
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20313938343836.roa
File: 3132332e39382e362e302f32342d3234203d3e20313938343836.roa (raw, json)
Hash identifier: eos/t/piKiZkYfWcyTitEJj6CrDOYXHqvtMbV80DmfE=
Subject key identifier: A1:27:14:AA:E0:3B:95:D1:7A:48:3D:24:14:63:D3:90:17:7E:61:95
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 74F75090BD63D6CF5B889DAFEFE6ED95B7A19191
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20313938343836.roa
Signing time: Wed 06 May 2026 06:18:43 +0000
ROA not before: Wed 06 May 2026 06:13:43 +0000
ROA not after: Wed 05 May 2027 06:18:43 +0000
asID: 198486
IP address blocks: 123.98.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:26:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f7:50:90:bd:63:d6:cf:5b:88:9d:af:ef:e6:ed:95:b7:a1:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: May 6 06:13:43 2026 GMT
Not After : May 5 06:18:43 2027 GMT
Subject: CN=A12714AAE03B95D17A483D241463D390177E6195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:27:62:32:98:66:ba:b0:96:54:b9:7d:2e:1e:
3b:f9:d2:f0:e9:0a:4f:f0:03:bf:1d:a7:27:55:ac:
d7:b0:0f:2c:76:d3:0f:b5:7a:37:0b:4a:9a:76:94:
4f:b9:69:6b:1c:67:54:44:9c:d6:18:05:ac:88:81:
2a:d4:e1:cb:c0:86:09:aa:76:bc:f2:92:41:7b:bd:
3e:de:62:55:95:b4:58:f1:bf:6d:ca:75:df:45:02:
bb:8e:57:c6:74:88:a1:60:6a:c5:02:27:e9:ee:8d:
36:4a:e3:02:22:e2:60:cd:45:be:05:8f:bd:5f:be:
ae:29:f6:c5:66:19:46:77:2c:5e:5d:7e:66:cc:1d:
2f:b7:8e:c0:b9:ff:06:7d:dd:04:ed:b4:3d:a1:e2:
13:31:ef:27:4c:dd:26:c2:6b:8d:42:3b:0d:39:9c:
44:7a:4c:01:13:20:43:fc:96:f7:db:c6:3f:30:57:
ff:eb:be:25:c3:94:71:1e:ef:07:43:c6:ad:9c:2e:
93:7c:a4:41:92:f7:09:4b:33:37:82:89:c6:56:f9:
c4:f1:1a:73:a6:a3:a1:0d:c1:c1:84:d4:af:1f:f9:
d8:55:d7:a1:08:50:73:d7:4d:ba:08:c8:e3:bb:d4:
ef:29:f8:7b:7c:13:59:d6:5a:e9:16:e0:24:51:34:
ad:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:27:14:AA:E0:3B:95:D1:7A:48:3D:24:14:63:D3:90:17:7E:61:95
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132332e39382e362e302f32342d3234203d3e20313938343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
123.98.6.0/24
Signature Algorithm: sha256WithRSAEncryption
50:87:74:45:37:4a:9f:08:14:d3:c1:79:d0:c5:d8:d3:3d:14:
33:f1:1a:3a:17:58:e1:90:60:22:bd:a4:34:8f:53:a9:19:54:
e8:af:a4:86:a3:c3:dc:f8:c2:f4:9f:51:06:7a:4c:69:6b:2f:
aa:92:a5:28:91:5d:83:b8:9c:ca:98:03:31:82:cc:8e:fa:68:
fd:ef:3e:db:6d:0d:0a:02:cb:03:46:f7:77:9e:70:e9:8a:4d:
d5:50:88:62:4f:0b:b6:3a:4f:82:6b:01:80:12:4d:ea:a2:f8:
dc:da:dc:e4:15:be:5e:79:79:62:db:41:9c:c1:2d:37:4c:e8:
83:ff:98:31:59:89:7e:7b:5d:93:2a:3c:56:8b:c4:fc:9c:88:
a1:69:3e:2d:7f:ce:16:05:6d:91:c4:cc:96:bb:bf:7d:58:af:
3e:fb:63:a5:62:36:f3:2e:f1:69:f2:83:bb:cb:1f:01:85:df:
e8:f3:b6:b3:6b:0c:fd:6a:81:33:4f:dc:7f:fb:24:11:c7:e2:
0a:3b:21:81:fa:42:e5:64:65:ae:09:5f:b0:e8:e9:ae:30:da:
74:fa:42:c1:92:cd:a1:a9:5e:da:07:f5:c2:cc:62:d2:3d:ba:
50:e1:95:1c:b9:08:5f:a4:f9:39:ce:c5:15:1f:c1:3a:c2:41:
78:a5:4d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:14 2026 by rpki-client