
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa
File: 3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa (raw, json)
Hash identifier: rtk89q6bYhaTcq+pj582e1pUHK5i8NCH45XkVUMxAnA=
Subject key identifier: DD:5E:AB:38:7B:A6:28:BB:CF:F7:2C:64:17:E7:70:30:EA:FD:CA:D4
Certificate issuer: /CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Certificate serial: 5047B83E79247D7D064EC008BE7810EC915EAFDD
Authority key identifier: E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa
Signing time: Mon 13 Jul 2026 03:46:35 +0000
ROA not before: Mon 13 Jul 2026 03:41:35 +0000
ROA not after: Mon 12 Jul 2027 03:46:35 +0000
asID: 399461
IP address blocks: 124.42.212.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:47:b8:3e:79:24:7d:7d:06:4e:c0:08:be:78:10:ec:91:5e:af:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E893434A32058DAFE9758FDA7B36659444C9EF8E
Validity
Not Before: Jul 13 03:41:35 2026 GMT
Not After : Jul 12 03:46:35 2027 GMT
Subject: CN=DD5EAB387BA628BBCFF72C6417E77030EAFDCAD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:74:8b:14:ff:3d:f7:34:89:51:aa:a5:b8:fd:
2a:f8:fe:62:4d:39:09:66:7e:dd:ec:bd:f7:3a:ef:
0e:c2:57:7c:3c:61:3a:fe:cf:7e:f1:ca:31:45:69:
98:b8:c7:df:ea:0c:ce:5c:25:a4:d9:81:01:c4:4c:
b2:63:0f:03:2b:38:44:18:7e:c6:e6:e7:6a:f4:4c:
a0:69:b5:38:ce:31:8c:76:24:7d:dd:bf:d0:86:a2:
6a:b2:dd:06:42:43:e2:ba:58:dc:cb:96:5c:2b:26:
96:60:fb:8d:03:c5:dc:ed:05:42:27:75:52:eb:e1:
fa:2f:3a:d4:0f:37:e8:3e:9f:a9:ec:e4:e7:a0:fe:
a7:34:73:56:ba:a2:5a:36:40:92:54:61:38:2b:3e:
48:10:c0:e0:a2:43:de:16:07:3a:57:72:d4:e6:cd:
fe:34:9e:be:01:3e:d5:e7:83:a0:cf:20:d3:8d:cf:
5d:a1:58:c0:e6:97:e4:99:ab:01:04:bd:7f:6f:d6:
40:b9:6e:4e:af:3f:89:69:20:12:46:7b:b6:80:b9:
f7:97:07:1a:21:10:0e:f4:b5:0b:ee:a9:34:5b:ac:
92:70:74:82:37:31:1c:8b:a5:81:e2:46:c2:f9:25:
cc:b7:e2:2c:4e:1e:a5:f8:b3:05:5c:e2:99:77:38:
13:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:5E:AB:38:7B:A6:28:BB:CF:F7:2C:64:17:E7:70:30:EA:FD:CA:D4
X509v3 Authority Key Identifier:
keyid:E8:93:43:4A:32:05:8D:AF:E9:75:8F:DA:7B:36:65:94:44:C9:EF:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/E893434A32058DAFE9758FDA7B36659444C9EF8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E893434A32058DAFE9758FDA7B36659444C9EF8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588553129525251/0/3132342e34322e3231322e302f32322d3234203d3e20333939343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.42.212.0/22
Signature Algorithm: sha256WithRSAEncryption
47:86:19:c6:42:e8:37:f2:f3:63:5d:0b:83:0e:bd:6a:8b:a3:
6c:62:15:3c:58:38:e7:fa:36:5c:dc:9d:37:be:98:0f:a4:26:
9c:71:5c:22:cb:8e:af:c6:01:de:76:27:f9:9a:e7:1e:02:ac:
91:f0:dc:15:7f:e3:bd:76:eb:b7:bd:36:70:ea:79:e3:aa:f0:
eb:4c:1b:83:6a:bd:5b:54:21:1f:05:cb:c2:09:ea:09:b7:50:
7d:b3:65:9c:ad:e3:15:a8:91:0f:32:9a:75:9c:d2:b9:54:98:
62:0b:e4:5f:77:00:fe:fc:12:1a:0c:f1:79:70:11:98:8b:f8:
b6:ef:73:36:46:99:37:ed:4b:75:70:85:8c:24:a5:40:de:34:
1f:ed:76:dd:e6:5a:31:48:c2:ed:6f:ee:69:37:98:a6:3e:dc:
54:43:28:a4:60:5d:4e:0d:9b:4a:16:3b:35:50:7e:9c:48:65:
3c:7d:56:9a:fb:4e:7e:36:d1:c4:07:67:cc:de:55:bd:e8:9e:
38:9f:bf:cf:62:48:30:60:c5:85:65:2a:ff:e1:12:9c:ac:09:
c1:bb:18:7b:77:c3:ad:b7:31:17:bb:1f:24:37:ff:66:0e:57:
e7:91:cb:16:c7:02:e1:55:34:a6:eb:db:0a:f6:fd:f3:c3:dd:
0c:a9:5c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:48:47 2026 by rpki-client