
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3139322e302f31392d3139203d3e2034383038.roa
File: 3231312e3130332e3139322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: BxKkepCJOfaYnZoNdgzP+6kWaGMgG6Rsnt0l5FfEo10=
Subject key identifier: 4F:6D:FC:D4:49:FC:28:58:CD:DC:E5:13:49:EB:97:47:3B:1E:D2:58
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 2CB5964A3C7581454C925E8969474FC7A0C40BB9
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3139322e302f31392d3139203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:35 +0000
ROA not before: Fri 05 Jun 2026 05:53:35 +0000
ROA not after: Fri 04 Jun 2027 05:58:35 +0000
asID: 4808
IP address blocks: 211.103.192.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:b5:96:4a:3c:75:81:45:4c:92:5e:89:69:47:4f:c7:a0:c4:0b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:35 2026 GMT
Not After : Jun 4 05:58:35 2027 GMT
Subject: CN=4F6DFCD449FC2858CDDCE51349EB97473B1ED258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8c:05:9f:99:d4:d5:9e:8d:7d:00:1c:a5:b0:
04:bf:f9:23:8c:a8:e5:5a:cb:99:84:6f:44:1f:96:
d3:3c:a9:7d:b6:cc:ad:6c:48:e9:91:8c:1a:80:1a:
03:1d:6e:4f:b0:15:55:38:a9:cd:a2:6f:f3:4d:15:
64:c9:e3:21:9d:38:42:8d:11:42:0a:bf:31:51:89:
c2:ed:2f:b8:02:6d:26:fe:c3:9d:d3:42:b1:0f:88:
8d:f3:7b:63:18:fe:43:ed:27:f7:e5:90:26:f8:84:
e5:ec:a9:f1:d3:b4:13:4c:24:3a:5b:32:ff:f0:f8:
02:bb:9d:ef:c0:b9:0f:11:26:2c:0c:c6:a5:20:4c:
d6:62:20:21:58:99:fe:7b:23:66:4c:34:7d:7a:68:
4a:21:f1:92:b2:7a:19:fe:97:4f:cb:08:26:93:d9:
3a:a3:e8:e6:dd:27:4d:83:e5:b1:04:7d:11:67:61:
10:bd:b5:55:59:f6:75:16:80:e6:75:eb:2c:45:95:
a7:a3:55:6e:22:b7:bc:0e:ba:69:fa:76:46:42:d5:
cb:e4:62:c2:fd:bf:75:55:71:7d:30:48:9b:f4:81:
34:f6:00:e2:1b:ac:74:4e:7a:e5:f4:36:61:9d:03:
1b:a4:8b:4c:ec:c5:3a:44:24:03:93:a7:86:c5:32:
c0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:6D:FC:D4:49:FC:28:58:CD:DC:E5:13:49:EB:97:47:3B:1E:D2:58
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231312e3130332e3139322e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.103.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:b5:88:5c:f4:f4:58:6d:6b:25:63:b6:7e:b7:8f:24:35:03:
13:f7:b4:ce:11:f6:96:68:6d:46:75:92:2e:65:c5:72:7e:1a:
8c:4d:8f:58:ab:ce:88:06:36:7e:91:c5:94:85:7e:a8:d9:ce:
68:90:31:92:92:7e:9e:c7:b4:61:84:ee:ec:47:92:de:ab:c7:
5c:bd:0b:f2:0a:0d:ab:02:b2:5f:f8:a8:4d:8c:1d:88:92:85:
15:ac:4d:c3:97:41:17:84:20:8d:78:bc:53:0c:80:5d:e5:70:
75:36:2a:49:a0:7a:b0:e1:aa:7d:8e:e2:5b:52:55:32:1e:dd:
1e:18:be:13:aa:4a:65:f3:1c:2f:aa:19:fd:35:4e:f2:2a:bf:
ca:20:e0:48:79:91:43:03:82:d3:80:21:7c:ce:d9:4d:d4:a5:
12:7f:d7:58:b1:eb:45:86:9c:49:1e:c4:01:d5:64:39:5e:89:
05:94:d8:89:3a:bf:65:b9:02:cb:7b:a2:72:33:e9:51:2d:90:
64:e9:6d:85:18:41:19:4d:99:89:33:93:4f:ae:e3:17:c2:a6:
17:ad:20:70:e3:07:8f:c3:b0:f8:8e:eb:30:fe:38:81:f9:f3:
09:5f:41:c4:80:e0:f3:13:23:5c:42:51:f8:86:e9:5f:57:5d:
2d:c6:77:7d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client