
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3232342e302f31392d3139203d3e2034383038.roa
File: 3132342e3230322e3232342e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: WjY+0czGBp31T5lageAS/SZ09ahNnvLvLuheBHZBgN8=
Subject key identifier: 4E:F0:36:E9:76:7B:EB:3E:89:86:60:67:F8:53:28:CA:99:AF:4C:E6
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5844069798A36F6AD81B451E00171B8329BA9531
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3232342e302f31392d3139203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:00 +0000
ROA not before: Fri 05 Jun 2026 05:53:00 +0000
ROA not after: Fri 04 Jun 2027 05:58:00 +0000
asID: 4808
IP address blocks: 124.202.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:44:06:97:98:a3:6f:6a:d8:1b:45:1e:00:17:1b:83:29:ba:95:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:00 2026 GMT
Not After : Jun 4 05:58:00 2027 GMT
Subject: CN=4EF036E9767BEB3E89866067F85328CA99AF4CE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b3:7b:9a:d8:7d:91:4d:1a:3c:1c:45:60:2f:
fe:03:71:27:d5:27:31:7f:03:c1:56:65:75:d7:3a:
bc:d2:4e:df:f5:52:40:04:72:e9:a8:da:cc:89:56:
49:78:75:bb:82:97:b4:9d:ca:16:34:fa:6e:8d:60:
b4:a1:70:21:ed:4e:96:0f:13:b6:a2:16:db:99:46:
6c:20:40:25:fc:26:0a:d6:75:26:71:3c:ae:7f:23:
22:71:7f:f1:61:49:af:5f:96:ed:37:46:be:2a:4f:
16:98:b8:e4:b0:01:91:80:a0:2a:a3:30:70:62:9f:
0c:a5:f7:e4:f3:fb:ff:fc:00:5c:07:27:46:b0:c4:
3e:6b:7d:a8:6a:63:35:68:09:2a:30:5a:e3:fb:e7:
23:c1:e9:70:c3:33:f7:07:89:63:1a:78:1d:25:50:
74:3e:aa:2d:7d:36:d5:69:2b:6b:b2:cb:d3:10:44:
3b:d2:96:fa:b8:bc:c2:28:3d:72:6a:02:76:3d:e7:
fb:2a:30:74:32:1f:30:22:80:e2:e9:34:7e:0d:d7:
02:32:4d:a0:5f:b3:49:fe:2b:25:18:cf:43:5e:9b:
56:39:48:67:78:80:71:56:d5:e7:16:f5:df:65:74:
34:2a:42:ef:64:2f:7b:eb:66:a2:28:c2:97:69:20:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:F0:36:E9:76:7B:EB:3E:89:86:60:67:F8:53:28:CA:99:AF:4C:E6
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230322e3232342e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.202.224.0/19
Signature Algorithm: sha256WithRSAEncryption
a7:38:f5:95:a0:88:26:57:ce:04:17:8d:42:8f:6d:e9:65:c8:
58:9e:79:a7:6e:8c:8f:2e:87:bf:87:db:c3:0a:f3:b5:1b:5c:
bb:ad:e9:dd:35:a8:f5:31:5f:5f:ce:a8:a9:17:72:75:9b:6e:
e2:08:18:1a:ab:3f:7c:5f:e3:0b:7f:04:22:3e:04:42:5a:1f:
6c:3d:17:f7:66:e6:c6:39:da:94:6a:a2:31:06:d1:07:11:04:
63:6c:f7:81:bb:33:23:56:e4:9d:d7:47:e6:5e:02:2f:69:a9:
76:11:51:f5:70:e3:de:36:0a:f0:0e:2d:3f:30:29:d9:9f:ca:
32:65:ad:bf:c7:2c:77:3e:f8:71:3c:e6:1f:00:52:6e:64:97:
96:96:a1:f1:a0:0c:b9:81:4c:6a:8f:c2:21:2e:c3:bb:af:4d:
e5:54:8f:e9:80:cb:dd:9c:fa:16:3b:df:00:2d:92:13:2e:cc:
40:07:49:55:4a:71:5f:45:14:b8:21:a0:14:fe:7f:5b:ed:9e:
f8:fb:3a:d0:b7:7d:85:68:3d:e0:da:76:92:9e:23:18:7c:96:
5d:4d:e4:2d:2d:99:f5:44:9d:2c:29:67:ec:6b:11:b5:dc:a3:
4b:b8:18:f8:2b:3c:83:43:53:28:df:9e:0a:8d:a7:f0:e2:af:
d6:b3:2a:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:38 2026 by rpki-client