
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa
File: 3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: rJTXW8XbJd9wJUGBMpAq6P/X0FUj0MASMO49W27/Tqw=
Subject key identifier: AB:95:3B:D6:03:11:4B:90:F5:3D:A9:20:22:58:F7:A7:CE:29:26:B9
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 24BA782C31830C22CDF8B3E222FC1D82AA43B47C
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa
Signing time: Tue 19 May 2026 07:01:40 +0000
ROA not before: Tue 19 May 2026 06:56:40 +0000
ROA not after: Tue 18 May 2027 07:01:40 +0000
asID: 4808
IP address blocks: 116.242.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:ba:78:2c:31:83:0c:22:cd:f8:b3:e2:22:fc:1d:82:aa:43:b4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 19 06:56:40 2026 GMT
Not After : May 18 07:01:40 2027 GMT
Subject: CN=AB953BD603114B90F53DA9202258F7A7CE2926B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:5e:1f:db:cc:a8:2e:e6:21:84:14:51:c5:
3f:0b:66:36:c2:73:3a:07:2f:b9:4d:f3:87:ba:3b:
36:1f:e9:ff:94:e0:4f:14:29:60:a3:fa:0c:89:86:
96:0a:48:2d:3e:f5:10:89:d1:6c:23:3f:b1:f9:d6:
46:26:98:03:51:d6:a0:76:8f:10:ac:62:c7:78:21:
19:78:69:85:93:ef:cb:93:2c:29:0b:f7:05:46:a4:
d1:89:6e:49:13:8e:2d:da:f8:64:a5:be:b0:4b:2b:
fc:e3:3c:36:12:c0:1f:f1:c6:5f:cb:ba:06:1c:bb:
d3:19:f7:c0:18:ba:36:bc:1f:10:0f:65:60:33:2c:
89:85:51:a9:18:56:b3:a4:39:97:e3:fd:83:0c:9e:
70:79:41:05:0f:be:ef:23:81:04:9a:a6:36:b2:93:
96:07:b7:ac:b1:67:91:8b:b3:78:cc:32:cc:8d:e7:
62:c2:94:ba:ef:aa:8c:d6:40:de:9b:af:d0:eb:58:
66:0f:25:96:2d:4c:a4:0b:26:88:46:5a:d8:60:07:
d7:69:05:c6:9a:52:15:d1:02:c2:b0:cf:7c:6a:37:
7b:23:3e:6e:b7:0a:64:b4:bd:a3:3d:e9:33:ca:17:
8e:98:04:db:f5:cf:ea:1f:77:01:a2:01:27:ef:d3:
8b:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:3B:D6:03:11:4B:90:F5:3D:A9:20:22:58:F7:A7:CE:29:26:B9
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131362e3234322e3132382e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.242.128.0/17
Signature Algorithm: sha256WithRSAEncryption
3f:26:cd:9e:e9:24:4e:55:22:87:0f:67:f5:96:12:46:4e:ab:
64:1a:15:36:bf:4f:58:5b:09:bb:79:e1:f6:3c:73:3d:54:1c:
e9:a4:5f:f0:93:1d:a5:9e:40:ad:84:31:06:a7:f0:0b:68:e6:
be:43:7a:7f:36:de:4e:e2:7f:0e:92:fe:2b:6a:a5:52:f3:e4:
3f:1e:a7:24:40:5e:95:f7:8e:02:e4:46:dd:42:8c:8b:a7:45:
5b:24:36:3c:4a:d0:2a:3c:c1:b8:72:6f:9b:57:06:a3:96:20:
08:45:bb:8c:a9:b1:29:7f:94:a8:8c:cc:b9:61:96:cf:fe:a2:
01:41:fa:7d:fd:cf:78:e8:07:4a:1b:1d:c7:55:bd:a0:f4:5c:
8b:59:37:64:40:58:f7:4a:8e:b6:5e:c6:57:e3:d6:71:84:f7:
fa:7d:29:9f:83:d8:c0:4d:2a:d5:72:e5:c4:0e:39:56:aa:57:
2a:34:c9:19:e1:84:f7:64:2e:54:8d:ff:b0:8c:55:1c:19:2d:
df:76:d7:48:00:13:a6:76:44:47:46:78:27:10:8c:31:e5:41:
04:cd:3c:25:b5:97:40:49:a1:57:0f:52:64:d9:07:5a:b3:55:
8b:8d:12:a7:a6:6d:74:d6:5e:f6:56:8e:63:19:c2:ff:ca:a6:
7a:27:3a:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:14 2026 by rpki-client