
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa
File: 3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: o0TMnJF/nDjwYjEts93ozQKKrC8nDDUw1UfUimzJguU=
Subject key identifier: A2:F4:15:A1:E1:1D:5C:F9:76:64:13:22:6E:40:D5:A5:91:6F:C1:A8
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 50882D1C3F5CD1F675BADE168735FBC38225EB2E
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:20 +0000
ROA not before: Fri 05 Jun 2026 05:53:20 +0000
ROA not after: Fri 04 Jun 2027 05:58:20 +0000
asID: 4808
IP address blocks: 124.204.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:88:2d:1c:3f:5c:d1:f6:75:ba:de:16:87:35:fb:c3:82:25:eb:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:20 2026 GMT
Not After : Jun 4 05:58:20 2027 GMT
Subject: CN=A2F415A1E11D5CF9766413226E40D5A5916FC1A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:7d:9a:12:20:4f:ad:c3:1b:e2:28:40:61:b4:
2e:02:b1:b0:3e:4a:2e:30:86:19:27:e7:3d:f1:af:
60:dc:7a:e7:63:e1:4f:86:50:94:59:a3:05:a3:42:
a3:b6:57:31:31:b8:47:ac:90:cb:44:16:4d:82:0e:
b6:17:25:fd:0e:30:2b:b6:e8:47:b1:61:28:a2:d4:
1e:1a:af:5b:c4:47:0b:23:82:dd:5a:4f:0a:cc:ef:
35:92:2f:fe:2a:a2:ee:20:94:2e:14:ca:9f:a5:a7:
d1:44:f3:e0:cc:14:7e:89:2e:b4:e1:55:9f:3f:09:
fe:e8:73:66:42:ab:51:9b:5f:e3:74:02:b7:00:0d:
b4:f5:21:ed:c7:32:3e:f8:86:cc:1a:cb:a1:25:10:
62:ef:b2:a2:71:dd:75:d3:a1:1c:24:1b:55:8c:80:
dd:46:84:f2:e7:24:fa:05:c5:14:21:a0:ec:9c:b1:
02:a3:4c:1f:a7:38:de:9c:e7:c6:55:8e:22:91:0d:
d2:59:8c:29:89:1e:11:87:25:33:88:83:65:6e:57:
d6:3d:2e:1d:4d:6c:f3:ab:df:79:98:5a:9a:d8:7c:
e5:cf:4d:1d:58:c5:ca:e5:85:ae:01:51:1c:82:36:
eb:27:ff:18:7f:14:76:fa:83:23:76:f3:e0:25:08:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:15:A1:E1:1D:5C:F9:76:64:13:22:6E:40:D5:A5:91:6F:C1:A8
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e3132382e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.204.128.0/17
Signature Algorithm: sha256WithRSAEncryption
14:75:56:c0:43:87:25:bc:00:13:d2:ff:0a:54:0d:65:6b:7c:
e7:72:05:91:ab:86:83:ed:4f:52:8b:86:ae:81:d7:fe:ac:a7:
42:f7:34:47:2c:95:ce:6c:4a:51:bd:f6:e2:1f:03:7d:65:ca:
15:08:96:ea:4a:ad:15:68:90:ea:02:f5:da:65:4b:14:0c:3e:
84:32:6b:b7:1e:84:cc:01:cd:6b:dd:db:54:95:8d:c2:bb:25:
06:ef:00:18:d3:af:54:c0:ef:bc:e0:41:17:81:ef:52:88:9f:
cc:9b:b0:29:8e:1b:a1:40:90:e8:a4:89:7c:96:77:17:f8:43:
47:c9:6e:7c:3e:0b:63:b0:e2:de:cf:8e:f2:e8:53:75:67:21:
be:e2:b1:9c:91:ab:36:7a:a6:ca:9a:23:12:bc:04:8d:0a:24:
27:cb:68:0d:8e:c9:0e:db:24:e2:52:b1:14:f0:f9:2b:c1:cb:
75:bb:4f:7f:ca:2a:38:51:6e:e5:39:c0:82:e5:64:ae:aa:9e:
69:90:1a:51:a0:03:cd:4a:20:98:04:d3:b4:54:2b:8b:d6:fb:
55:53:33:3e:99:40:8e:a6:2a:54:a2:38:c4:b4:20:a9:74:b6:
1f:83:6a:f8:f5:3f:78:6a:72:71:c1:62:46:54:6c:d4:6d:1a:
0d:b9:cd:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client