
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130312e302e302f31382d3139203d3e2034383038.roa
File: 3231312e3130312e302e302f31382d3139203d3e2034383038.roa (raw, json)
Hash identifier: 9JRSCh918N4e1NyUYmYVJ7x7+e1v0KGw3pla5DZs2AM=
Subject key identifier: 77:A3:F1:B9:AE:B0:83:6E:4E:50:C8:82:FE:C9:DF:6F:CA:BB:73:BE
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5AB88E045070ED4BB7A527D6E928F867CE0B7C12
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130312e302e302f31382d3139203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:00 +0000
ROA not before: Fri 05 Jun 2026 05:53:00 +0000
ROA not after: Fri 04 Jun 2027 05:58:00 +0000
asID: 4808
IP address blocks: 211.101.0.0/18 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b8:8e:04:50:70:ed:4b:b7:a5:27:d6:e9:28:f8:67:ce:0b:7c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:00 2026 GMT
Not After : Jun 4 05:58:00 2027 GMT
Subject: CN=77A3F1B9AEB0836E4E50C882FEC9DF6FCABB73BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:dc:a9:3b:52:a2:97:03:61:3c:03:b3:f2:
7b:59:2d:2e:4e:7a:25:ce:e6:f1:2e:06:dc:cc:70:
4e:77:eb:14:87:80:12:2e:66:44:99:6c:43:89:55:
ad:76:e3:7c:03:6c:dd:3d:07:00:bc:f0:f1:8d:ec:
7e:d1:9a:1b:d7:c7:1d:6f:c3:ce:6d:c6:b0:9c:7b:
51:ec:26:10:35:b5:ed:87:e3:10:12:05:4b:5c:a0:
13:79:bb:76:45:6b:55:84:3c:e6:3c:f3:88:31:f7:
2d:87:30:3a:7c:28:48:f3:09:6e:9c:2a:ff:83:5f:
80:ec:85:1f:b1:75:e3:a6:4b:98:5e:66:fc:73:b6:
5e:9f:61:3d:7c:06:8d:f4:ab:ae:80:e5:2d:1e:de:
20:83:06:00:e1:0e:a9:c9:e4:15:87:98:e4:4d:3a:
42:60:86:bb:a0:4d:d3:bb:a5:f2:47:fc:10:ab:bb:
4b:15:ce:a9:e9:40:9a:08:16:4d:fb:23:26:83:c1:
8a:97:fa:07:09:3d:4a:f5:c1:5f:68:de:d9:9d:5d:
e7:b1:7d:28:0a:17:8e:30:bd:c5:d3:6a:e8:6c:b0:
52:7d:51:a5:ce:03:29:48:38:ab:af:77:07:d4:46:
7e:51:c5:8d:56:b9:9d:7c:9e:bc:97:73:3d:b0:3b:
2e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:A3:F1:B9:AE:B0:83:6E:4E:50:C8:82:FE:C9:DF:6F:CA:BB:73:BE
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130312e302e302f31382d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.101.0.0/18
Signature Algorithm: sha256WithRSAEncryption
75:00:87:79:b1:3c:c2:32:5b:da:e3:6e:61:e6:ee:e4:89:23:
68:63:4c:ea:1e:f4:ec:cb:fd:48:9e:b9:59:27:c1:ff:44:40:
6c:19:39:bb:b5:b3:48:b6:ea:0c:48:68:e1:57:93:ff:0e:c3:
36:f7:b3:7d:f9:88:50:04:7a:aa:7f:80:10:f1:6e:4f:3e:da:
76:fc:1a:bf:e4:45:05:73:fb:a2:9d:04:6e:19:51:e5:9f:f0:
ac:ad:65:7c:aa:79:da:10:5a:9b:bc:5b:8d:9f:b2:6c:b9:ec:
48:69:28:c0:ca:bd:57:5f:11:bf:2d:b5:19:84:61:0b:c1:c2:
f1:da:a6:36:15:cd:ee:fa:08:6e:10:d7:ce:d1:30:bd:45:f8:
ad:4e:f6:bf:28:d8:ff:18:49:33:44:2c:dc:53:01:d6:ce:a3:
e8:09:66:eb:59:a3:a1:ff:0b:46:f2:c0:19:4b:ea:b3:33:9e:
f2:b4:fc:98:c8:bd:fb:e6:9a:23:f4:59:64:ba:33:d1:d7:84:
be:e6:a9:1d:e8:94:77:02:26:30:3c:39:08:20:9d:98:9d:b4:
a9:ce:ff:01:33:4f:61:57:e4:99:fe:5e:f5:3e:1f:33:96:02:
38:ee:f9:ac:60:0e:0d:f3:2f:b3:16:a5:b0:3b:ed:54:d1:fb:
7c:17:cc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:12 2026 by rpki-client