
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e3132382e302f31382d3138203d3e2034383038.roa
File: 3132342e3139322e3132382e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: KmGtkDQhPZsZlbMyVWBs4MarSuHGDZDEFZUGgcevppA=
Subject key identifier: 87:97:E8:31:3B:30:EE:4C:F8:BD:56:4B:34:1A:50:9B:E0:39:6E:2A
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 4D7A1C1CF3BDE5CCBE0D63C0592FDE563AAA80F0
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e3132382e302f31382d3138203d3e2034383038.roa
Signing time: Mon 18 May 2026 02:14:11 +0000
ROA not before: Mon 18 May 2026 02:09:11 +0000
ROA not after: Mon 17 May 2027 02:14:11 +0000
asID: 4808
IP address blocks: 124.192.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:7a:1c:1c:f3:bd:e5:cc:be:0d:63:c0:59:2f:de:56:3a:aa:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 18 02:09:11 2026 GMT
Not After : May 17 02:14:11 2027 GMT
Subject: CN=8797E8313B30EE4CF8BD564B341A509BE0396E2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4c:ba:b9:be:76:62:70:f0:0b:f6:6c:b6:36:
1a:cd:a5:79:55:92:91:5d:c4:5b:ed:65:37:d9:c3:
8c:cd:0b:2a:ec:a1:a2:a4:19:7a:25:db:f7:7d:b1:
aa:56:d8:da:84:03:57:1a:e9:02:d5:46:8d:b9:91:
98:24:3f:e4:fd:99:10:0e:50:96:64:cb:54:0e:4b:
76:94:e6:9d:97:23:ea:17:91:cc:26:58:24:a8:c1:
5c:fc:f5:48:ee:d9:3b:38:2b:1e:cf:38:5f:55:f4:
d2:01:41:62:b2:cd:c3:5e:0b:b2:bf:1d:55:9b:95:
4e:54:f4:45:e1:eb:b9:e7:e0:6c:ac:2e:df:d2:69:
f2:2c:5f:47:2e:47:d0:e2:74:70:a7:1e:04:15:5b:
f9:7b:44:80:a4:39:63:90:1d:3f:dd:ea:ee:6e:e6:
17:8a:61:2e:ff:8a:18:81:32:99:2a:ae:b8:fa:61:
80:83:ff:62:45:3a:9d:49:90:5b:78:19:6c:73:6a:
57:65:8d:ee:f1:89:14:db:ea:84:ce:c7:60:e7:c6:
34:fe:1c:00:75:48:5b:65:ef:a1:5c:f2:b4:b0:eb:
98:21:cb:70:7c:25:c8:20:80:2a:ba:c8:fb:31:9b:
29:1b:30:b9:00:cb:2c:8d:75:32:b4:c7:19:8a:c4:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:97:E8:31:3B:30:EE:4C:F8:BD:56:4B:34:1A:50:9B:E0:39:6E:2A
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e3132382e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.192.128.0/18
Signature Algorithm: sha256WithRSAEncryption
82:9a:4c:c1:f1:6f:23:84:f1:fb:f4:62:31:a6:72:32:13:ac:
8a:f5:ed:e1:fa:b2:dc:80:35:16:fa:7f:3d:73:5f:cd:a4:57:
85:33:6c:1a:66:df:73:a1:1c:10:63:1b:1d:17:83:12:3d:2a:
4b:f5:82:ed:5e:f9:6d:1e:cb:d4:b1:3d:47:31:95:6b:db:4c:
d8:24:36:d7:77:c0:97:fa:a2:25:c6:e1:ad:52:47:33:a7:32:
4d:1f:c4:57:c6:5b:87:8e:51:00:ed:05:04:78:9b:fd:6f:bc:
81:71:1e:4c:d5:75:b9:0a:1c:21:87:f8:c3:a2:bd:2b:02:d2:
99:c4:44:b6:f1:b2:53:04:18:19:18:8a:1a:d6:ce:b9:88:01:
35:d2:94:70:f8:b4:0c:c2:85:b6:a0:d8:e5:46:1e:f3:63:cc:
d1:80:00:5e:14:05:5d:00:00:b6:6d:9d:49:32:b1:27:2a:79:
1a:0b:dd:ae:31:f8:6d:88:5f:cf:7b:27:23:b9:7d:a9:b9:51:
74:9f:f3:60:77:68:46:12:cd:7d:28:ed:84:3e:64:28:92:38:
da:7e:2f:be:07:ba:e0:3c:96:a3:3d:ba:b6:f5:30:4d:95:db:
3e:e1:94:92:b6:c9:17:41:ff:3a:39:55:da:67:71:ba:d3:2b:
a7:04:35:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:50 2026 by rpki-client