
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31362e302f32312d3234203d3e20313331353336.roa
File: 3132342e31342e31362e302f32312d3234203d3e20313331353336.roa (raw, json)
Hash identifier: r6yu3Jn4CZw5sx0P3bx9jJxyvhFz8i1HoZ9GkNk6u3w=
Subject key identifier: 09:78:7B:D4:3C:46:E8:97:89:2C:44:E8:E9:74:C5:41:EE:14:11:4D
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 75FACD7E480BD4E8416FCBDEE916F0DD8AC9CB8A
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31362e302f32312d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:33:31 +0000
ROA not before: Thu 11 Jun 2026 04:28:31 +0000
ROA not after: Thu 10 Jun 2027 04:33:31 +0000
asID: 131536
IP address blocks: 124.14.16.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:fa:cd:7e:48:0b:d4:e8:41:6f:cb:de:e9:16:f0:dd:8a:c9:cb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:28:31 2026 GMT
Not After : Jun 10 04:33:31 2027 GMT
Subject: CN=09787BD43C46E897892C44E8E974C541EE14114D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:c2:ea:98:79:68:02:75:ac:a3:88:a3:3b:
64:ee:1f:ec:1d:e2:ae:81:e0:5c:d4:9c:18:39:26:
13:00:24:99:f2:ad:f8:e9:4d:49:c6:99:33:cb:66:
98:5b:3d:f2:bd:19:b3:a5:62:44:ef:84:c3:af:44:
58:b5:8e:e5:19:d1:e1:6d:1b:f8:6e:af:cc:65:fa:
11:16:a4:f0:c2:6f:36:98:b2:09:97:25:c4:b8:e8:
11:e9:e6:78:2a:08:80:2c:7c:22:1f:52:ce:b1:76:
b8:92:3c:af:98:6a:27:ac:a1:d8:ae:58:18:66:c4:
46:2f:a9:e1:6d:e0:30:c2:1a:36:26:2a:74:b5:0e:
b7:88:7c:e6:a3:76:69:4b:84:c8:3f:51:c6:61:28:
d7:90:d0:cb:02:3e:97:50:f6:29:09:6d:aa:1b:13:
d3:66:41:1d:1c:45:5f:b2:44:a1:fe:1b:fa:8b:64:
ea:64:23:cc:f6:3c:4e:3e:93:2b:86:11:3a:9c:b3:
bc:60:f9:5e:8e:45:26:19:2b:6c:8d:52:39:74:b8:
50:e4:70:a0:2f:6a:03:f8:a8:fd:ce:93:8f:25:e2:
4c:16:ad:3e:a0:08:e6:bf:3b:2d:cc:f0:9b:43:8d:
e2:2b:5a:18:c9:13:df:40:a2:a7:8c:c9:36:3d:2b:
cf:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:78:7B:D4:3C:46:E8:97:89:2C:44:E8:E9:74:C5:41:EE:14:11:4D
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31362e302f32312d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.16.0/21
Signature Algorithm: sha256WithRSAEncryption
72:d1:5a:5a:cf:09:3c:84:60:3c:71:66:8f:96:97:48:0e:25:
6d:7b:64:cf:f0:2b:1d:07:2f:24:c4:18:f7:65:25:a5:fe:05:
9c:cf:3b:f1:8f:c2:28:d9:d1:0d:2d:f0:a0:59:ad:4c:3a:26:
9c:98:0d:21:80:09:cb:65:01:85:46:e1:59:2b:2c:5c:9b:50:
15:f7:a1:df:f6:8f:b6:ec:ed:e0:12:5e:02:79:8d:79:b5:9b:
22:7e:4b:14:1e:bf:8e:d6:66:7d:80:06:46:36:3d:2f:a7:6f:
24:24:a5:5b:6e:ac:1e:a3:70:ff:0c:28:2b:33:69:da:0e:22:
89:56:15:fc:6e:84:78:77:6c:b2:40:1d:b2:58:b5:fb:c9:12:
9a:7b:c3:37:db:ea:ff:1d:a9:d3:79:30:d9:fd:11:e2:81:6f:
2e:83:7f:33:97:cd:e5:ef:bf:56:62:a0:7c:55:e7:13:ea:f5:
32:cf:1b:17:c7:dd:9f:95:fc:b2:c9:4f:45:72:07:92:c7:7a:
10:04:cd:3e:8f:bb:46:8a:97:d6:61:2b:e9:0d:64:08:da:41:
4b:1c:c1:aa:f8:e4:2a:23:aa:1b:82:f3:16:61:8a:5f:13:92:
31:44:c6:a2:62:31:29:b6:36:c1:c6:f6:e9:42:12:51:29:c6:
de:2c:e6:18
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:35 2026 by rpki-client