
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31332e302f32342d3234203d3e20313331353336.roa
File: 3132342e31342e31332e302f32342d3234203d3e20313331353336.roa (raw, json)
Hash identifier: QC/RNF6fthoqyk0s4+w9CA9/N4e5bgB49YzS6M+25kM=
Subject key identifier: A9:AF:9B:0C:9C:07:E7:D8:61:3A:47:12:87:F0:BB:74:02:99:A8:E9
Certificate issuer: /CN=A162689F28161D4D4C3DF339D95097D5EF647370
Certificate serial: 14BEE0818187661590B86F0CA4B2CA87C0739202
Authority key identifier: A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31332e302f32342d3234203d3e20313331353336.roa
Signing time: Wed 17 Jun 2026 01:50:20 +0000
ROA not before: Wed 17 Jun 2026 01:45:20 +0000
ROA not after: Wed 16 Jun 2027 01:50:20 +0000
asID: 131536
IP address blocks: 124.14.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:03:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:be:e0:81:81:87:66:15:90:b8:6f:0c:a4:b2:ca:87:c0:73:92:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A162689F28161D4D4C3DF339D95097D5EF647370
Validity
Not Before: Jun 17 01:45:20 2026 GMT
Not After : Jun 16 01:50:20 2027 GMT
Subject: CN=A9AF9B0C9C07E7D8613A471287F0BB740299A8E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e5:ae:09:70:a6:b0:7a:01:db:51:28:6d:7a:
82:53:0d:cd:88:c3:33:06:2d:ef:e8:9d:43:46:2a:
8e:f3:0f:49:ac:97:c9:03:7b:b5:90:94:1a:04:b8:
96:b1:57:5b:05:15:69:e9:39:83:82:e1:4a:18:74:
a4:f7:ab:81:c7:c5:d8:8c:4a:a2:0d:9c:9c:0b:05:
ce:be:55:01:ea:88:29:ce:9c:be:f9:cc:92:58:e3:
d8:03:dd:dc:80:c9:47:e9:a7:6a:f9:7b:69:a2:44:
bc:ec:f2:c5:f8:f4:98:18:2e:8e:e6:ff:a0:86:45:
fe:22:f3:62:e7:e5:54:9b:6b:23:4c:9a:9f:05:77:
ab:3b:4e:c8:23:b7:3e:48:dc:1a:84:1c:76:5b:af:
0d:0a:3b:ea:6e:0c:f9:0e:50:a9:b1:ed:1e:92:37:
cf:09:e8:83:3a:35:de:19:ea:21:40:d7:1b:e2:45:
b3:5a:ad:bd:90:a9:fe:a5:e3:9e:46:25:67:61:fe:
66:70:bd:33:30:a3:cf:c5:b3:03:f0:5a:66:d7:4d:
57:6a:4d:1f:3c:40:54:cb:f3:57:de:d7:1a:68:c6:
df:f9:de:91:3a:b7:e5:04:98:05:ed:b3:c3:92:c8:
2f:d3:18:f0:26:cf:88:0a:03:a6:ba:f6:fd:4a:ea:
72:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:9B:0C:9C:07:E7:D8:61:3A:47:12:87:F0:BB:74:02:99:A8:E9
X509v3 Authority Key Identifier:
keyid:A1:62:68:9F:28:16:1D:4D:4C:3D:F3:39:D9:50:97:D5:EF:64:73:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/A162689F28161D4D4C3DF339D95097D5EF647370.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A162689F28161D4D4C3DF339D95097D5EF647370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582330346930177/0/3132342e31342e31332e302f32342d3234203d3e20313331353336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.14.13.0/24
Signature Algorithm: sha256WithRSAEncryption
07:80:a7:55:a1:5b:47:a4:0a:38:49:c6:2b:11:c5:4e:03:db:
09:cc:f1:5a:19:60:57:44:9f:28:31:08:b3:1f:64:d5:00:14:
2e:02:9c:8e:e1:79:79:d0:2b:31:fb:7e:e0:e9:81:3e:f4:da:
d8:2d:0c:7b:41:8e:9f:35:af:1a:6f:a1:3c:43:0d:1c:10:45:
26:a2:ed:45:4d:d9:3b:eb:3c:92:b0:6c:72:7a:a3:b8:63:69:
52:4f:5d:27:94:b6:ab:1f:00:91:1b:91:67:13:6b:d0:28:4a:
ce:87:88:bd:e4:66:e4:67:b7:6b:93:6b:e3:1e:a5:6f:5c:fd:
af:36:72:3e:d2:e6:80:7f:e8:11:fe:94:b2:e1:6d:e6:95:8f:
c7:23:a9:3b:72:f6:03:e2:a7:0d:85:87:68:77:c7:36:61:01:
b4:cb:25:09:7c:81:0a:32:06:bb:26:c5:87:33:64:de:3d:cc:
21:ca:38:53:51:cb:ae:35:1e:4b:e9:e4:32:49:e2:3e:a9:56:
e0:c1:ef:1d:cc:39:bc:d7:76:c7:92:12:e7:0a:f4:23:b8:c7:
fe:45:3c:ac:3c:08:fb:fd:23:b7:8a:14:35:ad:4a:b7:b9:21:
8f:1b:b9:02:02:dc:2f:18:6c:c0:c2:d4:5b:ad:13:0a:63:a3:
83:a5:67:ee
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:54:32 2026 by rpki-client