
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e302e302f31372d3137203d3e2034383038.roa
File: 3132342e3230372e302e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: roTEA9RLSy+iKxtjSYQjcdX/jnpoZ8vwBSGyATGNenI=
Subject key identifier: 4E:A4:DB:69:33:8A:C5:13:67:FF:69:DF:DA:38:A4:D3:A2:45:D0:B6
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 539CA171F9C3123D7CAE06D9BC7EDFDD8018699A
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e302e302f31372d3137203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:35 +0000
ROA not before: Fri 05 Jun 2026 05:53:35 +0000
ROA not after: Fri 04 Jun 2027 05:58:35 +0000
asID: 4808
IP address blocks: 124.207.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:9c:a1:71:f9:c3:12:3d:7c:ae:06:d9:bc:7e:df:dd:80:18:69:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:35 2026 GMT
Not After : Jun 4 05:58:35 2027 GMT
Subject: CN=4EA4DB69338AC51367FF69DFDA38A4D3A245D0B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:e5:7d:57:cd:22:aa:2c:61:62:5b:67:3f:
c0:a2:88:a2:f3:00:41:52:a6:5c:37:87:8d:54:fb:
1b:14:7a:68:fe:8c:7e:57:6a:91:bb:13:76:33:41:
68:8e:31:4b:79:c0:43:12:98:ab:b5:96:23:f3:1a:
43:ac:05:ae:07:0f:95:9d:91:c6:1a:87:75:c3:22:
61:2b:a6:c3:95:e8:40:7a:75:57:08:cb:72:ec:45:
5a:b6:25:a7:fd:dd:57:96:05:1f:11:a2:9c:20:81:
d7:4d:74:4e:b9:db:4f:a6:c4:26:1f:48:29:5c:61:
13:8b:d4:16:bb:e2:67:60:4a:7d:31:e0:0e:9f:e6:
3b:49:ad:2c:b1:16:12:6d:65:2b:20:3f:41:e6:d5:
e7:c8:6f:8d:e2:ec:49:56:b4:0e:31:ec:34:1e:25:
c1:35:0a:a6:1a:22:29:96:de:11:9a:cb:c7:af:0d:
f5:3d:13:4f:68:7d:c7:ee:f5:e0:9c:e3:b2:d0:1d:
e9:9a:e1:2d:ca:52:89:34:8b:fc:22:6c:f0:c3:99:
da:3e:56:76:b6:f3:a2:fa:6b:06:07:9d:ff:a7:81:
a5:02:31:01:6d:08:b1:7b:cc:87:96:8d:f3:5a:88:
fb:9a:7d:05:50:a5:bb:10:8b:ad:3e:ed:94:c6:2b:
8b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:A4:DB:69:33:8A:C5:13:67:FF:69:DF:DA:38:A4:D3:A2:45:D0:B6
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e302e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.207.0.0/17
Signature Algorithm: sha256WithRSAEncryption
5b:41:d3:6e:f5:5e:f2:51:74:c9:ee:74:a7:c4:cb:6e:84:9c:
ed:6e:19:2c:b1:1d:4c:15:ec:81:c1:a5:ee:5c:0b:ed:03:51:
68:66:68:a8:fb:28:b7:46:8c:77:e3:1c:f0:86:41:80:ca:ec:
97:9d:a7:f1:6f:b7:cb:30:e4:e1:3a:35:20:89:67:2b:2d:1f:
27:d9:2c:44:64:3b:d2:d6:a5:8a:90:75:cb:7d:81:14:e6:fd:
07:8f:a8:2d:2e:de:1a:e9:9b:2a:cc:96:65:0e:66:c7:87:2a:
6d:10:28:db:68:fb:30:94:1c:5e:31:57:d6:b4:aa:da:1a:ef:
d7:2a:34:67:6c:d9:16:bf:e2:da:79:66:6b:74:3d:58:39:25:
62:af:4e:45:15:4e:66:87:61:30:86:87:8c:99:a2:ff:e5:a5:
b2:fe:de:b8:92:96:4a:65:eb:60:93:e9:61:b9:e3:d3:6f:93:
2b:6c:60:b4:5b:5f:e6:27:f5:94:2f:51:aa:0b:0e:81:b9:f0:
12:03:39:44:d3:0a:37:d3:fb:dd:62:2b:4b:d7:69:ba:5e:1b:
6f:7e:56:6d:2b:6d:1f:7e:39:f4:33:b4:0d:df:d6:ed:9a:9e:
09:30:92:4b:18:90:14:d8:e2:5f:4d:49:f1:8f:6b:0a:65:c7:
ac:88:1c:09
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUU5yhcfnDEj18rgbZvH7f3YAYaZowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3Mzcw
NUJEOTUxNTAeFw0yNjA2MDUwNTUzMzVaFw0yNzA2MDQwNTU4MzVaMDMxMTAvBgNV
BAMTKDRFQTREQjY5MzM4QUM1MTM2N0ZGNjlERkRBMzhBNEQzQTI0NUQwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2aOV9V80iqixhYltnP8CiiKLz
AEFSplw3h41U+xsUemj+jH5XapG7E3YzQWiOMUt5wEMSmKu1liPzGkOsBa4HD5Wd
kcYah3XDImErpsOV6EB6dVcIy3LsRVq2Jaf93VeWBR8RopwggddNdE6520+mxCYf
SClcYROL1Ba74mdgSn0x4A6f5jtJrSyxFhJtZSsgP0Hm1efIb43i7ElWtA4x7DQe
JcE1CqYaIimW3hGay8evDfU9E09ofcfu9eCc47LQHema4S3KUok0i/wibPDDmdo+
Vna286L6awYHnf+ngaUCMQFtCLF7zIeWjfNaiPuafQVQpbsQi60+7ZTGK4uTAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUTqTbaTOKxRNn/2nf2jik06JF0LYwHwYDVR0j
BBgwFoAUrkh7csTzjqVI9nIbtgt3NwW9lRUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzk0MzkzOS8wL0FFNDg3QjcyQzRGMzhFQTU0OEY2NzIxQkI2MEI3
NzM3MDVCRDk1MTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQUU0ODdCNzJDNEYzOEVBNTQ4RjY3MjFCQjYwQjc3MzcwNUJEOTUxNS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ3OTQzOTM5LzAvMzEzMjM0MmUzMjMw
MzcyZTMwMmUzMDJmMzEzNzJkMzEzNzIwM2QzZTIwMzQzODMwMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAd8zwAwDQYJKoZIhvcNAQELBQADggEBAFtB0271XvJRdMnudKfEy26EnO1uGSyx
HUwV7IHBpe5cC+0DUWhmaKj7KLdGjHfjHPCGQYDK7Jedp/Fvt8sw5OE6NSCJZyst
HyfZLERkO9LWpYqQdct9gRTm/QePqC0u3hrpmyrMlmUOZseHKm0QKNto+zCUHF4x
V9a0qtoa79cqNGds2Ra/4tp5Zmt0PVg5JWKvTkUVTmaHYTCGh4yZov/lpbL+3riS
lkpl62CT6WG549NvkytsYLRbX+Yn9ZQvUaoLDoG58BIDOUTTCjfT+91iK0vXabpe
G29+Vm0rbR9+OfQztA3f1u2angkwkksYkBTY4l9NSfGPawplx6yIHAk=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:40 2026 by rpki-client