
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3139322e302f31392d3139203d3e2034383038.roa
File: 3132342e3230322e3139322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: jYSCJQQruymvWWk1aGfODeALz5atDJM7OytapDGwAnI=
Subject key identifier: 77:40:03:BF:15:67:41:83:EE:7D:8E:36:7A:55:01:7F:4C:BD:D1:DD
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 4BC880FD4AFA3F0B053EF094A2F3455B8E98DEB0
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3139322e302f31392d3139203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:00 +0000
ROA not before: Fri 05 Jun 2026 05:53:00 +0000
ROA not after: Fri 04 Jun 2027 05:58:00 +0000
asID: 4808
IP address blocks: 124.202.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:c8:80:fd:4a:fa:3f:0b:05:3e:f0:94:a2:f3:45:5b:8e:98:de:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:00 2026 GMT
Not After : Jun 4 05:58:00 2027 GMT
Subject: CN=774003BF15674183EE7D8E367A55017F4CBDD1DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:61:cb:89:24:af:0a:b7:b9:54:90:59:2c:
ee:be:37:0e:27:bc:62:f2:d1:dd:4f:79:e8:e7:12:
39:90:0b:09:53:26:27:bc:a5:74:3d:2b:c3:8e:35:
b2:59:ba:5d:d9:40:22:a4:54:2c:94:a4:80:80:14:
d5:25:58:bb:0e:4f:1a:46:84:54:aa:d4:fc:81:b4:
96:74:cf:33:2f:3a:3b:d8:8e:36:70:eb:b7:94:39:
74:e3:82:b4:40:37:51:e4:16:e8:4f:31:54:c3:fc:
e0:13:74:6c:df:6b:75:64:39:77:93:09:0d:37:db:
54:b4:70:0d:5d:51:2d:a6:15:f4:9f:89:46:8b:8d:
a6:a4:4e:aa:c0:8f:64:db:8c:05:48:ed:87:c8:1c:
54:b5:30:9e:02:4b:d2:39:a5:55:bd:db:ad:19:2d:
2e:7f:3e:35:f9:57:e8:fb:55:0f:23:9e:6b:af:9c:
fd:d9:63:b6:c7:78:ab:e5:04:10:27:4c:ea:db:c5:
fc:62:39:a7:6c:17:bf:1b:5d:84:65:cd:53:4b:4e:
a2:ec:24:db:0f:97:44:31:b9:1d:12:4a:f4:71:e4:
c1:64:00:4b:f1:9c:95:78:6c:63:b4:ba:20:2a:0e:
cd:58:46:d9:6c:ab:6e:5b:0a:d6:5b:30:8d:a3:67:
90:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:40:03:BF:15:67:41:83:EE:7D:8E:36:7A:55:01:7F:4C:BD:D1:DD
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3139322e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.202.192.0/19
Signature Algorithm: sha256WithRSAEncryption
6a:43:e8:f8:2a:09:c4:6e:04:62:79:7d:2b:a2:1e:ae:7c:de:
86:13:52:bc:cb:ae:4f:34:7c:3c:d7:38:d9:b8:02:ae:2e:59:
f6:92:74:ec:44:fb:a3:ef:ff:6e:0f:1f:63:32:0d:6f:ce:ad:
68:c0:0a:30:bb:3c:e8:fc:ad:50:cd:75:5a:d3:a0:a0:1d:f9:
3c:53:92:31:ce:6c:af:1d:d7:f9:16:d9:c9:60:a6:27:ff:ae:
41:93:30:43:a2:79:c5:13:e9:f6:95:97:28:55:f1:da:39:d2:
6e:68:6b:eb:ea:a5:f7:22:fe:c4:42:e9:23:c3:98:1e:19:fa:
87:90:9b:0d:cb:75:8a:2d:78:2f:8e:86:ce:71:af:7c:42:27:
1b:74:4a:4c:2a:be:4b:54:83:af:9e:40:6c:ab:c8:5a:a5:8a:
d1:54:27:fb:c1:1f:fc:f4:29:35:54:ac:22:ff:79:f7:9f:df:
da:77:1d:06:97:90:0b:2d:9d:c5:fa:75:78:e6:35:e8:a8:08:
5b:43:d6:73:e3:9e:17:d0:a5:da:3e:28:36:dd:6e:c3:21:19:
51:a2:3b:2e:82:29:94:96:98:42:19:01:e9:87:e9:3a:f2:be:
d5:9c:0a:2a:89:3a:6e:8e:89:99:bc:6a:7b:50:5d:d4:d3:22:
4f:33:f0:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:47 2026 by rpki-client