
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e3132382e302f31372d3137203d3e2034383038.roa
File: 3132342e3139332e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: EBRmBTGwmsK6fkNTGFuhNAJ4e0Dq2RpCt3WXlZoSXGU=
Subject key identifier: 06:51:AD:E2:AE:E2:DE:44:AA:DE:C2:13:4C:0B:E4:7E:F9:19:6C:90
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 084DB2E78D210B260AD7C6EC1C74880646D15323
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e3132382e302f31372d3137203d3e2034383038.roa
Signing time: Mon 18 May 2026 02:28:01 +0000
ROA not before: Mon 18 May 2026 02:23:01 +0000
ROA not after: Mon 17 May 2027 02:28:01 +0000
asID: 4808
IP address blocks: 124.193.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:4d:b2:e7:8d:21:0b:26:0a:d7:c6:ec:1c:74:88:06:46:d1:53:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 18 02:23:01 2026 GMT
Not After : May 17 02:28:01 2027 GMT
Subject: CN=0651ADE2AEE2DE44AADEC2134C0BE47EF9196C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:27:b9:a0:a5:32:11:85:fd:b7:00:de:9f:5e:
40:9b:09:d7:38:3a:43:d0:50:93:a4:94:80:ca:4e:
cb:94:36:23:70:d4:dd:ca:69:45:d9:2b:2a:d2:ef:
cb:ec:b2:29:f0:57:72:2a:3b:07:b1:6c:2a:12:08:
07:db:19:97:f6:75:73:86:66:e4:b3:40:1f:ee:2e:
a2:07:ef:43:34:96:55:7e:1c:b1:0f:ee:91:d6:dc:
bb:34:3a:a8:4d:a0:c8:eb:ea:c1:f6:22:40:b2:24:
59:0e:d9:79:d3:4e:05:04:9c:78:7d:ea:cb:bc:cf:
23:31:fc:6e:b1:50:ba:cf:8c:3c:80:56:2f:d9:4a:
3e:e3:3c:52:2f:62:7e:18:3a:ed:6b:8d:90:e2:01:
f6:dd:a2:1e:6f:4d:12:d5:a3:c4:a6:2a:0f:ad:41:
f9:45:22:24:f8:72:f8:65:24:f5:88:1c:9d:0c:54:
c6:96:ad:66:fc:20:b6:38:ca:b2:b3:ee:c4:2d:3b:
6f:94:91:62:2d:a4:18:e9:51:57:92:28:33:d5:dd:
23:60:2d:1a:e9:e1:4a:90:a6:d6:ca:07:c8:4b:0f:
ef:1a:8c:6a:92:b4:35:bb:14:56:cb:f3:f2:c6:0e:
af:4f:6d:9a:e8:55:9f:89:7a:da:8d:4c:06:3b:82:
06:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:51:AD:E2:AE:E2:DE:44:AA:DE:C2:13:4C:0B:E4:7E:F9:19:6C:90
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3139332e3132382e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.193.128.0/17
Signature Algorithm: sha256WithRSAEncryption
32:10:7b:57:93:1f:bb:95:3e:48:a4:45:ab:4e:a0:16:30:49:
e8:16:a9:dd:96:d4:92:0c:88:cf:f6:79:b6:7f:19:35:60:ef:
ed:66:8e:5a:e1:3b:e0:f0:5c:27:0f:76:fa:17:88:15:cc:bb:
f7:2f:ca:42:58:39:b2:f1:dc:c1:17:42:c6:26:0e:2e:65:95:
92:e7:e7:7b:b0:ff:a4:bb:46:06:d1:5f:b2:5e:5d:b6:b2:1a:
a3:59:0a:ec:b5:0f:d9:c4:06:bc:24:b3:55:85:90:48:ee:3f:
a7:07:6c:db:aa:99:81:da:da:a7:c1:d5:13:ae:12:6a:76:95:
15:87:f3:6a:22:c8:bb:66:00:bb:92:c3:50:62:02:5a:06:18:
f1:e0:05:d9:c9:ae:aa:1f:fb:4c:33:51:b0:2f:8d:11:78:b8:
3d:f3:ab:c5:b0:9e:75:c2:ff:43:93:4c:5d:7b:d2:aa:fa:9d:
bf:e5:a9:cc:a7:cf:08:c8:f6:31:a5:87:b5:fc:15:17:3b:49:
60:19:16:5a:37:14:01:30:bb:fe:75:2a:9e:75:8d:82:55:a6:
cb:03:be:44:a4:6f:d0:d3:e2:74:67:3b:21:11:78:36:ee:f1:
46:f8:9f:51:00:cf:39:fd:09:b8:63:5a:72:ff:50:1e:0e:eb:
e9:ad:2e:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:47 2026 by rpki-client