
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e203233373234.roa
File: 3132322e31312e33322e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: h0Xaj72XHmJeYZGrLxwTo88nHBDFLZq98uJjTObVwD4=
Subject key identifier: 94:D2:05:B3:E9:0F:91:40:41:C5:4F:9E:3F:E0:2E:2B:C2:39:11:55
Certificate issuer: /CN=098D421CB46F292F13CE71DF3D685D5E82893289
Certificate serial: 7ECBFD297F2CB4D59E0A57CAE04FE9C93F3FC4FF
Authority key identifier: 09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e203233373234.roa
Signing time: Tue 02 Jun 2026 07:46:58 +0000
ROA not before: Tue 02 Jun 2026 07:41:58 +0000
ROA not after: Tue 01 Jun 2027 07:46:58 +0000
asID: 23724
IP address blocks: 122.11.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:23:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:cb:fd:29:7f:2c:b4:d5:9e:0a:57:ca:e0:4f:e9:c9:3f:3f:c4:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098D421CB46F292F13CE71DF3D685D5E82893289
Validity
Not Before: Jun 2 07:41:58 2026 GMT
Not After : Jun 1 07:46:58 2027 GMT
Subject: CN=94D205B3E90F914041C54F9E3FE02E2BC2391155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:12:c3:ad:98:a2:a2:64:59:1f:a2:41:91:
6a:dd:4d:16:07:ee:21:c1:54:14:e0:d3:7c:2b:db:
be:9a:6e:32:76:49:6e:bf:c8:ff:df:43:c2:66:d3:
c8:44:69:87:1a:58:9b:37:e8:94:0b:a3:f6:2e:eb:
e2:55:23:98:66:a3:2e:97:8d:d9:92:70:48:20:c9:
ef:5a:f2:d9:c4:87:c7:e5:a1:0b:16:4b:89:f9:81:
3e:ea:87:45:a9:f1:c4:a0:fa:ab:ee:2b:5a:32:f7:
d8:dd:14:64:7b:d2:36:ac:f2:aa:64:0b:fb:9a:6b:
4c:9d:6f:fd:82:54:99:3f:ec:ff:17:4b:c1:5d:a8:
c6:e7:8a:40:6c:98:92:7e:31:d4:4a:23:b0:48:0a:
31:10:9f:60:68:ed:e8:63:16:3c:cc:9c:40:0d:f9:
12:93:a1:d1:84:b3:fa:ef:4e:30:e0:3a:ec:55:16:
b0:82:70:6b:28:c9:34:5a:aa:86:0c:3f:bf:3e:02:
95:ec:73:ee:34:6a:30:14:d0:23:84:48:b2:38:61:
d0:92:56:a2:4e:c3:7c:ce:64:6a:e6:22:6f:28:01:
77:35:ea:fc:5c:a0:3c:cd:f9:1e:37:d7:81:90:76:
6e:a7:a2:a8:14:f5:d2:13:11:6f:f2:6d:98:cf:9a:
b2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D2:05:B3:E9:0F:91:40:41:C5:4F:9E:3F:E0:2E:2B:C2:39:11:55
X509v3 Authority Key Identifier:
keyid:09:8D:42:1C:B4:6F:29:2F:13:CE:71:DF:3D:68:5D:5E:82:89:32:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/098D421CB46F292F13CE71DF3D685D5E82893289.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/098D421CB46F292F13CE71DF3D685D5E82893289.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577662466/0/3132322e31312e33322e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.11.32.0/21
Signature Algorithm: sha256WithRSAEncryption
0d:b1:ab:57:a5:b5:bf:23:32:d9:d4:07:e3:bb:94:a2:3a:e0:
f4:d1:c2:3f:f9:80:11:42:dd:a5:e0:58:9f:39:cc:e4:83:08:
09:4e:5a:73:0c:0a:09:c6:60:c3:ec:81:b6:0e:5d:0a:f8:fd:
71:4c:47:60:1a:ee:b6:8f:d2:c5:87:fe:8f:03:a5:07:38:35:
ea:89:d3:e0:e9:2c:84:11:9e:8c:c4:d0:3d:1a:41:b8:83:4c:
77:97:76:98:90:b0:19:d0:54:90:32:ae:1f:64:f7:05:b8:ac:
79:45:52:21:11:31:33:26:31:f8:e4:7f:cd:ff:05:c9:75:dc:
4d:ad:b9:1e:f2:45:69:70:db:3a:b9:f3:c5:86:ae:e6:69:b3:
84:12:ff:6b:25:43:33:bb:15:4c:21:e1:d7:ae:a2:4c:0a:da:
aa:18:6b:d8:8b:4e:43:17:fc:5b:ea:75:e8:51:8f:d1:67:ac:
f4:46:cb:94:ca:48:92:cd:ba:34:c5:6a:9e:76:00:c3:f1:d4:
d1:93:c3:aa:49:01:2c:6f:9a:1b:79:73:1e:56:46:af:d3:cb:
2b:bc:40:79:52:4f:34:25:54:89:d1:cc:b3:72:66:4d:45:22:
c0:b4:be:44:4d:2c:43:b5:3d:c6:82:14:fc:e8:fe:3e:8d:c4:
ab:e2:45:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:03:00 2026 by rpki-client