
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e322e302f32342d3234203d3e20313938343836.roa
File: 3132332e39382e322e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: t6r6gpom/L4GKuXTMkZoW13T4YUVcqIMHIHpdj6hGlU=
Subject key identifier: 9C:EE:C6:75:8A:75:6A:24:95:9A:6F:02:49:EB:44:F5:AB:6B:7D:27
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 45EDC393B71662D3CAB30659F54A8C0BAB8B42EC
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e322e302f32342d3234203d3e20313938343836.roa
Signing time: Wed 06 May 2026 06:18:12 +0000
ROA not before: Wed 06 May 2026 06:13:12 +0000
ROA not after: Wed 05 May 2027 06:18:12 +0000
asID: 198486
IP address blocks: 123.98.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:ed:c3:93:b7:16:62:d3:ca:b3:06:59:f5:4a:8c:0b:ab:8b:42:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:13:12 2026 GMT
Not After : May 5 06:18:12 2027 GMT
Subject: CN=9CEEC6758A756A24959A6F0249EB44F5AB6B7D27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:1a:14:85:cd:96:1a:c4:8a:d8:1f:14:63:
1a:54:e7:49:3a:7c:a8:06:e4:ab:40:34:15:e2:b4:
97:c9:ea:79:44:98:aa:4a:b5:36:98:72:1f:c0:18:
93:de:3e:b8:f7:29:8c:40:62:15:72:1f:b0:57:29:
8d:b4:f2:5e:2b:ca:80:42:ec:7e:15:21:74:d7:95:
ad:20:ad:03:7d:fe:2f:2c:d5:9a:ad:49:83:c8:c1:
26:6e:c8:b9:9a:e7:c6:9d:7e:3a:16:ef:fc:0d:85:
fd:fa:68:8f:af:a4:8d:c6:2f:0b:2b:9d:f7:cc:52:
39:ed:ee:0d:7a:0e:cb:f0:cb:f6:bf:f6:5c:7d:13:
95:17:80:71:de:c6:81:19:9f:c1:5d:cf:96:99:9b:
91:6c:04:25:bf:ab:a3:70:24:ad:8d:60:2b:a5:68:
05:2b:5e:d3:e9:81:f2:a7:c9:c1:de:ac:1a:f6:54:
44:a8:bc:f0:ac:8b:b2:8c:29:a3:09:6a:23:77:ab:
09:e7:dd:69:41:39:ae:55:e2:48:31:02:ed:0c:07:
49:01:8c:6a:df:2c:b7:50:a3:b8:31:de:2b:99:6e:
1f:50:4e:3d:36:35:1c:f8:5b:a3:ee:cb:0f:92:21:
63:4f:c0:ef:e7:af:6d:b9:13:9a:0a:0a:e7:01:bb:
5c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:EE:C6:75:8A:75:6A:24:95:9A:6F:02:49:EB:44:F5:AB:6B:7D:27
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e322e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.2.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:c1:86:1b:98:16:26:05:8e:1e:7c:a7:a4:73:d0:95:c3:36:
5f:f6:03:92:34:63:7b:17:c4:6d:d0:ee:08:a4:1a:50:df:8a:
5d:7b:85:48:1e:7d:8d:b9:ba:59:91:13:52:b2:2f:fe:cf:36:
d5:2c:52:14:89:45:83:8c:2e:7f:6f:c2:19:56:4d:35:21:39:
94:21:22:f8:a6:64:7e:bb:67:39:b0:ca:01:aa:43:e0:cd:7c:
86:5e:67:47:10:e9:f0:7d:0e:68:3a:b1:65:8c:98:68:37:61:
fa:d4:20:1c:03:ed:79:2d:7a:9a:ad:64:3c:ed:75:87:ac:dd:
b1:c9:7f:9c:b4:45:e5:b4:af:b6:8f:15:e0:e8:88:b1:44:05:
90:70:dc:95:6c:b3:42:b4:e3:ba:d0:71:3c:04:66:1c:ab:20:
3c:42:6f:f8:3b:69:e4:c4:6d:1d:55:cd:ac:61:cd:6a:b6:53:
0c:2a:05:51:9e:75:71:5c:fb:4f:ba:4f:61:12:da:8c:26:b9:
3e:d6:17:bd:8e:56:69:21:d8:b2:39:79:da:3f:38:c3:c0:c5:
7f:f0:40:0b:a0:52:ac:cc:ca:02:64:b9:1a:39:c8:06:e5:b5:
1c:da:6e:01:ec:11:5e:83:da:82:f4:63:0c:53:e1:66:af:24:
9a:e6:31:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:05:32 2026 by rpki-client