
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa
File: 3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa (raw, json)
Hash identifier: BFNqzEum0y9NqeABWWCCF6r2RDHWTzNyTuMcMH5iw7I=
Subject key identifier: A2:51:3C:83:CE:F2:58:D8:9F:03:3C:0F:B6:87:3D:B8:06:6E:E3:1F
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 7B1A9847F9F20047DC5C7AFB5781414EC31E2869
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa
Signing time: Tue 19 May 2026 03:01:17 +0000
ROA not before: Tue 19 May 2026 02:56:17 +0000
ROA not after: Tue 18 May 2027 03:01:17 +0000
asID: 4808
IP address blocks: 203.207.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1a:98:47:f9:f2:00:47:dc:5c:7a:fb:57:81:41:4e:c3:1e:28:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 19 02:56:17 2026 GMT
Not After : May 18 03:01:17 2027 GMT
Subject: CN=A2513C83CEF258D89F033C0FB6873DB8066EE31F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:39:aa:a4:04:a6:12:db:20:80:01:f3:c9:a2:
18:75:36:7f:0d:f0:13:9f:43:a6:c4:d4:b4:6c:71:
5a:87:e4:b7:d5:34:a9:d3:92:f0:69:f6:40:35:7b:
ad:6c:b1:73:58:59:67:09:a8:5d:0c:69:44:53:bd:
ab:88:5f:e5:2a:a8:35:c0:16:e9:a5:51:58:c8:ba:
91:14:a7:ac:31:f1:d6:e4:72:5e:20:95:2d:c3:b3:
d2:18:87:61:85:94:1d:e9:b1:7b:6f:3e:e4:34:2f:
80:54:67:79:48:59:a8:ef:0e:d0:a6:f7:cd:2b:68:
f2:81:46:02:55:57:3b:b0:0f:39:74:7c:fa:e1:1a:
6a:fb:d0:27:5f:47:ec:20:a0:3b:fa:de:cd:1a:71:
ff:c3:dd:85:82:f0:37:8a:8f:72:ec:4b:4f:44:dc:
ef:ba:5c:d7:ce:b7:e8:82:eb:45:d1:3b:e0:10:33:
b9:ae:95:b9:62:2e:d2:23:8f:b3:8f:ff:86:af:49:
7d:14:94:52:00:b1:d9:51:5f:bf:ac:3f:b0:dc:45:
9e:85:d0:62:9d:c6:de:07:4e:c1:23:39:61:d2:0a:
cd:1e:6b:b9:a5:5a:f4:12:58:ea:c1:7a:87:01:ae:
e5:dd:39:cb:52:17:f7:10:f3:38:1a:e9:29:72:11:
ee:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:51:3C:83:CE:F2:58:D8:9F:03:3C:0F:B6:87:3D:B8:06:6E:E3:1F
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3131322e302f32302d3230203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.207.112.0/20
Signature Algorithm: sha256WithRSAEncryption
95:87:02:8b:88:52:86:9a:19:22:8f:56:c2:91:38:58:56:3b:
eb:7d:0a:f7:2c:b3:04:88:91:52:aa:bb:29:f8:a8:50:a4:0e:
9e:01:b3:d1:76:85:ac:83:ea:eb:b0:f7:f8:32:0f:9a:65:8d:
c9:0e:3e:d0:0d:01:54:60:03:22:79:c0:4a:27:86:8e:01:73:
85:90:ec:0f:95:f0:b8:35:ec:84:32:7c:32:5c:65:32:b1:2b:
32:16:cd:78:f0:34:13:c8:27:dd:23:a6:7d:4c:11:8f:e6:55:
99:fd:a8:3b:78:78:3b:f8:a9:36:5d:fb:2f:77:3b:81:20:6c:
12:94:4e:12:ed:e0:06:e4:c7:c3:eb:d7:28:fb:f1:58:0d:9a:
94:33:db:f5:f6:4b:9b:85:83:f1:47:24:fb:5a:dc:d5:4c:65:
53:2e:ae:39:a8:00:5d:67:95:e1:4b:1c:9c:c1:cd:50:6f:7c:
da:dc:59:f1:9c:74:3b:1f:a2:23:35:89:09:58:ef:51:c2:11:
32:bb:5e:0d:2d:e8:e6:2d:30:1d:2d:fe:1d:aa:88:af:09:fe:
b3:21:4b:14:84:a7:fe:af:b6:00:c4:e0:bd:f0:3c:7e:be:cc:
40:14:83:73:0a:0e:53:31:75:34:da:ff:ea:9e:ad:60:48:ab:
2f:f3:ad:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client