
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e3132382e302f31372d3137203d3e2034383038.roa
File: 3132342e3230372e3132382e302f31372d3137203d3e2034383038.roa (raw, json)
Hash identifier: DVjAyhZlS0B66SAOLXdsnmjU7vpYaeXY6RxYEOG+en4=
Subject key identifier: 83:71:DF:52:0F:D4:E1:8C:EC:6B:61:24:A1:13:E6:CF:6C:F1:E8:5B
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 711F35A2CB9B3FC5B13B53BB43F2AD8515DAADF8
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e3132382e302f31372d3137203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:35 +0000
ROA not before: Fri 05 Jun 2026 05:53:35 +0000
ROA not after: Fri 04 Jun 2027 05:58:35 +0000
asID: 4808
IP address blocks: 124.207.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:1f:35:a2:cb:9b:3f:c5:b1:3b:53:bb:43:f2:ad:85:15:da:ad:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:35 2026 GMT
Not After : Jun 4 05:58:35 2027 GMT
Subject: CN=8371DF520FD4E18CEC6B6124A113E6CF6CF1E85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:88:97:17:00:16:4b:ed:1b:2c:cb:57:92:fb:
d8:d1:47:ed:ed:79:3b:ac:78:d5:b6:19:6c:8e:51:
a0:bf:54:42:a4:47:1f:2d:29:74:a5:ef:5d:ca:b4:
b2:da:fe:e3:19:3d:ab:e3:23:29:11:1b:a0:a8:e4:
60:a3:f4:11:4d:a8:c0:28:c4:e6:fe:99:db:70:78:
0d:38:0e:8a:97:5d:bf:03:b0:6a:63:cb:1e:9c:78:
11:c7:f5:00:4a:39:83:1a:93:26:a0:39:74:35:fb:
e3:19:b2:1c:e0:7d:f2:24:ea:10:6d:96:25:34:d7:
87:14:c0:fa:12:d4:db:69:5a:c1:87:f7:67:c4:a0:
1c:c8:51:86:8c:85:43:5e:2c:cb:01:32:73:61:6f:
37:c4:f8:22:a8:10:57:53:78:1d:ac:a1:77:fe:1c:
02:d4:ea:54:11:99:81:09:e2:37:3d:ef:d6:36:1f:
4c:e7:44:4a:89:73:aa:94:6d:62:c1:8a:30:be:4b:
58:9d:75:9b:ec:45:7c:67:ea:c1:9d:8d:bf:b4:f6:
34:ae:c5:b9:35:60:82:3e:7d:8a:6f:e7:df:99:0f:
20:a5:a5:b6:66:4c:76:70:e3:60:8d:24:65:b9:95:
6f:f6:fb:2a:b9:ec:ed:23:81:cd:05:8f:e2:7b:98:
30:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:71:DF:52:0F:D4:E1:8C:EC:6B:61:24:A1:13:E6:CF:6C:F1:E8:5B
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230372e3132382e302f31372d3137203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.207.128.0/17
Signature Algorithm: sha256WithRSAEncryption
14:c9:09:8d:a1:dd:bc:52:20:89:3e:90:af:6f:7d:17:5a:4a:
75:00:64:c1:fc:95:9c:e8:e9:40:29:52:d8:99:4f:c8:45:a7:
82:5e:ef:b7:dd:c3:57:98:9b:fe:36:c3:aa:9e:d6:31:78:b5:
ad:8a:43:cd:51:56:eb:0f:6e:4e:34:5d:7c:4b:a5:4a:35:c2:
3f:bb:6b:89:72:af:98:7f:04:36:8c:82:0d:ca:e8:57:b6:99:
b5:84:03:8c:9e:cd:19:bf:13:01:b3:f6:71:74:7a:c4:f8:af:
bd:ca:48:fb:0d:5c:b0:b1:0b:8a:8a:b3:63:f3:9f:6e:cf:62:
16:53:85:b1:de:b3:43:2a:09:c8:3c:cb:a2:b0:6c:39:97:fd:
7c:c0:6d:16:4c:a2:3d:50:28:2b:94:76:5d:2a:d0:ba:f4:ec:
6e:e9:11:04:27:a7:b4:39:a3:79:47:72:49:97:4f:ca:58:03:
22:fc:bd:bf:eb:67:2d:62:45:f7:2d:68:23:5f:7a:64:c1:10:
4c:84:3d:e4:36:0f:60:02:f9:5f:cc:59:3b:11:37:d7:e0:7c:
e0:02:3b:c1:13:3a:83:d0:40:83:30:62:2e:e9:8e:d6:35:01:
d3:40:e7:53:e5:f6:d0:25:08:10:8a:bc:e6:39:e9:8c:12:bc:
21:31:95:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:54 2026 by rpki-client