
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20313938343836.roa
File: 3132332e39382e362e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: 4weCXK1oK0sDM4I4oalIip7ty+i6KFGZvjihq6ekMCs=
Subject key identifier: 88:15:A8:2E:2E:54:FF:E7:4C:81:D8:89:B7:96:00:BE:03:AC:66:0D
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 42048F7432EDE473BC95BA2C3696590D97724E44
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20313938343836.roa
Signing time: Mon 13 Jul 2026 03:46:33 +0000
ROA not before: Mon 13 Jul 2026 03:41:33 +0000
ROA not after: Mon 12 Jul 2027 03:46:33 +0000
asID: 198486
IP address blocks: 123.98.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:04:8f:74:32:ed:e4:73:bc:95:ba:2c:36:96:59:0d:97:72:4e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:33 2026 GMT
Not After : Jul 12 03:46:33 2027 GMT
Subject: CN=8815A82E2E54FFE74C81D889B79600BE03AC660D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6b:76:d4:de:b4:4f:c8:07:4c:cb:38:1d:9f:
09:98:7e:ba:ca:32:20:8d:a7:3a:0d:ba:4a:19:b2:
25:13:70:31:b0:43:e4:b7:94:a9:d6:a7:30:8f:65:
25:f5:57:d3:cb:12:a7:d1:f1:30:88:45:81:96:ea:
3c:5d:be:68:0d:8c:77:c2:90:0d:80:39:30:db:bd:
06:e9:3f:de:cf:31:e9:41:6a:dd:1f:5f:e6:04:d7:
8d:49:da:48:52:08:d0:9b:2d:43:50:05:b6:63:36:
5f:69:6b:ca:32:95:43:0d:c8:6b:61:e7:6e:a3:7b:
d8:c1:04:39:5f:ae:bc:97:9c:97:85:d1:4f:05:2c:
ed:89:24:6b:32:d5:9a:5a:d2:59:b8:f9:ff:69:42:
ab:d1:3a:75:00:72:c2:e5:1b:de:32:50:1b:73:16:
1e:6d:c7:1d:37:5a:58:7d:aa:5c:41:7b:c7:4e:53:
42:55:80:c5:5e:24:02:15:23:71:34:fd:38:42:00:
ab:8b:da:d9:43:de:38:97:92:f6:6f:bb:6a:88:66:
f0:f8:3c:21:2b:ab:16:04:08:ff:ca:76:89:1d:f7:
3a:0f:85:9f:af:41:b5:cc:86:b3:a7:b8:c0:6b:0c:
94:11:a9:19:9a:3a:83:2c:a8:51:1c:6a:9c:93:a5:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:15:A8:2E:2E:54:FF:E7:4C:81:D8:89:B7:96:00:BE:03:AC:66:0D
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fd:aa:4d:81:21:cb:3e:a3:28:c5:39:f6:44:bb:79:23:c0:
9f:0c:f4:cc:db:21:98:07:43:a4:4d:76:a5:9c:19:bf:1c:82:
f0:7b:80:e7:56:54:01:6a:7a:4a:62:2f:5f:ee:20:c0:59:cb:
6a:3a:0a:b4:db:fd:75:30:14:4c:e3:aa:47:42:5e:3c:16:d2:
81:05:85:cb:b1:b8:79:be:a6:d4:7b:45:e2:9c:13:5d:cf:1b:
3e:f4:6c:d4:72:49:d7:b9:73:61:08:ea:e3:8a:4d:59:de:14:
e3:24:16:7e:81:68:3a:80:58:48:43:1b:97:5c:24:29:01:9f:
3f:98:d2:e8:e8:42:55:23:c0:3b:e4:d3:4c:28:89:ae:85:09:
fb:05:a6:e4:0b:7f:c8:eb:d5:d7:f4:ff:4b:ca:ea:b1:9f:16:
6e:e6:0b:b6:bb:a5:03:d8:16:b0:5e:52:02:24:be:52:b2:0e:
73:4e:7b:0b:87:63:4f:68:9b:21:21:84:f2:c1:75:1a:f7:12:
c4:a1:42:97:0c:9e:5c:e6:9f:a0:1d:14:f0:aa:13:3b:4f:ac:
29:0e:b2:a8:cb:54:47:e3:ed:8e:79:87:39:57:76:19:41:34:
6e:e1:01:61:f0:00:72:2d:ef:a8:87:72:42:45:30:cf:a2:d2:
bd:3d:92:9a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUQgSPdDLt5HO8lbosNpZZDZdyTkQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0
NEM5RUY4RTAeFw0yNjA3MTMwMzQxMzNaFw0yNzA3MTIwMzQ2MzNaMDMxMTAvBgNV
BAMTKDg4MTVBODJFMkU1NEZGRTc0QzgxRDg4OUI3OTYwMEJFMDNBQzY2MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCca3bU3rRPyAdMyzgdnwmYfrrK
MiCNpzoNukoZsiUTcDGwQ+S3lKnWpzCPZSX1V9PLEqfR8TCIRYGW6jxdvmgNjHfC
kA2AOTDbvQbpP97PMelBat0fX+YE141J2khSCNCbLUNQBbZjNl9pa8oylUMNyGth
526je9jBBDlfrryXnJeF0U8FLO2JJGsy1Zpa0lm4+f9pQqvROnUAcsLlG94yUBtz
Fh5txx03Wlh9qlxBe8dOU0JVgMVeJAIVI3E0/ThCAKuL2tlD3jiXkvZvu2qIZvD4
PCErqxYECP/Kdokd9zoPhZ+vQbXMhrOnuMBrDJQRqRmaOoMsqFEcapyTpQjnAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUiBWoLi5U/+dMgdiJt5YAvgOsZg0wHwYDVR0j
BBgwFoAU6JNDSjIFja/pdY/aezZllETJ744wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODU1MzEyOTUyNTI1MS8wL0U4OTM0MzRBMzIwNThEQUZFOTc1OEZEQTdCMzY2
NTk0NDRDOUVGOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRTg5MzQzNEEzMjA1OERBRkU5NzU4RkRBN0IzNjY1OTQ0NEM5RUY4RS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTg4NTUzMTI5NTI1MjUxLzAvMzEzMjMzMmUzOTM4
MmUzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzkzODM0MzgzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAHtiBjANBgkqhkiG9w0BAQsFAAOCAQEALf2qTYEhyz6jKMU59kS7eSPAnwz0
zNshmAdDpE12pZwZvxyC8HuA51ZUAWp6SmIvX+4gwFnLajoKtNv9dTAUTOOqR0Je
PBbSgQWFy7G4eb6m1HtF4pwTXc8bPvRs1HJJ17lzYQjq44pNWd4U4yQWfoFoOoBY
SEMbl1wkKQGfP5jS6OhCVSPAO+TTTCiJroUJ+wWm5At/yOvV1/T/S8rqsZ8WbuYL
trulA9gWsF5SAiS+UrIOc057C4djT2ibISGE8sF1GvcSxKFClwyeXOafoB0U8KoT
O0+sKQ6yqMtUR+PtjnmHOVd2GUE0buEBYfAAci3vqIdyQkUwz6LSvT2Smg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:50 2026 by rpki-client