
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e2032393134.roa
File: 3132342e3137332e3139322e302f31382d3234203d3e2032393134.roa (raw, json)
Hash identifier: 94c4L8jcpcWRNX8L+LsL2Z3BTKmrWPcv9ceWt/9V61c=
Subject key identifier: 85:53:DE:BB:0C:CA:8A:A1:85:16:B6:DE:BF:E1:F2:54:2A:38:E4:27
Certificate issuer: /CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Certificate serial: 76AEA22915372F62D4E18F52186E05965C20E64F
Authority key identifier: F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e2032393134.roa
Signing time: Fri 11 Sep 2026 12:25:25 +0000
ROA not before: Fri 11 Sep 2026 12:20:25 +0000
ROA not after: Fri 10 Sep 2027 12:25:25 +0000
asID: 2914
IP address blocks: 124.173.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 08:39:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ae:a2:29:15:37:2f:62:d4:e1:8f:52:18:6e:05:96:5c:20:e6:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F329F518724FAC695E33F5C78532CBF56BF4243D
Validity
Not Before: Sep 11 12:20:25 2026 GMT
Not After : Sep 10 12:25:25 2027 GMT
Subject: CN=8553DEBB0CCA8AA18516B6DEBFE1F2542A38E427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:58:80:27:ad:5c:13:58:83:59:38:5a:88:27:
23:53:71:5f:84:59:ab:cd:4f:23:16:84:a0:57:a6:
63:ab:30:a4:19:e0:7a:db:cb:95:b4:2f:d7:fa:cf:
6b:ea:bd:23:42:7d:12:57:46:1f:57:5a:f0:84:49:
25:a2:f6:3e:16:07:b4:a7:0c:c9:85:84:e5:82:e5:
04:4c:25:7c:51:97:12:d1:7e:c0:c9:0a:3d:b8:bc:
5e:d9:3e:10:6a:a3:a4:da:12:1a:52:cf:60:96:65:
00:bf:87:f0:47:8f:0d:b6:04:b3:53:fc:76:1d:6e:
b8:41:11:32:a1:be:76:b0:d1:d5:ed:90:89:c8:e6:
14:34:be:70:a1:26:0d:30:30:68:66:83:88:0c:cc:
a8:39:7d:3c:28:62:1b:b2:61:5c:b9:8f:f8:44:f1:
d0:15:5e:7a:7f:dc:b9:2b:49:fb:4b:24:5a:28:b6:
45:ed:bf:49:f2:d8:04:2e:3a:35:f9:ba:7c:b6:d5:
76:20:6f:47:ae:2f:74:3b:82:44:27:c5:cc:32:05:
c0:aa:48:5e:7b:ef:78:0e:75:bf:fc:32:3a:79:c6:
1e:57:99:0b:b0:87:83:15:9c:3c:a3:40:e4:0f:10:
37:61:4b:4f:9d:bc:37:05:2d:77:2f:1e:52:44:67:
4c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:53:DE:BB:0C:CA:8A:A1:85:16:B6:DE:BF:E1:F2:54:2A:38:E4:27
X509v3 Authority Key Identifier:
keyid:F3:29:F5:18:72:4F:AC:69:5E:33:F5:C7:85:32:CB:F5:6B:F4:24:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/F329F518724FAC695E33F5C78532CBF56BF4243D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F329F518724FAC695E33F5C78532CBF56BF4243D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947812867/0/3132342e3137332e3139322e302f31382d3234203d3e2032393134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.173.192.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:4f:70:c7:44:f6:ee:b5:50:5d:a8:18:ed:63:b6:bc:3e:37:
94:d6:0e:57:de:0d:db:51:d0:de:3c:24:10:7f:11:ec:f8:60:
a9:30:5a:0e:00:57:4e:30:7a:d4:d0:1f:db:c7:65:f1:be:56:
10:c9:86:67:d6:29:39:42:b7:4e:1a:1b:dc:f7:5e:bc:55:96:
e9:0d:7f:d3:a9:d8:42:cb:08:0d:14:8b:36:9d:90:4b:86:a6:
9a:a6:48:02:aa:c3:4a:82:f1:a9:94:bb:c1:27:00:b4:00:2e:
e8:44:e1:76:f7:8d:b0:d9:70:d3:0d:49:e6:a0:12:d7:34:09:
6c:fc:91:74:39:b4:dd:00:76:9b:12:10:ac:70:54:af:e4:a8:
3d:2e:5c:62:e6:2a:d1:f1:6b:e0:3b:c5:88:8a:3f:eb:94:e4:
72:38:5a:b9:cf:ed:f5:34:85:45:93:86:8a:69:02:27:d7:bb:
01:88:a7:8f:ef:d5:88:34:bd:fa:bd:68:af:71:67:00:26:9b:
c7:f7:a7:b5:2f:fe:16:97:99:0f:16:da:39:42:3e:10:29:4b:
15:0d:7f:da:20:2b:55:54:16:79:ed:b8:57:30:92:f6:ad:65:
92:e5:e8:59:ab:85:d5:69:88:7b:ea:a7:84:5e:3b:52:ca:39:
09:a8:a8:eb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 24 10:21:47 2026 by rpki-client