:f1:22:da:ae:c1:f1:54:75:01:d8:6e:a4:ee:8f:51:cf:
5b:4e:8f:78:04:ae:eb:bb:c5:56:da:e7:a0:fa:8c:d8:6e:2e:
ec:1d:83:1f:64:fe:2e:20:81:99:d3:fb:25:ee:71:a1:bc:19:
d5:01:97:4e:f8:52:f0:f9:52:d7:5a:d9:b6:c3:a8:1a:a0:67:
60:c8:07:57:a0:1e:2d:df:ad:32:ff:65:cd:47:b3:25:fd:9d:
7c:71:57:b5:da:96:60:de:50:73:47:cf:ec:d6:0b:d4:c3:10:
eb:b5:c1:79:07:8e:fc:29:f6:ef:39:19:4a:f4:83:8d:b9:0d:
21:45:24:aa:2f:83:5c:cb:a1:51:69:f2:31:0d:17:d5:f8:58:
67:d5:67:cb:73:7a:f4:bb:2f:50:69:50:d5:a7:47:a0:2f:9d:
bb:ea:9b:a7:8a:b5:81:a6:b7:23:1b:27:63:e3:53:d2:a6:0c:
59:87:a7:17:ff:9f:d9:e3:9c:65:ec:1f:69:3a:ea:cc:79:9f:
21:f5:1d:72:c1:7e:68:64:ba:cf:8b:51:b0:04:0a:43:99:e9:
e8:f1:9a:40:98:9e:ab:af:28:09:69:f5:36:87:b8:c0:f9:af:
fe:28:28:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:36 2026 by rpki-client