
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3136302e302f32302d3230203d3e2034383038.roa
File: 3132342e3230322e3136302e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier: aMXrerjcaxXBQZKuCtl5r5cLx5RCI5RjOhfrUvVKzgs=
Subject key identifier: 70:2C:80:BB:0E:0B:3B:17:FC:8F:4A:0B:0F:8A:ED:E4:C1:F3:8D:F2
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 2C0EFE6E5AB3D009D7AF622F0BDF08601BD6199D
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3136302e302f32302d3230203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:57:59 +0000
ROA not before: Fri 05 Jun 2026 05:52:59 +0000
ROA not after: Fri 04 Jun 2027 05:57:59 +0000
asID: 4808
IP address blocks: 124.202.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:0e:fe:6e:5a:b3:d0:09:d7:af:62:2f:0b:df:08:60:1b:d6:19:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:52:59 2026 GMT
Not After : Jun 4 05:57:59 2027 GMT
Subject: CN=702C80BB0E0B3B17FC8F4A0B0F8AEDE4C1F38DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:03:30:ac:33:67:6a:db:e0:cb:6d:44:03:21:
a0:46:c2:cc:6d:41:9f:ac:cd:d4:88:31:36:65:bd:
c8:6a:3c:8a:62:98:89:61:3b:d6:e6:68:4a:52:16:
e2:94:8f:b2:84:79:5c:c4:28:ba:dd:01:59:ee:80:
6b:6b:1b:36:f6:88:5b:ac:de:3d:e8:11:6b:1d:ca:
b3:d7:a8:c6:c4:1c:d9:f3:00:6d:99:f5:7c:3e:96:
a8:88:dc:a6:b9:5c:a9:c4:54:ea:e3:9c:99:8f:67:
9e:c8:d8:dd:a3:8c:ce:d6:b2:66:20:0f:70:11:d4:
cf:1b:30:0c:53:f4:dc:4e:7a:b2:45:06:95:6a:d0:
52:7a:f2:1e:b9:91:4c:35:b5:39:8c:03:ce:2c:95:
d9:a0:b5:04:dd:ac:ef:fc:de:34:ff:6c:08:ad:5a:
d8:17:e5:2d:5d:cb:a2:c6:97:e5:f6:ea:59:2e:07:
df:a5:14:3e:6c:d8:2e:e4:a4:67:ce:1a:cf:f2:66:
63:d8:1b:f0:fc:aa:16:09:fd:8c:e9:80:54:34:58:
db:c7:c1:12:b0:f4:26:1f:e7:7f:8b:f5:cd:58:fc:
53:1d:8f:16:44:72:0b:b9:06:ce:fc:8b:1a:c4:d6:
65:16:f1:d9:73:01:0f:12:4d:5c:2d:18:8f:fc:5e:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2C:80:BB:0E:0B:3B:17:FC:8F:4A:0B:0F:8A:ED:E4:C1:F3:8D:F2
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3136302e302f32302d3230203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.202.160.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:db:c9:31:72:ce:9d:41:88:eb:d8:11:55:bd:d1:4b:1a:0c:
a7:f7:47:40:c7:ee:72:04:ed:c7:96:f7:05:e3:e9:7f:9c:81:
21:56:d5:4d:c0:22:6e:ba:18:e7:9d:fc:5d:6a:19:58:48:b2:
ec:04:1a:34:81:bc:8a:03:e9:7b:97:68:1d:e9:e0:21:5b:98:
10:b2:c6:0b:89:3b:de:56:02:f4:aa:77:f9:a1:60:f0:85:73:
d5:06:1d:0f:25:d9:57:13:43:1b:e0:a5:29:96:1c:50:ee:49:
7c:c4:5e:8d:2a:cc:b8:0f:cc:81:fa:0f:d2:c2:81:83:44:2c:
6f:25:09:bc:2f:9f:8e:2b:cd:5c:4d:ce:b4:0d:7e:70:f0:68:
0c:ca:64:57:64:82:60:59:5f:0b:02:7d:9e:e2:e5:96:97:9a:
65:73:a0:73:61:08:85:38:71:16:72:ea:59:f4:68:39:b6:1f:
bf:cb:76:70:e4:90:93:0b:0f:a4:fe:68:86:4d:ad:67:23:b9:
de:fe:2f:43:84:ca:98:f1:b6:c7:78:d3:ea:50:23:95:54:1d:
cf:c5:5d:7c:03:ca:41:6d:b2:de:13:78:c0:8f:b4:63:ce:f7:
74:41:63:76:3a:8b:f4:4e:cb:18:e1:08:e1:ce:0a:3c:ca:67:
44:7b:63:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:52 2026 by rpki-client