
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e3139322e302f31382d3138203d3e2034383038.roa
File: 3132342e3139322e3139322e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: h+n7Lzluglou8S0vowUQQNQQyCyiwuAePfCrw6VVNhY=
Subject key identifier: 82:64:32:28:85:8E:48:E9:A1:25:9B:F1:D7:12:1E:2E:DF:D7:68:28
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 7383EFF873BC2ED3D8DC280CD20F5170C863574D
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e3139322e302f31382d3138203d3e2034383038.roa
Signing time: Mon 18 May 2026 02:14:11 +0000
ROA not before: Mon 18 May 2026 02:09:11 +0000
ROA not after: Mon 17 May 2027 02:14:11 +0000
asID: 4808
IP address blocks: 124.192.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:83:ef:f8:73:bc:2e:d3:d8:dc:28:0c:d2:0f:51:70:c8:63:57:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 18 02:09:11 2026 GMT
Not After : May 17 02:14:11 2027 GMT
Subject: CN=82643228858E48E9A1259BF1D7121E2EDFD76828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:be:e1:96:e0:80:34:d4:52:b4:a1:2a:0d:ba:
03:12:32:a0:32:57:60:39:9b:f9:32:19:94:b0:01:
e7:9a:76:f4:7a:8f:0a:6a:81:87:3a:8f:07:ae:05:
7d:7c:d5:00:26:7a:43:4d:e8:20:d3:9e:4e:06:d1:
a5:70:ff:16:95:58:e5:4b:75:6e:9a:6c:f9:62:9d:
e1:04:9e:e1:9e:03:de:5d:06:15:15:60:b3:c4:db:
38:ad:bb:f3:82:7d:30:60:b6:78:64:47:d6:28:50:
79:bd:f1:10:b8:23:38:cc:f5:11:fc:35:70:4e:cf:
5a:b6:fb:6a:10:78:6e:42:8c:7c:54:f2:6a:4f:d6:
05:f5:35:d5:bb:dc:03:6b:2c:d4:53:c0:3d:4d:21:
83:b5:4c:9f:e6:71:14:0b:c6:bc:92:3c:f5:7f:77:
07:4f:41:b9:19:60:13:94:b0:92:27:64:8d:59:e1:
4b:60:10:c0:b1:70:39:2d:b3:03:aa:69:b1:5e:b0:
0f:87:b4:0f:d9:47:da:40:e3:71:ea:d8:d5:83:09:
91:16:39:c5:6f:19:17:06:02:86:2c:95:fa:31:d2:
d5:91:70:69:56:f3:c5:32:86:a9:45:d7:38:09:30:
56:c1:37:07:52:28:ff:5f:98:75:b0:07:4d:83:49:
c8:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:64:32:28:85:8E:48:E9:A1:25:9B:F1:D7:12:1E:2E:DF:D7:68:28
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139322e3139322e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.192.192.0/18
Signature Algorithm: sha256WithRSAEncryption
a5:7f:52:27:06:8a:d7:40:69:1a:03:b8:ec:49:b4:fd:9f:66:
6c:c8:15:f5:32:0b:7e:2f:5c:1f:73:33:aa:f1:d4:42:0d:6d:
a9:bd:e7:38:be:57:cf:ef:7a:99:f5:69:44:76:b9:e3:f1:a7:
4a:35:19:0a:f8:cc:9b:0e:0f:99:8f:eb:0e:54:e5:b1:63:16:
77:77:e8:9f:00:4b:2a:88:c8:3c:ea:3e:8e:ba:1c:99:f3:e5:
30:fb:12:fe:ac:19:dd:8f:87:84:e7:3a:a2:2f:84:59:57:2b:
cd:69:ec:59:c4:d5:4b:63:ae:72:e4:28:e2:e1:6f:97:5f:f6:
d0:06:eb:6d:a0:01:1d:63:8d:59:a4:ce:fd:f7:3d:0f:59:1a:
4d:af:6e:fb:a5:39:32:29:77:5e:47:4d:d9:8f:bd:85:8c:3d:
5d:3a:e4:46:34:2d:73:28:11:6c:cf:ef:9e:5b:bb:1a:f7:c1:
33:0a:1e:47:82:ec:cd:8d:a3:d7:8a:3b:a5:d7:16:35:ca:36:
d6:c9:d7:a9:bc:73:41:7f:10:6c:e2:bd:6c:47:b1:28:d7:85:
00:bb:32:c2:ce:c1:0c:f8:a6:eb:15:cd:19:10:43:7d:ca:74:
c0:b5:8c:7f:4f:76:90:5d:02:e7:91:5b:68:b8:c3:0c:79:1b:
3b:9f:ac:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:50 2026 by rpki-client