
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e20313438393936.roa
File: 3132342e3137332e302e302f31382d3234203d3e20313438393936.roa (raw, json)
Hash identifier: P8vZUefWpMs2onGR3YT6QM83Yn6JXZPk7SGGIh9HmBs=
Subject key identifier: 82:23:C4:08:F7:99:26:CD:BC:97:28:6F:8B:A7:18:04:36:1B:69:A0
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 2DA982F88312E076D8BF5DD3F9C70A4790857EA9
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e20313438393936.roa
Signing time: Fri 11 Sep 2026 12:25:25 +0000
ROA not before: Fri 11 Sep 2026 12:20:25 +0000
ROA not after: Fri 10 Sep 2027 12:25:25 +0000
asID: 148996
IP address blocks: 124.173.0.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 15 Sep 2026 09:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a9:82:f8:83:12:e0:76:d8:bf:5d:d3:f9:c7:0a:47:90:85:7e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:25 2026 GMT
Not After : Sep 10 12:25:25 2027 GMT
Subject: CN=8223C408F79926CDBC97286F8BA71804361B69A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:49:f2:00:2d:8a:03:55:7b:c4:89:71:7f:64:
c2:1c:80:c8:ae:34:97:82:d3:fd:4e:27:50:67:78:
54:06:1b:f0:40:91:29:7d:66:39:cc:ab:5e:b8:df:
3b:7d:c7:41:0f:44:ee:1a:8c:40:b3:2e:40:ee:dc:
82:42:3b:30:28:9a:c2:47:4a:8b:be:51:b2:71:af:
76:11:66:d0:c3:da:4c:88:b3:c3:82:c5:c4:74:61:
3a:88:fc:40:5d:13:b0:d0:72:06:3f:75:13:4d:e7:
6b:e3:27:7e:30:7f:d3:ae:9e:0b:1d:fe:f0:39:5a:
b3:a0:c5:b3:e8:4e:6e:b9:31:54:32:08:72:53:09:
8a:5b:b7:6e:83:09:63:a6:ee:d6:8e:15:7c:a1:a4:
c6:88:47:a8:88:54:05:74:06:67:2b:f3:a9:03:09:
a8:f3:d0:7c:8b:e6:05:08:6d:b2:c6:99:3c:29:d3:
d8:fc:a2:5d:01:f4:6a:88:98:ae:77:49:42:19:78:
54:9a:6e:d3:a9:33:4f:6c:90:97:94:a3:e0:1b:d5:
21:b7:60:fe:05:9d:29:03:81:b7:11:6e:2e:ff:1d:
19:c7:02:4f:29:bb:c1:9e:34:6b:ff:ae:7c:65:29:
df:b5:4a:16:56:f1:35:19:9b:23:34:ad:05:a4:66:
53:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:23:C4:08:F7:99:26:CD:BC:97:28:6F:8B:A7:18:04:36:1B:69:A0
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e302e302f31382d3234203d3e20313438393936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.0.0/18
Signature Algorithm: sha256WithRSAEncryption
c0:f5:5e:33:48:1f:01:33:ae:66:34:87:89:72:94:12:37:a5:
42:f3:14:77:b0:09:f5:c7:d8:d1:ad:ac:b6:90:3f:66:36:c3:
20:dc:a5:f1:93:42:da:3c:ee:a9:07:d4:1c:d2:92:d4:31:09:
44:cb:0a:14:17:a4:75:f1:df:67:af:89:d8:db:13:5c:4a:0e:
9b:c9:b0:d9:72:b2:57:8a:6f:17:8c:64:44:a4:79:cc:e7:2d:
bc:a5:ac:fb:fc:4d:d0:64:7b:70:d7:55:2c:23:7e:52:b6:bc:
87:9b:6b:5a:da:40:38:48:22:70:61:fe:dd:a6:fd:4a:ae:63:
c2:86:81:57:d1:ef:e5:d4:0e:d2:6d:7d:1a:50:d3:24:41:8d:
bf:9b:d7:58:6f:a9:81:8b:63:f6:24:9e:34:d2:8d:e2:91:dc:
fe:73:50:ae:63:27:2b:cd:b5:e9:44:78:7c:34:0a:0f:2a:f3:
95:6e:40:c5:55:8b:04:68:d3:3b:f6:a7:fc:e6:99:f0:c2:67:
3c:e0:13:ef:4c:cc:22:2d:38:eb:38:af:1f:8d:98:34:1a:5f:
2f:ba:34:c4:b3:47:c8:76:f1:ca:34:f2:90:b2:31:58:40:58:
20:79:d7:27:1f:fa:d1:b0:7a:c6:a0:49:db:57:30:c1:f5:a8:
ce:a6:75:b3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Sep 13 08:50:38 2026 by rpki-client