
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa
File: 3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: 2tdu5c1uUbadXJyUpnqrgfKWk2m1g6RSna+eoQnIR4E=
Subject key identifier: 40:28:19:A3:D5:5C:57:06:73:DF:A9:8B:F1:E3:EF:C8:37:B9:66:1C
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 168DD5C13D52FF76774F79018D935425E5980040
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa
Signing time: Tue 19 May 2026 03:01:17 +0000
ROA not before: Tue 19 May 2026 02:56:17 +0000
ROA not after: Tue 18 May 2027 03:01:17 +0000
asID: 4808
IP address blocks: 203.207.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:8d:d5:c1:3d:52:ff:76:77:4f:79:01:8d:93:54:25:e5:98:00:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 19 02:56:17 2026 GMT
Not After : May 18 03:01:17 2027 GMT
Subject: CN=402819A3D55C570673DFA98BF1E3EFC837B9661C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a1:0d:a4:2b:b0:5a:21:6d:a5:e4:68:17:e7:
8e:05:82:09:35:33:62:a7:a6:2a:a8:e5:f2:b0:9b:
49:f9:a0:05:5b:d0:00:5e:b5:a6:73:68:3a:37:b6:
5c:95:43:aa:2a:cf:da:20:b4:37:69:9a:22:22:e5:
42:4e:5e:e8:71:bb:18:d5:d9:0a:64:9c:e5:85:36:
ef:3e:ad:cb:65:f8:92:ba:39:ac:bc:c7:34:60:9f:
89:e1:90:2f:e8:a4:80:ce:2b:6e:89:5e:a6:4a:46:
d5:e8:0a:a3:81:77:a5:dd:41:6d:af:46:d6:9f:e0:
77:43:73:35:9a:2a:c1:9c:fa:86:70:95:36:ea:a9:
4a:9d:fc:c7:bc:6b:9c:db:73:fd:18:ac:93:d7:99:
5f:f4:99:f0:93:b6:eb:3e:c0:c9:b5:4a:ce:a7:ee:
03:d1:37:07:42:2e:cf:9a:74:75:c6:12:cc:c5:1e:
f1:22:c1:3d:f2:6f:69:fa:e8:9f:fe:59:6f:91:dc:
df:97:64:5f:5f:6e:0c:c0:0e:bb:ee:77:4b:d2:d8:
f9:b3:2e:a6:37:7a:f4:3d:c2:61:f3:d8:c6:5f:2c:
4d:7f:5a:b9:43:d7:da:27:39:e5:fd:91:54:ee:21:
06:b0:87:23:06:6a:5d:9a:50:d2:e0:86:5b:3b:5f:
60:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:19:A3:D5:5C:57:06:73:DF:A9:8B:F1:E3:EF:C8:37:B9:66:1C
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3230332e3230372e3139322e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.207.192.0/21
Signature Algorithm: sha256WithRSAEncryption
41:7f:14:75:fe:f1:85:76:b3:1b:b3:cb:08:49:8d:ae:35:13:
9c:8a:98:a2:61:fe:99:87:24:db:59:02:7b:f5:73:39:03:07:
08:48:49:3f:21:62:70:f4:08:0a:c2:41:23:1a:52:fd:36:8b:
65:b8:f1:a3:fb:d0:6b:c6:5f:c1:25:05:a1:30:15:f8:5d:f0:
8e:a1:17:4c:e4:85:f1:db:80:2c:ba:db:3c:ed:7b:06:5f:52:
dd:f7:fd:2d:69:c6:ad:35:2d:ec:d2:98:49:ed:6b:9e:6d:c0:
cc:52:e8:b8:fd:64:b2:24:e8:e4:dd:34:5c:d5:e1:94:a4:d1:
2e:42:4a:8f:1b:55:a8:5b:99:5f:33:b0:23:33:16:69:da:db:
27:79:64:6b:40:f9:4a:be:e2:4e:cd:d8:da:6f:0a:42:47:aa:
d9:1c:17:5a:c6:a6:c2:d1:3c:ab:a7:bd:f8:e4:da:19:77:be:
44:38:36:a0:fe:90:55:ea:f2:f2:b8:b9:41:3d:64:0f:83:9b:
3a:87:c4:da:ef:62:2e:87:48:c8:60:57:6d:f6:e5:1b:2b:e8:
c8:90:30:51:89:67:9d:02:cf:a8:f8:ef:56:90:d0:b4:d1:e1:
35:20:4a:22:1c:0a:30:7f:7a:ad:5b:ec:7b:77:f7:94:ea:46:
1e:36:33:59
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:13 2026 by rpki-client