
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31322e302f32322d3234203d3e20313331353336.roa
File: 3132342e31342e31322e302f32322d3234203d3e20313331353336.roa (raw, json)
Hash identifier: w67cbBWIps2lqPx9Dge6FJRm6CLOFI7zMSFt0Sxs0Ro=
Subject key identifier: 99:0B:37:D3:DA:2C:7C:24:AA:5F:A4:85:87:6A:91:31:E0:09:3B:A4
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 4EB1BC5A530291D05F69104A547AE7EAE6F897E6
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31322e302f32322d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:34:46 +0000
ROA not before: Thu 11 Jun 2026 04:29:46 +0000
ROA not after: Thu 10 Jun 2027 04:34:46 +0000
asID: 131536
IP address blocks: 124.14.12.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:b1:bc:5a:53:02:91:d0:5f:69:10:4a:54:7a:e7:ea:e6:f8:97:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:29:46 2026 GMT
Not After : Jun 10 04:34:46 2027 GMT
Subject: CN=990B37D3DA2C7C24AA5FA485876A9131E0093BA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c6:32:16:7c:a8:a6:57:75:3e:22:ee:2e:cd:
ed:6a:fd:0a:58:d1:d6:82:7a:7a:3f:25:01:9c:5f:
b2:a5:c9:8c:fc:87:3b:8b:dc:ce:32:f7:c9:72:d6:
d1:af:9e:33:84:9d:ae:12:41:2e:7f:61:dd:91:0c:
35:2b:c2:8c:3b:df:3f:9e:fa:ac:a0:b5:60:fa:87:
43:3d:6f:a5:a0:df:89:1b:dd:65:ed:5d:3b:90:aa:
16:34:bc:e1:fe:f7:ec:62:06:60:54:31:52:01:d2:
b7:11:35:91:7b:a1:80:28:b9:c0:7d:97:75:5e:a0:
9b:f5:a3:dc:4c:30:28:ba:2a:2c:90:a7:70:46:04:
79:3f:7a:53:f8:e9:ee:71:a5:9f:01:dc:8e:46:d9:
d2:b6:78:a4:75:05:d9:64:12:b0:e3:b2:ac:c1:8f:
c4:bc:07:d7:96:1f:9b:59:78:c8:52:e7:58:11:f7:
16:70:5d:27:84:83:ca:e2:cc:15:7c:ec:38:1c:cb:
c7:59:d0:b9:ed:65:a9:f0:f4:f2:1e:f8:f0:c6:28:
09:00:92:b3:68:04:1e:4a:e6:22:44:bf:45:d4:e4:
b9:28:69:40:12:da:16:24:ba:64:93:c5:84:c4:a8:
51:2a:51:c9:7e:10:66:78:77:a4:0f:40:96:89:2e:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:37:D3:DA:2C:7C:24:AA:5F:A4:85:87:6A:91:31:E0:09:3B:A4
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31322e302f32322d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.12.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:7f:43:f4:58:67:50:8a:fd:f8:4b:6a:c9:34:ff:31:75:8c:
26:16:7f:2b:96:c6:9a:87:72:76:2d:f1:fb:d9:a3:e0:0c:06:
d4:43:f4:a7:8b:4c:9c:bd:79:f4:57:2a:58:c0:f0:e1:be:d8:
53:72:ca:8e:56:7e:b4:6f:33:61:5e:29:13:ee:b6:dc:a7:71:
57:a6:10:c7:9a:b9:30:ee:a1:24:6d:37:e4:08:17:38:0e:9b:
5c:9c:c9:01:17:2f:78:85:68:d2:96:62:e3:f5:f9:45:24:10:
b4:38:43:c3:63:c0:7b:22:ad:f8:25:78:41:fc:06:5a:ef:48:
69:4a:47:48:3d:c1:1f:61:a6:99:66:77:27:c6:ae:eb:1a:c2:
d2:f2:8d:6b:31:83:9c:84:89:35:66:b5:ed:8e:64:88:d1:47:
8b:63:fd:91:2f:46:2b:d0:02:7e:64:d6:2e:25:c7:2f:73:15:
be:ef:55:c8:8a:4f:a7:15:0e:6c:2a:08:d1:93:bd:45:77:12:
67:66:f5:24:8c:0c:91:33:70:92:72:83:d7:25:4d:48:72:26:
33:ee:92:ba:8e:4d:e6:97:bc:af:43:d4:79:44:c2:69:c2:12:
bd:40:cc:c9:eb:b6:17:26:78:9c:c3:60:04:64:77:34:3b:80:
0b:91:3a:b4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:34 2026 by rpki-client