
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e36342e302f31382d3138203d3e2034383038.roa
File: 3132342e3230342e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: vkQfUL0mXAC/9FyuHnBme+E2nrOi2fxgtTMjJv3v8xk=
Subject key identifier: E4:07:5D:80:E1:BD:C8:F7:E1:D2:97:F8:A3:4D:94:D3:A1:F5:44:EA
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 26F153A405BD541BF01112EA8735BE85427DAD95
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e36342e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:20 +0000
ROA not before: Fri 05 Jun 2026 05:53:20 +0000
ROA not after: Fri 04 Jun 2027 05:58:20 +0000
asID: 4808
IP address blocks: 124.204.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:f1:53:a4:05:bd:54:1b:f0:11:12:ea:87:35:be:85:42:7d:ad:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:20 2026 GMT
Not After : Jun 4 05:58:20 2027 GMT
Subject: CN=E4075D80E1BDC8F7E1D297F8A34D94D3A1F544EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a0:46:8a:99:74:7e:0b:87:bd:3e:a1:bc:e2:
9f:e0:ed:b6:cc:40:33:ea:c4:b7:59:13:56:bd:be:
99:ea:fe:c1:a6:83:b2:b4:56:54:27:e0:7b:45:46:
c1:84:1b:00:38:af:7c:c1:53:36:72:b5:45:e3:96:
95:10:58:ba:7b:a1:d0:57:d7:d7:09:7f:66:de:b5:
ce:fd:bd:44:cb:86:75:64:5a:aa:14:9f:70:11:eb:
94:33:8d:63:4f:53:98:26:08:56:60:5a:a3:14:bf:
c3:5e:1b:34:d1:dd:0c:2b:89:1e:0e:62:4b:ba:20:
4d:73:20:27:22:03:9f:8b:c1:5b:c0:f8:12:e3:7e:
6a:44:bf:bb:5b:6f:73:e4:03:ba:4e:ee:ba:ca:b0:
e9:7d:6f:73:31:b8:0a:31:59:00:29:0a:48:41:a3:
1b:74:94:54:9b:49:50:28:df:03:ec:ac:b6:dc:7e:
00:2a:0c:3b:cb:39:e6:1d:92:36:3e:26:43:da:f8:
bb:37:86:6c:a0:2a:0b:6b:e6:8e:1f:8c:b5:18:2e:
e6:64:bb:aa:c0:62:59:6f:97:41:da:38:c9:14:42:
f3:62:20:14:aa:9a:c6:23:db:c8:8d:4f:48:a3:29:
22:00:ca:cd:f2:a4:24:75:f2:02:95:e2:42:30:57:
7b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:07:5D:80:E1:BD:C8:F7:E1:D2:97:F8:A3:4D:94:D3:A1:F5:44:EA
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230342e36342e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.204.64.0/18
Signature Algorithm: sha256WithRSAEncryption
96:63:b9:d8:dd:78:32:20:59:66:a9:c2:74:fc:16:10:95:b2:
51:a1:e4:60:02:e4:fc:58:2c:22:33:2f:cc:7f:bf:3b:02:bc:
a8:a4:1e:46:0f:f7:e2:45:a8:54:f5:60:3a:f8:26:3f:a3:91:
3b:5e:06:a8:6e:ba:4f:36:18:3e:94:10:a3:ad:48:da:38:4f:
fc:99:a3:3d:5b:c3:d5:28:07:e9:ad:0f:ae:ab:71:fb:5d:df:
5b:35:91:32:4d:3c:c1:b5:a8:90:c8:b0:cf:f4:2b:61:38:04:
88:90:db:ff:2f:9b:85:3f:c7:8e:5f:24:db:4e:96:f0:ed:c2:
bc:22:ea:f1:04:24:ce:ae:df:00:c6:0c:50:73:23:53:b7:6b:
fd:09:b0:89:2e:03:c5:2e:95:86:67:dd:75:21:9d:56:cf:bf:
a2:65:bf:62:d8:09:cb:e5:ae:f5:4d:65:54:97:e9:61:6a:fa:
5d:a3:63:65:dd:7e:7a:20:4d:d1:46:1c:48:a3:c8:c4:32:09:
cb:8d:f7:41:96:7b:3b:2a:07:99:14:d5:ca:03:de:95:84:7b:
7b:22:a1:9c:4a:8a:e1:d4:c1:71:3a:2e:5e:de:f4:8a:ac:97:
88:68:a7:d2:82:45:cd:5c:58:54:b9:60:48:7a:ee:b6:85:54:
16:44:c5:0b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUJvFTpAW9VBvwERLqhzW+hUJ9rZUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA2MDUwNTUzMjBaFw0yNzA2MDQwNTU4MjBaMDMxMTAvBgNV
BAMTKEU0MDc1RDgwRTFCREM4RjdFMUQyOTdGOEEzNEQ5NEQzQTFGNTQ0RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLoEaKmXR+C4e9PqG84p/g7bbM
QDPqxLdZE1a9vpnq/sGmg7K0VlQn4HtFRsGEGwA4r3zBUzZytUXjlpUQWLp7odBX
19cJf2betc79vUTLhnVkWqoUn3AR65QzjWNPU5gmCFZgWqMUv8NeGzTR3QwriR4O
Yku6IE1zICciA5+LwVvA+BLjfmpEv7tbb3PkA7pO7rrKsOl9b3MxuAoxWQApCkhB
oxt0lFSbSVAo3wPsrLbcfgAqDDvLOeYdkjY+JkPa+Ls3hmygKgtr5o4fjLUYLuZk
u6rAYllvl0HaOMkUQvNiIBSqmsYj28iNT0ijKSIAys3ypCR18gKV4kIwV3uBAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU5AddgOG9yPfh0pf4o02U06H1ROowHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMjMw
MzQyZTM2MzQyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBnzMQDANBgkqhkiG9w0BAQsFAAOCAQEAlmO52N14MiBZZqnCdPwWEJWyUaHk
YALk/FgsIjMvzH+/OwK8qKQeRg/34kWoVPVgOvgmP6ORO14GqG66TzYYPpQQo61I
2jhP/JmjPVvD1SgH6a0Prqtx+13fWzWRMk08wbWokMiwz/QrYTgEiJDb/y+bhT/H
jl8k206W8O3CvCLq8QQkzq7fAMYMUHMjU7dr/QmwiS4DxS6VhmfddSGdVs+/omW/
YtgJy+Wu9U1lVJfpYWr6XaNjZd1+eiBN0UYcSKPIxDIJy433QZZ7OyoHmRTVygPe
lYR7eyKhnEqK4dTBcTouXt70iqyXiGin0oJFzVxYVLlgSHrutoVUFkTFCw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:39 2026 by rpki-client