
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e302e302f31372d3137203d3e2034383038.roa
File: 3131362e3234322e302e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: UFSnjm5VZvpjR89aVIsZ+QWGHfl/DzDPlYvOoC/Ou+c=
Subject key identifier: BE:8E:25:57:2D:C2:FA:4C:D7:4C:4E:98:BB:E6:A1:6A:53:99:96:0D
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 26065771AB76104F70B26F9A06028FACD8F70A27
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e302e302f31372d3137203d3e2034383038.roa
Signing time: Tue 19 May 2026 06:40:28 +0000
ROA not before: Tue 19 May 2026 06:35:28 +0000
ROA not after: Tue 18 May 2027 06:40:28 +0000
asID: 4808
IP address blocks: 116.242.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:06:57:71:ab:76:10:4f:70:b2:6f:9a:06:02:8f:ac:d8:f7:0a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 19 06:35:28 2026 GMT
Not After : May 18 06:40:28 2027 GMT
Subject: CN=BE8E25572DC2FA4CD74C4E98BBE6A16A5399960D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:5d:0f:92:ad:5a:d3:a8:d4:5f:60:76:71:
b7:34:53:44:f0:cd:a9:cd:a1:bb:c7:f3:47:19:27:
0d:7e:3b:14:5d:77:ed:42:c5:e8:8d:13:ea:c0:5b:
ee:60:6f:cc:cb:f9:00:4c:9c:69:81:bb:de:27:04:
2f:2c:d2:7f:59:21:17:7b:18:6a:01:5f:69:9a:c3:
a4:23:15:e8:ae:5f:66:ef:ce:56:39:02:b6:65:ef:
b1:81:22:ec:43:27:fa:1d:57:76:10:c1:76:93:5d:
02:a6:91:19:e8:3e:c5:fa:f1:c2:cb:84:34:79:90:
08:a0:54:c7:f3:20:34:85:67:4b:3b:db:e4:ea:28:
fb:b7:6b:22:93:25:a2:a7:13:2d:4c:78:8a:e2:c4:
b7:d5:76:7d:1d:32:c6:17:56:f2:35:d0:f4:91:45:
20:82:a3:f2:7a:42:ec:cf:c3:37:6b:02:57:65:eb:
81:e2:83:16:a2:53:99:e1:44:c0:33:9f:15:df:1f:
30:cf:42:21:58:62:e5:35:9d:e0:d4:97:97:b5:43:
a7:ce:1c:61:99:ae:0d:d4:48:18:65:00:4d:5b:11:
e4:6b:c9:69:f2:af:6e:6d:ff:b9:9a:f3:ca:1a:23:
fe:0a:0a:d2:a5:e4:10:01:d4:5d:5c:1b:09:44:3d:
29:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8E:25:57:2D:C2:FA:4C:D7:4C:4E:98:BB:E6:A1:6A:53:99:96:0D
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e302e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.242.0.0/17
Signature Algorithm: sha256WithRSAEncryption
65:f0:f8:72:65:cf:ee:65:89:09:58:1f:de:b6:9f:98:29:4d:
23:87:da:dc:bd:e6:35:1e:94:34:e1:f7:a4:88:8c:4c:a4:4c:
8d:90:91:22:cf:ef:88:44:f1:49:31:92:4c:63:c3:76:9b:99:
12:08:0f:70:44:bb:91:69:0d:84:f0:2e:69:d1:b8:3e:0f:b0:
01:87:3f:92:5a:91:64:12:bd:a5:97:0d:82:8a:34:fe:c0:72:
c5:3a:6f:d3:52:a5:11:74:64:62:3b:e2:35:82:ea:6a:ae:ee:
08:d2:c9:56:2d:10:84:17:ce:58:aa:3b:bd:2e:19:7d:93:d6:
36:b6:20:af:cd:1d:14:81:ad:fd:00:5a:be:9c:bd:63:7e:1a:
81:3b:be:6e:43:d3:81:3c:4e:c1:43:c5:43:f6:4c:22:29:a8:
de:93:ef:0d:af:ec:0a:21:f8:fe:f6:7d:21:f2:cb:55:df:29:
a7:b1:65:54:e8:43:82:4b:89:9e:cb:ae:60:5b:08:0a:ec:b1:
ef:12:a5:15:19:03:f3:f2:06:b0:65:57:cb:78:86:96:d7:86:
e5:6f:cd:9d:60:b3:5c:57:1d:ff:be:cd:36:92:4a:be:1a:7c:
0b:ce:fb:7d:7c:5c:44:a5:cd:b1:de:51:19:c2:0d:eb:b9:4b:
3b:8e:0a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:10 2026 by rpki-client