
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230362e3132382e302f31372d3137203d3e2034383038.roa
File: 3132342e3230362e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: ODJQiIjADWTRpudraMal4QDIZCip2rcCp2wkec1XaU4=
Subject key identifier: F6:15:D7:78:85:C8:40:7C:15:48:AC:EE:8B:1D:6D:8E:DE:B1:A5:58
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 6E3551F27145CDAF99F70722616B1721FF4152FB
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230362e3132382e302f31372d3137203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:21 +0000
ROA not before: Fri 05 Jun 2026 05:53:21 +0000
ROA not after: Fri 04 Jun 2027 05:58:21 +0000
asID: 4808
IP address blocks: 124.206.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:35:51:f2:71:45:cd:af:99:f7:07:22:61:6b:17:21:ff:41:52:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:21 2026 GMT
Not After : Jun 4 05:58:21 2027 GMT
Subject: CN=F615D77885C8407C1548ACEE8B1D6D8EDEB1A558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:60:30:58:f0:61:93:72:7e:98:78:e6:09:4f:
4f:bd:2f:88:db:b5:9d:39:b3:03:58:ed:77:2b:8d:
a3:0f:d6:47:25:a8:6b:0e:9e:9b:50:1d:95:fc:a1:
67:a4:0d:38:d2:4d:20:24:04:fc:10:10:be:d8:57:
d7:f9:e5:0e:1f:f5:d4:5f:05:73:fe:c0:c8:10:1d:
d2:01:48:f2:7c:6d:8a:c1:7e:c0:b7:24:93:ae:58:
8b:93:ff:92:2b:67:15:78:9c:a4:37:a5:bb:89:aa:
0b:89:b8:b5:ee:62:d8:30:1a:b5:70:34:32:0a:ac:
8f:48:a6:a7:5d:aa:16:41:8f:c1:f5:8c:e2:8e:5c:
8b:f7:6d:8b:7b:96:2a:08:43:6c:54:4c:bb:8d:2c:
ee:34:3b:09:65:fa:3b:9f:f7:f0:7a:6a:0a:00:71:
1c:26:b3:aa:69:dd:dc:2b:07:f7:f8:cb:48:37:c4:
75:af:41:16:55:49:de:a4:a8:bd:08:4a:94:3a:16:
e1:f0:40:9f:85:8f:19:4f:5f:6e:b0:dc:15:4f:65:
1b:f1:93:22:f8:21:2c:b0:6e:c8:0c:19:1d:85:ae:
8f:a0:fe:54:ce:d5:0d:08:29:73:b7:d9:42:81:06:
e5:3d:13:31:e3:c7:54:1c:f8:f5:08:8a:42:33:8e:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:15:D7:78:85:C8:40:7C:15:48:AC:EE:8B:1D:6D:8E:DE:B1:A5:58
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230362e3132382e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.206.128.0/17
Signature Algorithm: sha256WithRSAEncryption
4c:0c:fd:fc:f4:72:ad:89:92:d9:a2:20:b0:2b:f4:7b:51:ed:
ef:55:fa:43:b4:b2:ca:de:0e:a5:07:36:c9:50:63:df:72:85:
b4:46:09:99:f0:c4:b6:1d:35:1b:52:ac:94:e3:83:59:8b:a5:
29:f5:07:63:44:7f:a2:b7:47:27:5d:ae:0a:9b:be:fe:e0:b4:
77:dc:01:87:0e:a1:33:23:48:d5:e1:3d:23:41:41:c5:af:ac:
90:8f:4d:82:4d:59:63:d4:c4:39:fc:a9:a8:c4:01:e8:75:02:
dc:c8:30:ab:41:c6:51:97:2f:53:c1:6c:78:cf:90:ab:e3:72:
44:19:54:dc:83:c5:99:0e:48:48:39:ed:0d:d7:8a:d2:47:12:
50:79:fd:10:f6:09:9d:70:be:05:9e:69:b2:38:36:23:0e:1c:
eb:ac:aa:f7:cc:fe:dc:29:56:6d:c3:e2:83:82:f7:0f:df:16:
4e:2c:b5:14:53:cd:31:83:c6:e1:d4:bb:35:ab:0c:e4:33:d7:
0f:72:63:22:92:bf:59:96:04:43:95:e5:b1:51:69:0f:c0:10:
96:cf:63:32:11:2a:7f:90:aa:dc:cb:3c:ca:84:2a:02:d3:19:
2a:a7:a9:6a:59:27:94:91:c8:d6:51:35:09:77:01:79:08:8e:
3d:aa:ec:d3
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:52 2026 by rpki-client