
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e332e302f32342d3234203d3e20313938343836.roa
File: 3132332e39382e332e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: L76zWDXckxv9Jby76XXltqnmiC7kQ7AcE05OEsJfMqQ=
Subject key identifier: 56:FE:00:F8:11:98:DA:A1:C1:BE:CB:9B:B0:4E:D2:66:1F:78:39:EE
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 47D23063C179DEA3722AD75BDC17BCA25134510F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e332e302f32342d3234203d3e20313938343836.roa
Signing time: Wed 06 May 2026 06:18:20 +0000
ROA not before: Wed 06 May 2026 06:13:20 +0000
ROA not after: Wed 05 May 2027 06:18:20 +0000
asID: 198486
IP address blocks: 123.98.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:d2:30:63:c1:79:de:a3:72:2a:d7:5b:dc:17:bc:a2:51:34:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:13:20 2026 GMT
Not After : May 5 06:18:20 2027 GMT
Subject: CN=56FE00F81198DAA1C1BECB9BB04ED2661F7839EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:94:91:0f:1e:c7:79:4b:4c:01:ac:80:33:
ab:03:35:74:8f:0b:47:d8:71:c7:62:55:cd:56:4d:
ac:9b:fb:a0:8f:3b:aa:a6:54:92:41:3a:8b:a2:f5:
4c:26:49:06:e9:a0:4c:01:c2:41:6f:75:da:ec:e2:
47:1b:14:4e:ef:52:69:ad:55:54:5d:f8:d7:d9:6b:
95:ad:a8:12:bb:74:39:fb:03:55:13:fc:b4:a0:6a:
a7:72:ad:86:90:2a:e4:0d:92:6d:b5:1f:c5:f7:cd:
79:d0:43:56:1d:29:a7:e0:d4:9d:13:86:e1:a6:62:
1b:c8:1d:55:6a:3f:32:17:cc:86:db:1f:2f:bb:44:
b4:f0:6f:82:b4:e9:a3:7b:1f:82:69:b2:e2:06:1a:
e5:2a:d2:39:de:ab:6c:37:ef:e8:96:d0:73:31:85:
6b:1e:57:06:2f:cc:4c:30:f1:b1:b8:5c:d5:be:d5:
6d:c0:7a:fd:45:c5:c0:a4:ab:c7:52:68:4a:7d:a0:
5d:72:13:ba:4d:2d:00:8a:bc:07:ee:ed:da:d1:ed:
e1:a3:59:39:72:6a:1e:da:25:30:ab:d8:a0:e2:a5:
ec:c0:10:a2:5b:0c:69:86:59:84:5e:ea:7e:10:91:
72:60:cc:73:a5:2b:7d:48:cf:a1:0d:4b:5d:e5:9e:
6c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FE:00:F8:11:98:DA:A1:C1:BE:CB:9B:B0:4E:D2:66:1F:78:39:EE
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e332e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.3.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:16:2d:73:1c:94:69:2d:d0:69:06:e4:e8:91:f4:92:c6:c4:
23:a8:59:bf:b8:d3:a2:37:d4:ec:c0:b2:f4:4c:98:43:13:37:
0c:d0:ee:8a:08:06:96:f0:c5:66:57:0e:58:37:49:03:f4:a5:
e9:6a:85:83:be:c2:98:87:dc:5b:7d:2b:a8:23:f3:b4:3e:05:
53:ca:b3:c3:57:8b:fe:2c:9c:cc:7f:15:f5:30:e1:0b:40:1a:
96:3f:de:e4:4c:fd:ef:de:20:18:59:4f:40:77:f0:d4:7a:1d:
d4:7d:77:fd:13:9d:21:a3:ef:ac:b2:27:a3:45:5a:68:f9:5c:
7c:0e:69:ef:f3:0a:e0:71:0a:5e:54:73:30:ae:22:da:13:e7:
7d:56:13:cb:93:24:1b:a1:bd:58:f4:5a:44:61:19:38:b3:18:
0a:00:1b:69:19:49:04:ff:4c:75:e4:a5:00:0b:cf:bb:f5:9b:
d9:d8:68:a0:cd:91:c6:21:0b:5b:27:11:d9:35:bb:5f:85:65:
3f:b3:70:55:07:c3:02:40:13:e2:87:0e:16:1c:95:c2:73:41:
64:21:d4:4d:4c:ce:93:75:ed:46:a9:05:2a:86:c9:6f:6d:7c:
8a:54:d5:52:b5:ec:77:cf:63:67:23:87:c7:07:4b:5b:e4:e8:
eb:f9:b8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:00:35 2026 by rpki-client