
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e382e302f32342d3234203d3e20313331353336.roa
File: 3132342e31342e382e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier: U6qXyW4djQVEWnom2YIf6YERnqKKkEMbFBwGjVK9L8w=
Subject key identifier: AE:21:E5:A9:E4:29:8E:4F:7A:EF:B2:FE:2D:A4:09:01:1B:E7:BB:59
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 58385FD31A7BEB71A1A77AE03EB4C757FF19F8F3
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e382e302f32342d3234203d3e20313331353336.roa
Signing time: Thu 11 Jun 2026 04:34:45 +0000
ROA not before: Thu 11 Jun 2026 04:29:45 +0000
ROA not after: Thu 10 Jun 2027 04:34:45 +0000
asID: 131536
IP address blocks: 124.14.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:38:5f:d3:1a:7b:eb:71:a1:a7:7a:e0:3e:b4:c7:57:ff:19:f8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 11 04:29:45 2026 GMT
Not After : Jun 10 04:34:45 2027 GMT
Subject: CN=AE21E5A9E4298E4F7AEFB2FE2DA409011BE7BB59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:22:a6:f5:08:65:a2:db:7d:d8:bb:d3:93:78:
79:6d:ef:af:35:c0:54:12:7e:c6:c0:b6:ca:6b:60:
f6:d1:00:e8:a3:4e:3c:e0:40:5e:fb:bb:89:bb:59:
20:2a:89:9e:08:9c:4b:68:bb:e8:5b:97:be:b6:9d:
a0:e3:90:19:7b:5c:af:35:4f:39:18:ac:fb:64:ef:
48:d4:0e:59:01:2a:af:f3:f4:b3:f9:70:08:9a:af:
45:ea:8e:ec:71:04:08:54:eb:28:09:5e:84:33:a2:
78:58:9a:b4:01:3c:8d:4c:52:94:80:ab:2b:50:23:
5a:20:c4:a0:51:c5:5e:eb:04:3e:25:c6:1d:da:79:
fc:bc:a7:1f:a7:22:9b:d1:14:a3:0f:01:1c:e9:6f:
33:8f:f2:72:eb:da:d4:ed:df:ad:a0:ed:b5:45:36:
3e:50:3f:d4:a1:b7:76:77:5f:74:62:3f:64:a3:f0:
83:ad:5a:ac:2c:8f:ae:74:9d:40:bf:1d:83:e1:16:
44:39:ed:89:34:a3:eb:38:c3:58:65:90:fd:56:26:
e9:ce:cf:be:9b:66:6a:92:9b:ad:a5:25:26:4d:ef:
8a:eb:7b:9b:57:15:59:cf:f3:35:4d:22:fd:ae:23:
e8:1d:32:62:ca:e7:e1:5e:72:2e:66:98:07:79:6a:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:21:E5:A9:E4:29:8E:4F:7A:EF:B2:FE:2D:A4:09:01:1B:E7:BB:59
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e382e302f32342d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.8.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:16:09:32:1a:4b:e5:76:af:ee:b7:d0:71:81:c4:78:e2:8c:
5f:aa:df:30:83:0d:97:77:60:03:b2:68:d0:fe:ac:86:9f:c8:
76:b0:3c:e5:93:c2:12:53:f1:16:33:99:d5:56:3d:2c:a5:57:
b3:e4:23:10:56:4f:40:a5:b0:58:91:1a:f2:21:e4:9b:43:40:
d6:4d:c9:f8:25:11:ed:31:4c:41:f6:8a:7a:6e:c3:d6:b8:60:
ec:14:47:53:c9:e4:f9:49:73:6d:05:7b:d6:ea:49:8f:79:47:
db:24:e7:fa:48:d0:d7:3f:07:3e:d5:f6:c9:be:e0:91:ab:ac:
db:bb:19:10:88:1e:e3:bc:02:c5:a7:17:5f:4e:ea:ae:a6:f1:
c7:79:bf:04:c1:21:db:6e:bf:f6:ac:8e:bf:62:7b:92:e2:81:
19:4e:2e:2f:69:9a:da:96:12:83:26:5a:19:e2:46:32:b4:ec:
2f:88:4b:6a:10:02:c7:19:92:61:4e:d1:21:19:60:19:c8:5d:
e8:d8:be:ac:6e:88:d7:93:07:4a:18:6b:c5:40:21:71:4b:f8:
88:f3:45:46:9d:d1:92:c3:52:16:d2:ea:3c:f0:94:c0:92:17:
28:b9:5c:02:91:fb:74:17:d1:60:34:3f:0e:a0:86:69:cd:12:
e3:37:2e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:51:36 2026 by rpki-client