
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20313938343836.roa
File: 3132332e39382e342e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: pTvd4XyQcur9juw4hsgNOUmN/SmNK6TihYyaqJHSzC4=
Subject key identifier: DF:3B:6D:BB:35:79:0C:E3:BA:2B:84:A7:B8:5F:18:FB:04:EA:70:67
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 2632DD8446E2C6D35F55CDC81F588884200AED9F
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20313938343836.roa
Signing time: Mon 13 Jul 2026 03:46:39 +0000
ROA not before: Mon 13 Jul 2026 03:41:39 +0000
ROA not after: Mon 12 Jul 2027 03:46:39 +0000
asID: 198486
IP address blocks: 123.98.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:32:dd:84:46:e2:c6:d3:5f:55:cd:c8:1f:58:88:84:20:0a:ed:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:39 2026 GMT
Not After : Jul 12 03:46:39 2027 GMT
Subject: CN=DF3B6DBB35790CE3BA2B84A7B85F18FB04EA7067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:28:8f:40:d2:ba:4e:bd:64:db:e0:5d:12:47:
f5:e2:38:0e:cc:52:01:0a:b2:30:6d:f6:bd:7a:d6:
62:45:29:a4:01:ee:6f:67:60:0c:6a:68:87:74:90:
ec:13:4e:ce:f8:e4:d1:1d:61:c2:00:f3:c9:12:f0:
d0:19:9c:ca:30:eb:df:7f:d5:06:40:af:9e:7d:cc:
bc:91:81:58:bd:60:2a:ef:4d:3a:49:af:6e:d0:1e:
89:83:d0:6a:f5:a2:e8:38:34:b6:49:7e:e0:48:17:
8c:11:44:50:40:82:f3:18:a0:d8:5c:8d:d8:53:c8:
49:89:22:11:f7:d9:3f:0e:81:a0:dc:24:e5:51:70:
73:24:88:d1:46:9d:a2:a8:b3:22:04:09:d3:71:91:
c9:56:cd:24:b5:71:c4:69:24:f8:a7:d3:d1:ef:68:
47:32:16:41:e0:ce:0a:a1:de:d9:ea:7f:11:ec:77:
cf:06:89:79:73:4b:85:59:79:61:8d:28:dc:e8:11:
10:77:4c:ad:17:0e:2d:ca:f0:87:d3:b5:b4:5b:2e:
3d:4d:4b:ec:ca:3e:ff:d0:0e:b1:61:7a:3c:0f:47:
d2:7b:ab:e6:1c:87:72:97:e0:82:88:bd:36:3c:ff:
c0:7a:d6:d6:26:0f:50:2a:0a:57:5e:a7:06:51:fb:
ac:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3B:6D:BB:35:79:0C:E3:BA:2B:84:A7:B8:5F:18:FB:04:EA:70:67
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e342e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.4.0/24
Signature Algorithm: sha256WithRSAEncryption
95:03:ff:9a:cf:4a:c7:cc:ce:bd:9a:07:51:22:13:aa:a4:1c:
e8:cb:94:d1:f4:2e:c4:a5:07:25:5e:f3:60:08:62:15:a7:81:
65:f7:27:b6:48:01:c6:f4:87:a4:db:80:08:a5:49:04:b8:e2:
a7:72:91:92:e3:99:d9:5c:ba:b8:87:46:42:22:2b:cf:56:2d:
2b:ee:29:2b:bc:06:30:66:1c:c3:cb:ed:28:ef:24:05:2d:ee:
c0:63:d8:2e:6b:2e:53:51:58:8c:70:49:ff:6c:4d:c8:af:7f:
8e:bd:22:84:17:53:cd:47:8c:1c:e6:1c:ff:3f:f4:65:f1:99:
f5:ae:8d:d5:b8:e8:26:d4:64:74:b5:bc:fe:31:16:e8:cb:ab:
e5:28:52:1a:bb:14:0b:dd:7f:df:a6:f9:5e:69:ff:51:7f:e1:
71:de:74:f8:f0:0d:3b:e5:4f:61:f8:97:e7:f8:c4:5d:77:e0:
96:09:8e:17:1b:45:28:42:cc:e3:b2:a9:f1:78:62:7a:c5:e8:
89:4e:be:09:83:19:0b:55:90:80:53:7a:62:b3:4b:af:39:c6:
30:92:be:90:a7:6b:31:0f:e4:2b:8f:13:a4:e6:85:62:f7:12:
d3:f6:e4:10:f3:ef:bd:36:11:17:35:bc:c2:57:5b:43:5a:15:
5a:4f:8e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:28:51 2026 by rpki-client