
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131382e3234342e3234302e302f32302d3230203d3e2034383038.roa
File: 3131382e3234342e3234302e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier: k67vG1bY1NqvJYBePbuzTIa4fL+RO0tNHHkp8Guk6qo=
Subject key identifier: F5:9D:F8:A0:F4:42:CE:25:FE:D9:DC:DE:D7:53:40:62:D2:8E:E8:2F
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 58AB0A2C37CB3066929B72B5AAC9E1041B91457C
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131382e3234342e3234302e302f32302d3230203d3e2034383038.roa
Signing time: Mon 18 May 2026 03:29:23 +0000
ROA not before: Mon 18 May 2026 03:24:23 +0000
ROA not after: Mon 17 May 2027 03:29:23 +0000
asID: 4808
IP address blocks: 118.244.240.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:ab:0a:2c:37:cb:30:66:92:9b:72:b5:aa:c9:e1:04:1b:91:45:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 18 03:24:23 2026 GMT
Not After : May 17 03:29:23 2027 GMT
Subject: CN=F59DF8A0F442CE25FED9DCDED7534062D28EE82F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:be:83:27:9e:a7:9e:0f:be:9d:a5:f6:a2:ec:
49:16:e0:87:7e:07:c5:75:37:30:0c:8d:7e:e2:a0:
73:8d:ce:cb:56:2d:05:83:73:9f:6d:62:fc:9f:a5:
8d:51:00:a9:71:9d:15:a4:ba:92:00:93:ca:9f:7b:
0e:58:e1:9c:4a:87:2e:f3:c8:20:47:0e:48:54:95:
db:1a:42:b9:63:3b:6c:4f:6b:ea:0e:fa:4e:a7:6f:
12:4c:df:a6:a6:a8:53:dc:7e:dd:fd:26:8a:d4:d0:
58:ba:3a:e5:f0:02:40:65:12:1b:d8:ee:ec:60:81:
1b:62:0c:8d:30:31:28:fd:05:5d:21:79:54:3e:02:
68:c7:9b:3a:04:97:d0:61:9f:43:1f:04:3c:84:f7:
a4:4d:56:f3:a1:18:3d:67:0a:95:da:3f:c9:15:60:
65:f9:d0:98:69:94:da:a5:45:b1:f2:ae:85:4d:aa:
71:53:b8:f8:63:c1:6d:5b:67:37:31:31:d5:ea:6d:
51:d8:c1:1c:54:18:72:30:18:63:97:4d:8d:4d:44:
39:74:5c:ca:ab:89:8f:ae:11:84:34:80:e1:d8:e0:
95:48:62:ba:4a:8d:c7:42:c1:26:32:5b:d4:13:41:
93:b8:fd:52:1d:d0:7b:f5:58:f1:8c:a4:3c:e8:8e:
41:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9D:F8:A0:F4:42:CE:25:FE:D9:DC:DE:D7:53:40:62:D2:8E:E8:2F
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3131382e3234342e3234302e302f32302d3230203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.244.240.0/20
Signature Algorithm: sha256WithRSAEncryption
5b:9d:06:13:be:46:1a:eb:b4:6a:92:00:5b:f4:7d:f8:64:1e:
fd:b1:ed:98:2b:e4:d7:b2:eb:cd:41:49:c4:81:49:fc:1e:94:
11:ed:bf:2e:70:14:ac:54:cf:0f:f2:25:84:91:5d:71:5b:a9:
28:e5:64:e5:30:e7:f4:57:97:e3:15:46:87:38:16:96:b8:0c:
71:3c:e1:61:82:99:36:da:b9:1e:42:19:f2:20:10:c9:fc:94:
48:b7:d9:6a:fc:39:9e:40:93:01:0c:65:d2:88:a0:88:9e:b1:
79:62:87:7d:85:19:e7:dc:14:59:1e:e9:09:dd:bc:1c:64:4a:
31:5a:a5:70:6c:88:bc:69:47:12:57:55:e2:3c:eb:61:15:e2:
3a:03:92:8b:da:0c:d7:a7:a7:21:aa:26:39:a7:03:71:d0:83:
a5:a2:12:9f:71:36:3d:bc:73:ee:a4:d0:d7:08:d0:5e:0f:ef:
6a:70:65:fa:5b:c7:1e:77:0b:fb:7f:b3:30:d6:3c:43:eb:19:
5b:b7:c1:92:b7:73:61:18:f9:4b:36:a3:f4:c3:63:7c:87:00:
5f:cc:2a:16:56:52:03:38:d7:d1:0a:fd:13:76:8a:1a:43:c3:
50:d5:ee:fe:89:6f:30:cc:3e:bb:cc:ae:91:d0:75:b3:a5:6d:
49:b9:71:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:06 2026 by rpki-client