
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e302e302f31382d3138203d3e2034383038.roa
File: 3132342e3139322e302e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: omwmKJWqYWmCtfxvBR70pqxvaCmmE8yTb3zTxLYbSMA=
Subject key identifier: 9F:53:E9:3F:83:45:C9:87:00:86:9C:8B:D0:2D:C1:E8:84:DE:B3:CB
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5043F3AF6FB8C65619100811CBD90D8DA1F0789E
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e302e302f31382d3138203d3e2034383038.roa
Signing time: Mon 18 May 2026 02:14:11 +0000
ROA not before: Mon 18 May 2026 02:09:11 +0000
ROA not after: Mon 17 May 2027 02:14:11 +0000
asID: 4808
IP address blocks: 124.192.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:43:f3:af:6f:b8:c6:56:19:10:08:11:cb:d9:0d:8d:a1:f0:78:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 18 02:09:11 2026 GMT
Not After : May 17 02:14:11 2027 GMT
Subject: CN=9F53E93F8345C98700869C8BD02DC1E884DEB3CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f7:f9:a8:65:f8:1f:6f:05:7f:e3:08:61:ad:
df:f5:a1:e1:93:60:dc:36:7f:d2:b2:e0:26:db:33:
2a:ed:05:72:12:ae:e2:99:9b:8e:5f:f3:65:8f:57:
25:a0:2f:ee:68:a7:b1:0a:69:7d:fc:1e:43:79:ef:
e8:15:df:a9:d9:b1:f7:89:e0:0c:92:0c:7d:73:bf:
0e:8b:ee:c1:b9:36:24:14:32:1c:cd:1d:e4:7d:61:
80:1e:23:c1:6f:46:0b:5d:29:ee:3d:c9:80:d5:f3:
1d:55:d3:20:cf:c5:78:72:01:b3:27:a0:fd:97:10:
8c:87:03:1e:0f:e1:06:91:13:58:18:68:8e:1c:20:
94:da:ca:e4:e1:08:25:f5:2e:cc:04:ca:87:fb:ba:
a5:17:b3:34:40:79:56:dd:bf:6e:ec:7a:41:aa:a6:
d7:81:3e:4f:66:ea:76:c7:f3:0d:34:a5:c8:3d:8e:
d9:cb:a3:50:b0:2e:b9:f0:1b:2d:95:f8:e6:e5:4e:
7e:de:7a:86:4b:79:d6:ea:93:83:22:a9:a1:66:53:
c9:33:35:12:85:89:da:3e:c4:3d:2a:0a:b0:5a:69:
2e:ef:f7:21:af:39:c8:17:e4:21:fe:49:8d:ec:23:
a4:02:6a:ed:cc:a9:fd:dd:78:30:1c:17:f1:73:3e:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:53:E9:3F:83:45:C9:87:00:86:9C:8B:D0:2D:C1:E8:84:DE:B3:CB
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e302e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.192.0.0/18
Signature Algorithm: sha256WithRSAEncryption
2d:c7:dd:fa:e7:3a:e5:ce:af:3f:72:37:3e:fe:6d:31:bc:0f:
ae:9f:13:bd:03:b1:5e:06:17:f2:78:26:3c:c7:bd:68:a6:08:
47:f7:d4:df:78:de:85:7a:bf:2d:80:a9:2c:f7:8c:f9:64:6d:
98:67:52:26:78:9d:a2:5e:d5:ee:7e:57:e5:fc:04:35:67:ad:
3e:0e:a2:0f:dd:16:ea:99:38:ba:8d:f1:9a:02:97:2a:f0:db:
a1:1a:99:db:ef:0e:f5:7f:a2:a8:96:9f:8b:34:2f:0f:90:e6:
e7:9d:ed:b2:95:38:18:17:ea:a8:1d:b9:1c:e8:96:bf:bc:7d:
7e:f5:a5:c3:3f:c0:62:f1:da:bc:ac:dd:b9:e1:89:1d:9e:58:
f3:82:d4:7f:45:ab:9e:5a:37:9e:9a:c6:18:75:a8:65:2a:42:
cd:61:3a:41:45:45:cc:4d:08:e5:46:44:56:bf:b4:b4:f4:1e:
42:10:64:fc:74:1e:15:45:00:78:4d:c0:16:aa:19:3d:2f:2b:
85:ca:a0:29:e0:d0:d6:dd:1b:9c:aa:08:15:bc:26:f5:73:5a:
0b:83:39:5a:07:f4:04:94:08:fa:4e:24:3e:7f:a0:ad:93:91:
13:c6:78:b4:42:f5:24:24:6e:93:c6:0b:c7:77:54:41:7e:4d:
36:6f:2a:72
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUUEPzr2+4xlYZEAgRy9kNjaHweJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA1MTgwMjA5MTFaFw0yNzA1MTcwMjE0MTFaMDMxMTAvBgNV
BAMTKDlGNTNFOTNGODM0NUM5ODcwMDg2OUM4QkQwMkRDMUU4ODRERUIzQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf9/moZfgfbwV/4whhrd/1oeGT
YNw2f9Ky4CbbMyrtBXISruKZm45f82WPVyWgL+5op7EKaX38HkN57+gV36nZsfeJ
4AySDH1zvw6L7sG5NiQUMhzNHeR9YYAeI8FvRgtdKe49yYDV8x1V0yDPxXhyAbMn
oP2XEIyHAx4P4QaRE1gYaI4cIJTayuThCCX1LswEyof7uqUXszRAeVbdv27sekGq
pteBPk9m6nbH8w00pcg9jtnLo1CwLrnwGy2V+OblTn7eeoZLedbqk4MiqaFmU8kz
NRKFido+xD0qCrBaaS7v9yGvOcgX5CH+SY3sI6QCau3Mqf3deDAcF/FzPmYtAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUn1PpP4NFyYcAhpyL0C3B6ITes8swHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMTM5
MzIyZTMwMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAZ8wAAwDQYJKoZIhvcNAQELBQADggEBAC3H3frnOuXOrz9yNz7+bTG8D66fE70D
sV4GF/J4JjzHvWimCEf31N943oV6vy2AqSz3jPlkbZhnUiZ4naJe1e5+V+X8BDVn
rT4Oog/dFuqZOLqN8ZoClyrw26EamdvvDvV/oqiWn4s0Lw+Q5ued7bKVOBgX6qgd
uRzolr+8fX71pcM/wGLx2rys3bnhiR2eWPOC1H9Fq55aN56axhh1qGUqQs1hOkFF
RcxNCOVGRFa/tLT0HkIQZPx0HhVFAHhNwBaqGT0vK4XKoCng0NbdG5yqCBW8JvVz
WguDOVoH9ASUCPpOJD5/oK2TkRPGeLRC9SQkbpPGC8d3VEF+TTZvKnI=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:38 2026 by rpki-client