
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31392d3139203d3e203538383334.roa
File: 3132342e32392e302e302f31392d3139203d3e203538383334.roa (raw, json)
Hash identifier: 4KXWBC7Udm/rKSHsGW2aP8MzNhG8ssP0grQpmgHaZlA=
Subject key identifier: 0C:6D:B7:B7:54:2E:60:1D:F5:9C:63:BE:7C:B2:27:7B:E6:74:E9:6F
Certificate issuer: /CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Certificate serial: 6BB5C3BCD98ED9B04B48FFBF8176DF4F37D92CE7
Authority key identifier: FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31392d3139203d3e203538383334.roa
Signing time: Mon 31 Aug 2026 04:52:47 +0000
ROA not before: Mon 31 Aug 2026 04:47:47 +0000
ROA not after: Mon 30 Aug 2027 04:52:47 +0000
asID: 58834
IP address blocks: 124.29.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:b5:c3:bc:d9:8e:d9:b0:4b:48:ff:bf:81:76:df:4f:37:d9:2c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB14B61A535C49000EED2DD916500A26790A9E0E
Validity
Not Before: Aug 31 04:47:47 2026 GMT
Not After : Aug 30 04:52:47 2027 GMT
Subject: CN=0C6DB7B7542E601DF59C63BE7CB2277BE674E96F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:0d:81:76:60:6d:91:e5:d9:a1:8b:99:39:
d9:03:81:00:71:85:f1:07:46:1f:4a:c5:c3:ba:59:
93:f0:70:27:25:ba:69:92:31:05:42:24:01:f0:77:
a1:48:96:90:c5:9d:b6:4b:77:1f:a1:ea:c3:26:0e:
d7:a2:df:4e:9d:2a:3b:a2:b9:01:6f:20:2e:20:ce:
8c:f0:1c:11:b5:dd:cc:8e:49:3a:a8:e3:8d:53:9e:
1e:0a:71:93:38:f3:00:d1:4d:f3:31:dc:04:e3:93:
87:32:2d:04:5f:3f:29:b3:30:15:4b:93:27:a5:a3:
4b:26:a7:ce:39:07:82:28:0d:e8:d2:f5:fd:5d:33:
ba:c9:d2:d0:e7:ac:65:75:9a:d1:28:09:c1:9a:eb:
e3:29:ac:cd:05:62:1e:c9:88:b8:37:d7:54:17:15:
c2:50:83:f3:49:ec:c3:b9:6d:c7:8f:c8:4a:5a:10:
d7:f3:c2:4b:a8:c9:ca:fe:1c:c5:36:1b:f6:49:02:
41:b9:2a:0b:e7:82:0d:b7:ff:c5:24:4e:b6:05:4a:
35:f2:67:ab:ec:14:34:dd:cd:54:99:66:14:4b:31:
2e:af:45:3c:df:76:b7:ef:57:f6:e3:d7:aa:4f:60:
26:32:5b:85:0b:f8:f9:3d:e8:31:a2:99:5d:a4:c3:
17:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6D:B7:B7:54:2E:60:1D:F5:9C:63:BE:7C:B2:27:7B:E6:74:E9:6F
X509v3 Authority Key Identifier:
keyid:FB:14:B6:1A:53:5C:49:00:0E:ED:2D:D9:16:50:0A:26:79:0A:9E:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/FB14B61A535C49000EED2DD916500A26790A9E0E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/FB14B61A535C49000EED2DD916500A26790A9E0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714553345/0/3132342e32392e302e302f31392d3139203d3e203538383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.29.0.0/19
Signature Algorithm: sha256WithRSAEncryption
4f:50:10:8f:61:4e:ca:f3:0c:e0:4e:bf:44:f7:38:72:c6:b8:
0e:14:9a:9d:7d:15:ce:d1:28:f4:73:4d:f0:03:b9:03:1a:ca:
7c:a2:ac:ad:33:44:03:9d:1e:4c:dd:18:77:84:22:a5:7c:65:
96:5b:48:36:fb:6e:87:ed:45:67:f8:7a:69:e4:a4:c4:f0:eb:
07:07:13:0d:66:02:5a:bf:6b:9c:86:17:56:c2:ff:27:9b:9a:
cb:d2:4a:f1:95:07:56:75:b8:89:dc:02:b7:2d:56:67:e7:74:
e5:19:fc:ee:76:c4:7d:8d:fb:fb:74:cc:b4:80:fe:ad:51:84:
9a:b4:03:8c:b8:d1:1e:ee:3c:56:43:06:39:91:30:9c:a6:0e:
43:16:73:fd:fc:83:77:dc:b3:4e:01:c7:48:21:97:ce:5e:60:
c7:47:0f:4d:27:61:28:f7:67:4e:8a:d7:7c:e7:63:b9:dd:6a:
eb:b0:31:11:6b:3a:6b:2d:df:80:1d:27:ba:63:2e:c9:ec:ed:
aa:34:22:3f:56:c0:1c:7a:62:ef:06:09:72:85:b6:85:d4:58:
04:62:7b:a0:9f:4a:1b:27:86:f3:64:95:18:62:a0:b6:ee:cc:
b2:2d:90:ad:eb:ec:d0:bd:f4:7b:0f:ed:7f:09:0b:81:8f:82:
b0:6b:cf:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:08:45 2026 by rpki-client