
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3137362e302f32302d3230203d3e2034383038.roa
File: 3132342e3230322e3137362e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier: 2Yetz0PJp3EY0n7dZFBBqr3o4GioxQZJXj+YdIsjEDY=
Subject key identifier: C3:E8:A6:C1:71:09:DA:BD:00:2D:14:4F:69:85:EF:CB:5A:50:6C:2B
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5618612D97AE2104A74D6EE298E35D1060DE8073
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3137362e302f32302d3230203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:57:59 +0000
ROA not before: Fri 05 Jun 2026 05:52:59 +0000
ROA not after: Fri 04 Jun 2027 05:57:59 +0000
asID: 4808
IP address blocks: 124.202.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:18:61:2d:97:ae:21:04:a7:4d:6e:e2:98:e3:5d:10:60:de:80:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:52:59 2026 GMT
Not After : Jun 4 05:57:59 2027 GMT
Subject: CN=C3E8A6C17109DABD002D144F6985EFCB5A506C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d9:42:24:0b:b2:54:2f:be:3f:bd:a1:1b:cb:
f8:55:19:b7:3f:fd:00:dd:1f:0e:52:ec:c2:88:92:
fa:22:b1:64:9a:0f:49:70:ac:04:e9:7a:71:d1:42:
bd:62:c4:8b:db:39:32:0d:78:6a:08:c2:de:9f:b4:
57:42:3b:5f:de:15:79:2c:91:7a:43:a7:96:fc:09:
53:0d:df:3b:ff:0c:85:60:28:3e:b6:c8:be:ea:be:
f9:2e:ee:d1:0a:81:85:5b:f9:03:77:2d:d2:cd:b8:
82:20:c0:14:63:7f:db:31:22:a3:66:45:67:36:07:
9b:f0:53:1d:16:6e:15:13:3e:d5:5e:3c:71:96:13:
d2:ec:20:21:36:ae:a5:e8:cc:22:e6:c5:2e:f3:be:
26:8b:d3:f0:f5:07:96:34:21:19:e0:80:53:ee:cc:
a2:ee:4d:36:1b:ff:65:97:12:84:af:13:74:d0:28:
c4:c3:05:f8:b3:1d:3b:58:e4:23:cb:41:73:eb:2f:
45:d7:55:f5:57:97:f2:65:b1:a4:2d:6b:99:38:a0:
b2:cc:e8:83:86:c8:c7:ed:be:f4:b0:c7:2c:06:09:
ef:c7:54:67:fb:4f:b1:1b:57:43:b2:0e:c8:78:9c:
8c:d2:39:de:45:26:1a:4c:27:56:3f:5b:88:69:78:
65:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:E8:A6:C1:71:09:DA:BD:00:2D:14:4F:69:85:EF:CB:5A:50:6C:2B
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3137362e302f32302d3230203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.202.176.0/20
Signature Algorithm: sha256WithRSAEncryption
94:4f:dc:64:d4:c0:11:de:72:88:8d:5c:e9:fd:17:26:da:91:
3b:23:73:34:db:c2:30:5b:4b:97:a4:0d:75:8b:a4:ea:61:72:
08:95:b4:5d:41:43:d9:07:6e:51:81:7a:72:b2:fc:75:f6:39:
0b:a9:53:a3:b0:62:c8:be:e3:3e:cc:60:55:b0:54:33:ad:0f:
d1:50:00:1e:fc:03:1c:2e:20:df:a7:c1:8b:06:e7:02:7a:47:
d2:0c:e8:95:9b:23:15:b1:e2:d6:02:74:cf:ef:02:ee:06:54:
a1:6e:c0:c4:96:cc:9f:dc:94:aa:14:83:da:c6:db:2f:da:36:
bd:02:67:0b:c3:69:4a:76:ac:12:de:08:c9:b6:b2:50:87:22:
3e:6f:c2:60:cc:fb:f1:db:55:a1:92:c4:71:38:50:7b:96:bc:
9b:3f:a0:cb:15:7b:7e:17:55:55:b3:8d:f7:87:a4:5e:8f:43:
61:9e:04:76:73:88:5e:89:62:69:3c:0c:7e:f7:74:51:18:ce:
3c:7a:5e:84:86:41:df:4b:f1:7d:d6:11:0a:f0:51:44:42:4a:
4d:65:86:57:04:4d:19:84:b3:12:60:32:2e:a7:5a:dc:f2:80:
7b:e4:e6:a0:6a:d3:db:b3:61:e1:42:ac:bb:73:36:7e:23:19:
00:9b:01:7b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client