
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20313438393936.roa
File: 3132342e3137322e302e302f31372d3234203d3e20313438393936.roa (raw, json)
Hash identifier: M6clyUBdDOgg+Ing9U/8HHeEzR0Ip4JGyN1ndB28I10=
Subject key identifier: 38:48:BE:16:EF:64:FE:4D:AC:C8:43:99:3E:A6:15:EB:7F:43:44:46
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 40986DBB9F92A773E6673A2E706EA27F556A452D
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20313438393936.roa
Signing time: Fri 11 Sep 2026 12:25:25 +0000
ROA not before: Fri 11 Sep 2026 12:20:25 +0000
ROA not after: Fri 10 Sep 2027 12:25:25 +0000
asID: 148996
IP address blocks: 124.172.0.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:98:6d:bb:9f:92:a7:73:e6:67:3a:2e:70:6e:a2:7f:55:6a:45:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:25 2026 GMT
Not After : Sep 10 12:25:25 2027 GMT
Subject: CN=3848BE16EF64FE4DACC843993EA615EB7F434446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b1:df:29:ba:8f:ac:9e:63:a1:a9:5d:f6:9e:
0b:b6:fb:07:5c:53:2f:09:53:33:df:4c:1e:33:e3:
9d:be:d5:88:5e:86:88:6c:37:34:9d:30:da:e6:c2:
56:9a:b7:52:b9:31:9a:82:5f:51:c3:ab:cb:ec:25:
7d:21:b7:08:64:22:9e:41:b6:88:64:22:5f:2c:62:
ab:99:c4:1e:03:c5:42:60:de:29:d8:4b:b0:46:e0:
23:0e:6d:b0:28:f9:20:42:eb:6d:7f:7f:15:0d:75:
8a:3e:37:89:90:6c:6c:1f:34:58:e8:f1:76:1e:7b:
cb:80:d9:3b:c9:f7:39:1a:74:84:46:c8:6d:0c:af:
fa:1f:b5:8d:d2:dc:fc:fa:8f:de:14:2f:01:86:dd:
77:42:79:88:65:97:77:58:53:1b:35:c5:dc:a0:de:
48:13:91:8c:da:20:c6:9b:46:47:5b:1a:78:e0:65:
9e:75:22:0d:5d:f2:1f:40:c4:58:70:41:fd:5d:9b:
b5:a9:40:91:89:e6:1f:bc:d5:6a:94:ef:ad:25:b8:
be:da:24:2a:6b:dc:ff:f9:8f:28:c5:42:2d:84:1b:
c7:f5:ae:4d:bc:a4:dd:c9:78:ab:35:a3:78:c3:2b:
70:25:9f:0c:0c:35:0c:9c:2f:0f:62:63:38:ea:73:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:48:BE:16:EF:64:FE:4D:AC:C8:43:99:3E:A6:15:EB:7F:43:44:46
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137322e302e302f31372d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.172.0.0/17
Signature Algorithm: sha256WithRSAEncryption
3b:52:d3:81:b6:54:cc:28:34:75:57:39:88:68:7b:f1:cd:e3:
78:9f:5a:3a:94:a3:c6:95:14:ad:5b:21:9b:52:29:29:b2:08:
01:aa:e6:2e:14:09:ad:1f:9f:ef:96:6d:a6:7c:2a:fe:89:c4:
b5:53:a3:a0:ab:68:5d:47:ed:da:3a:41:61:31:97:90:42:3c:
fa:cf:51:a0:26:9e:fa:b1:f2:5a:4d:76:86:52:83:3e:bd:e8:
49:2c:f0:75:aa:aa:7a:82:77:6e:1e:59:f2:29:c0:6c:15:dd:
27:8d:0d:5f:3e:61:13:cc:29:89:c8:fb:b4:ed:6d:2f:0d:a8:
0c:f1:af:90:fa:49:12:78:81:a9:6f:2f:d8:0d:aa:80:61:c2:
ae:17:94:52:88:4b:cf:f8:73:5d:f2:c7:90:24:63:0c:b5:c8:
51:41:dc:52:9e:36:6f:e9:aa:22:a5:58:80:43:07:3e:3d:16:
cd:31:92:c2:6a:0a:0d:54:29:62:c6:04:3a:e2:4d:b5:0b:34:
34:dd:e6:ce:6c:e9:bb:e1:a0:fd:a3:93:62:64:c6:63:03:c4:
bc:8b:c0:74:8f:da:f8:29:41:cf:3c:71:2b:1a:70:f9:a8:95:
e8:6b:83:1f:4d:e8:9d:58:7b:44:c7:6c:f9:34:43:d3:ea:8c:
95:59:53:40
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 13 10:17:24 2026 by rpki-client