
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230352e302e302f31372d3137203d3e2034383038.roa
File: 3132342e3230352e302e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: 8KzaHJI9UMIGmyrl1VXT1X/pHM9sJODbW1gW2lNEq1c=
Subject key identifier: 30:9A:7D:BD:A1:3D:17:D5:AF:11:41:58:1B:AB:30:D7:B9:56:F5:C4
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 53101F838F13F17733FCD995AF7C9784DE6C97B6
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230352e302e302f31372d3137203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:20 +0000
ROA not before: Fri 05 Jun 2026 05:53:20 +0000
ROA not after: Fri 04 Jun 2027 05:58:20 +0000
asID: 4808
IP address blocks: 124.205.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:10:1f:83:8f:13:f1:77:33:fc:d9:95:af:7c:97:84:de:6c:97:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:20 2026 GMT
Not After : Jun 4 05:58:20 2027 GMT
Subject: CN=309A7DBDA13D17D5AF1141581BAB30D7B956F5C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:47:78:d7:38:a2:79:82:23:67:8e:34:da:32:
c0:54:70:34:d3:cf:a2:88:0f:27:02:cf:ee:4c:ac:
6d:98:9d:fc:90:35:46:3a:36:fd:cc:7b:4d:22:25:
e9:bd:c8:3a:af:d6:1b:37:76:43:b8:2d:80:a8:91:
cb:d3:82:da:dd:60:54:4b:54:41:77:49:d0:6f:47:
a1:c0:6f:e3:ac:bd:81:d6:80:ef:81:30:f2:84:bf:
7d:d0:44:b1:7d:e3:bd:35:d4:60:8f:c3:83:50:b2:
19:be:ce:ff:53:36:f4:ea:20:03:ea:e7:c3:ff:38:
e0:34:bf:2f:5a:95:45:72:c9:a4:29:27:1c:61:65:
2f:9e:f9:89:19:56:01:46:e0:d6:6a:4e:5b:ab:37:
84:8e:09:5e:94:69:15:dc:6d:78:5b:1a:d4:5b:59:
33:73:29:47:5d:57:03:2f:67:11:aa:34:26:08:3c:
ab:ad:bc:66:9f:76:a2:5b:e0:6d:3c:8f:3d:67:32:
d4:c5:f5:ee:2f:cb:10:94:94:7c:57:08:15:40:6a:
fe:74:82:c0:2c:db:4d:55:52:de:d4:a1:25:53:2c:
f3:40:4c:4f:d7:15:a1:59:69:72:19:aa:df:c7:1d:
9f:66:65:14:6b:ad:71:18:c3:09:b6:5a:1b:c5:93:
38:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9A:7D:BD:A1:3D:17:D5:AF:11:41:58:1B:AB:30:D7:B9:56:F5:C4
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230352e302e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.205.0.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:93:3e:c9:09:88:24:63:72:c0:21:f2:1d:6c:61:af:54:7a:
a5:a8:c3:69:2b:90:90:35:f8:61:24:84:5c:9e:9d:51:dd:33:
b3:ed:54:b8:53:64:8c:dd:ee:05:6d:e4:49:25:bb:80:14:69:
b0:9a:45:ec:67:3b:9c:81:56:9f:3f:b4:01:08:e8:34:04:98:
b5:55:85:de:04:53:9d:07:b6:31:45:26:33:12:40:e0:9c:26:
68:e3:b0:f5:a4:e7:d1:0c:e4:a8:54:02:d7:9f:a2:52:e9:bb:
b2:46:29:1e:d9:1c:b4:c2:21:51:e7:7d:97:54:1d:b4:4f:ff:
2d:9b:6b:27:ed:29:d2:40:7b:ab:8c:cd:bf:ae:cd:22:0c:45:
9b:de:8e:41:7f:a9:bb:18:ab:7d:90:bf:3b:c8:53:4e:81:99:
fd:7c:f7:6f:ae:ed:7b:d5:1b:b7:d7:f7:03:ed:ff:ab:83:c1:
6d:e1:f0:43:b3:16:d4:30:31:c2:18:8f:b2:1e:53:70:9c:ec:
46:4b:9f:09:3b:07:d9:66:36:4b:96:17:e5:dd:fd:99:e2:a9:
73:f1:f4:2b:3c:10:84:16:cb:4a:38:17:97:91:df:6a:ec:f7:
a3:72:f8:c4:be:8e:d9:90:25:e4:c2:10:00:4a:79:f9:23:0b:
d7:66:e6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:40 2026 by rpki-client