
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e33362e302f32322d3234203d3e203632333837.roa
File: 3132332e39382e33362e302f32322d3234203d3e203632333837.roa (raw, json)
Hash identifier: 0ttPz1JT+NPHk6Mr6O45zrFCsoM/7t3ad819rBLWpA0=
Subject key identifier: 16:37:46:EC:D6:D7:53:C4:F9:50:C8:A6:D3:33:B2:E0:35:D4:39:6B
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 46812F412E5833FBC58A5D14AA33FC62D1C06A72
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e33362e302f32322d3234203d3e203632333837.roa
Signing time: Mon 13 Jul 2026 03:46:32 +0000
ROA not before: Mon 13 Jul 2026 03:41:32 +0000
ROA not after: Mon 12 Jul 2027 03:46:32 +0000
asID: 62387
IP address blocks: 123.98.36.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:81:2f:41:2e:58:33:fb:c5:8a:5d:14:aa:33:fc:62:d1:c0:6a:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:32 2026 GMT
Not After : Jul 12 03:46:32 2027 GMT
Subject: CN=163746ECD6D753C4F950C8A6D333B2E035D4396B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:19:ae:d4:48:28:54:03:e4:39:c5:07:54:
ec:d4:a2:29:1e:fb:c3:a9:f6:f2:30:70:53:68:68:
af:c9:82:97:4b:fa:41:b7:f1:4f:dc:ae:5b:7f:ca:
8e:8c:4b:ef:2d:97:40:c0:31:5f:01:02:de:e0:d9:
d7:86:eb:95:b9:cf:d8:74:18:e4:cf:ca:c7:30:6d:
73:9b:f5:64:2d:6f:25:45:bf:50:11:eb:48:a7:7e:
35:df:e2:7d:43:23:7e:0f:e4:d2:ce:76:9f:5d:4a:
92:c8:17:fb:03:97:3e:7d:ca:40:0b:18:11:30:9a:
71:92:80:3a:40:54:ae:98:7f:78:e4:e1:d0:7b:d4:
3f:91:a0:8f:f7:09:14:f3:40:71:d2:7f:2f:f5:52:
69:4f:c3:c6:b9:fb:27:77:5b:1b:82:ef:e0:35:cd:
e2:3b:d4:84:2a:7a:08:f8:2a:03:d5:c3:92:97:41:
0e:0c:90:d7:9b:ce:95:ee:6e:ee:67:a3:1d:93:8c:
53:0d:a8:5c:e1:fa:cd:6f:6d:3d:e6:e1:e2:80:2b:
09:e8:4d:60:bd:73:7f:c9:dc:4f:65:73:d0:21:fb:
ba:89:25:f5:c5:c7:77:c1:60:26:c3:58:53:fe:3a:
0e:52:9f:92:33:d6:65:95:31:eb:bb:e5:12:ee:e4:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:37:46:EC:D6:D7:53:C4:F9:50:C8:A6:D3:33:B2:E0:35:D4:39:6B
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e33362e302f32322d3234203d3e203632333837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.36.0/22
Signature Algorithm: sha256WithRSAEncryption
66:7e:19:57:ff:b1:f8:b4:01:16:63:e6:a9:a4:2e:11:3b:7d:
69:17:a6:93:20:3c:a6:9c:ef:f5:08:2e:e0:d1:74:66:45:94:
93:9a:78:98:79:30:00:77:f0:b4:bc:36:5f:24:45:5b:28:8e:
12:6f:86:73:2f:37:15:12:e1:05:11:a6:6b:cb:f8:66:d1:01:
cb:dc:96:9a:9e:07:01:69:77:8f:b6:9b:73:c7:90:e5:d1:e0:
8c:f1:b1:9e:6d:60:9d:00:b4:5d:5b:9a:17:da:84:50:a5:c8:
fb:26:b8:6a:9f:33:fb:23:51:73:58:0a:f9:f8:d8:57:2f:cd:
5a:2a:1f:fb:6d:0b:ab:bb:4e:4e:ee:e4:02:79:28:11:2e:6a:
57:22:fa:3c:3f:e3:39:c1:18:59:ea:3f:2a:02:c5:10:ad:72:
e7:0c:fa:ae:d5:67:c4:a4:9c:ed:08:50:57:d8:55:37:65:d7:
1e:c3:d3:b0:04:86:5b:99:74:bb:3a:61:c4:68:6b:cb:38:c6:
83:3d:42:a2:b9:37:37:c8:02:aa:ef:7a:5e:d6:c0:40:db:a9:
22:88:34:51:ae:95:6f:65:4b:cc:a5:23:3a:e1:b2:35:3d:fa:
19:5d:f0:cd:20:74:c8:c0:02:2f:80:08:c6:1c:df:75:0b:51:
ea:5f:d5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:20:34 2026 by rpki-client