
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e372e302f32342d3234203d3e20313331353336.roa
File: 3132342e31342e372e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier: CsiJAib13bjqRBlimbK3uTYoMIBIKwMNewp2EygK87w=
Subject key identifier: 8A:EA:DB:43:6D:3E:8B:E4:72:CA:FA:70:53:5C:BB:C2:5C:5F:49:BA
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 7DA6052DEBD04D531B81B38537B3DA9BF4920B76
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e372e302f32342d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:33:31 +0000
ROA not before: Thu 11 Jun 2026 04:28:31 +0000
ROA not after: Thu 10 Jun 2027 04:33:31 +0000
asID: 131536
IP address blocks: 124.14.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:a6:05:2d:eb:d0:4d:53:1b:81:b3:85:37:b3:da:9b:f4:92:0b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:28:31 2026 GMT
Not After : Jun 10 04:33:31 2027 GMT
Subject: CN=8AEADB436D3E8BE472CAFA70535CBBC25C5F49BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:4a:be:8f:ce:2d:ec:f8:9a:08:93:ad:59:
60:fc:8a:58:63:4d:36:30:1c:73:3e:f4:3a:88:cd:
a0:8d:1d:2b:d9:ca:38:71:b5:f5:47:8c:7f:5a:bd:
9e:1f:75:9f:39:a9:62:85:fe:7d:01:13:c7:16:f9:
78:3c:7a:0c:30:b6:ca:85:ea:f7:60:14:1c:16:4e:
ae:51:6d:00:9b:df:6f:2e:8a:e5:ca:fb:97:c4:a4:
10:6b:77:a5:2c:67:cb:ab:5b:4f:28:42:b0:c2:0a:
d0:13:14:1e:05:32:95:ac:94:72:10:56:32:49:61:
a5:45:e0:a4:db:93:06:73:7a:9b:33:70:bf:dd:6e:
bf:51:51:c4:b4:58:44:ee:77:a0:8c:b0:87:bf:b7:
b2:27:40:ea:dc:50:16:ac:ea:a5:4c:16:27:02:5e:
6e:c8:31:23:52:b4:4b:7d:95:e4:13:26:c4:cf:39:
f5:79:64:55:69:e7:55:1d:91:5f:66:31:d1:33:ea:
99:dc:ba:2a:a1:0c:d9:95:02:97:c3:36:30:56:b6:
15:01:d1:c9:96:2c:a4:dd:05:83:0f:e2:b0:f9:5b:
11:c0:25:b1:6e:3f:3e:bf:2d:ae:17:ca:d1:3c:0f:
da:0b:d5:2f:0a:f0:d6:3a:7d:f6:47:aa:5a:6d:bc:
ea:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:EA:DB:43:6D:3E:8B:E4:72:CA:FA:70:53:5C:BB:C2:5C:5F:49:BA
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e372e302f32342d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.7.0/24
Signature Algorithm: sha256WithRSAEncryption
79:e9:eb:01:55:f4:5b:d0:64:3e:7b:84:8f:ef:5b:31:13:1b:
83:2e:55:bc:11:59:65:b3:6d:42:4c:1e:c7:df:2c:aa:df:49:
b9:32:8b:0a:08:69:e0:07:10:a7:f1:f5:72:29:ef:88:fc:17:
59:04:50:01:2c:cb:a6:ea:ce:eb:5c:98:f4:3b:65:d3:e9:1f:
cb:47:c1:4a:7f:7a:fd:71:4d:70:93:11:8f:9c:6f:6b:4f:a3:
59:d3:3e:ef:a8:d2:a0:ff:c6:9a:27:0f:c7:d1:4f:12:f4:f0:
37:55:98:a9:ff:15:27:f4:3c:eb:a2:a8:26:5c:68:e8:7b:75:
a7:e7:29:4f:af:06:0d:2c:aa:f2:ff:5a:33:51:93:61:54:35:
5c:42:68:30:12:8e:e9:bd:6b:ef:0a:df:b8:f2:7e:45:96:17:
7d:72:84:d2:33:04:14:fd:9e:e6:be:cb:ef:c9:ab:63:a0:2a:
5b:3a:4d:f0:7b:27:65:e0:05:80:90:3a:a8:b2:3d:11:eb:5d:
05:87:11:4c:ca:a0:11:d7:86:4e:22:9b:7e:44:dd:ad:6c:db:
8f:b0:c6:f7:7e:6a:61:93:3f:4d:d5:06:7f:ac:ff:7d:99:e6:
4b:63:a1:f0:cb:b2:a3:de:3f:ed:cc:0c:2b:5b:79:67:7f:fc:
d9:82:19:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:36 2026 by rpki-client