
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e37322e302f32322d3234203d3e20323034373635.roa
File: 3132332e39382e37322e302f32322d3234203d3e20323034373635.roa (raw, json)
Hash identifier: Qkg4kzLqXJpl9AlRgGYYWDYCEXD8tTlCHo/iHTmDv+M=
Subject key identifier: 3E:9B:E3:39:96:36:90:26:E3:4C:48:21:6B:6E:4C:BE:1F:01:C0:4E
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 20DDACAC361DFD6CB9E31654631CC7D28130A23F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e37322e302f32322d3234203d3e20323034373635.roa
Signing time: Mon 13 Jul 2026 03:46:39 +0000
ROA not before: Mon 13 Jul 2026 03:41:39 +0000
ROA not after: Mon 12 Jul 2027 03:46:39 +0000
asID: 204765
IP address blocks: 123.98.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 03:41:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:dd:ac:ac:36:1d:fd:6c:b9:e3:16:54:63:1c:c7:d2:81:30:a2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:39 2026 GMT
Not After : Jul 12 03:46:39 2027 GMT
Subject: CN=3E9BE33996369026E34C48216B6E4CBE1F01C04E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b2:f8:da:79:48:d0:4d:3f:2b:9f:fe:67:90:
eb:6a:ae:53:24:91:80:71:f0:6f:96:fe:43:74:7e:
07:ed:d7:4f:08:99:81:ef:aa:08:00:8b:4c:7a:e8:
09:09:43:e1:72:75:6e:db:9c:65:25:98:6c:ef:a8:
7d:c4:05:78:4f:b0:85:ed:ae:15:8f:bd:c1:bc:63:
40:c3:59:13:73:bc:c7:03:a5:11:18:63:46:fe:3c:
76:a6:9c:b8:c9:fb:0d:81:52:d6:62:31:c2:85:c7:
fb:97:09:45:97:c2:6d:50:35:2e:24:00:80:7e:e6:
5c:1a:31:3e:9b:3e:da:6d:51:2f:3e:f4:a5:4d:f0:
d7:af:c1:0b:f1:2f:9d:30:da:8f:45:e6:d9:16:1e:
b6:08:c0:4c:a0:2c:06:fa:14:67:d1:b7:45:2d:27:
ab:cb:75:02:99:3c:5d:9b:1b:8d:60:19:bf:8c:18:
9c:7e:7d:b5:2a:8c:5f:56:01:b0:21:d8:96:9c:7e:
20:e7:9d:e9:15:a2:53:16:e0:a9:c3:84:76:33:d6:
e5:3b:99:02:07:dc:55:e3:ac:c6:67:9f:7d:22:b4:
ce:19:a8:8c:a7:80:7d:0f:5a:7d:f6:fa:be:c6:1f:
41:8a:ba:aa:57:60:69:19:8d:4b:46:9f:77:72:f6:
9f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9B:E3:39:96:36:90:26:E3:4C:48:21:6B:6E:4C:BE:1F:01:C0:4E
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e37322e302f32322d3234203d3e20323034373635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.72.0/22
Signature Algorithm: sha256WithRSAEncryption
16:8c:4b:95:30:9f:b5:93:63:19:20:ff:e2:28:ce:92:de:94:
12:55:5e:cc:b7:3a:e5:4b:75:f8:d0:85:7b:a6:44:c2:02:0a:
01:2f:a5:ad:8d:54:79:08:6a:30:3d:31:87:23:12:b9:44:0a:
f3:35:2c:a4:9a:d5:20:05:ce:37:d1:61:9e:91:15:eb:8a:38:
9a:a9:e2:64:6e:c3:1f:a3:c0:67:36:ea:ab:4c:e1:3b:74:a0:
81:96:19:3c:ec:29:af:f0:da:df:11:2b:8e:46:4a:fc:95:86:
42:7b:c3:9a:41:b9:90:bf:2d:c1:39:ed:2d:c0:62:5a:b0:14:
c0:31:65:64:8f:01:77:73:fc:96:47:90:ea:f3:a6:d8:26:da:
55:6a:98:1b:4b:e3:b6:5d:19:da:c4:8e:09:03:ba:f5:e1:cd:
f9:87:d2:ed:1a:19:70:c1:58:fa:a7:da:90:62:f4:75:0a:fb:
11:40:d5:7f:de:33:8b:ed:1f:9d:a3:58:61:5e:7b:17:61:cd:
c6:69:92:72:e2:39:a8:1a:01:d6:8c:3b:c8:3f:8d:c2:aa:90:
4d:1e:19:75:0c:85:e4:4b:75:ed:93:04:a8:07:9e:91:bc:3c:
15:ef:ce:28:1d:b2:48:cf:40:26:e4:64:7e:ec:c0:72:30:2a:
27:3c:a4:ae
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:34:27 2026 by rpki-client