
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e3139322e302f31382d3138203d3e2034383038.roa
File: 3231382e3234392e3139322e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: i1slJURPoaCPr4n2iYh1lgg67oTJ3wTxSBCgXXeGFlU=
Subject key identifier: 8F:B6:D4:47:17:1C:3B:F4:6F:C3:41:2C:6F:96:D7:C9:06:89:AE:31
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 2BCFA811A3AE882E9CBF862BE1E696AE53EC5E5F
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e3139322e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:57:59 +0000
ROA not before: Fri 05 Jun 2026 05:52:59 +0000
ROA not after: Fri 04 Jun 2027 05:57:59 +0000
asID: 4808
IP address blocks: 218.249.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:cf:a8:11:a3:ae:88:2e:9c:bf:86:2b:e1:e6:96:ae:53:ec:5e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:52:59 2026 GMT
Not After : Jun 4 05:57:59 2027 GMT
Subject: CN=8FB6D447171C3BF46FC3412C6F96D7C90689AE31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c0:c6:9f:94:60:3f:3b:7c:df:cb:a1:0e:e9:
c0:d8:b0:e9:87:6d:bb:e1:71:ea:52:5a:1b:91:07:
68:de:55:93:cd:7f:93:af:bd:7c:88:07:4f:63:79:
62:ec:32:8f:9f:33:4e:be:17:8e:30:89:e5:18:13:
9f:36:ad:3d:19:77:6e:a8:22:26:6b:26:f4:e1:15:
cb:db:43:f5:88:3c:d4:26:59:6e:19:51:77:96:90:
82:c0:b0:a6:e4:ca:26:52:f2:c6:37:9c:92:ba:cc:
f9:af:66:fc:e2:cc:3d:01:3e:0c:39:eb:3e:87:0b:
49:97:43:ab:39:c0:9f:bb:3a:12:f9:ba:ff:e0:d5:
66:ab:26:a7:4d:fe:3f:e8:8d:20:d2:aa:03:88:d6:
c2:a5:7d:40:e7:bb:be:3b:22:26:8d:d4:3f:4c:31:
1a:eb:06:81:ac:19:dc:94:85:b5:e2:73:cf:35:1c:
2d:59:1b:81:bb:ec:09:fb:1b:6d:40:3e:27:e9:e4:
5e:bd:7b:b7:ad:a3:0c:3e:3f:ae:3e:10:9e:3d:a1:
6a:79:06:6f:9f:df:b9:68:3c:7d:07:ce:3e:d6:14:
c1:35:b9:7a:1d:8a:e2:6b:51:6c:d2:8e:6c:43:c5:
21:91:95:de:72:81:5a:df:a4:a1:04:b7:c6:69:b5:
05:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B6:D4:47:17:1C:3B:F4:6F:C3:41:2C:6F:96:D7:C9:06:89:AE:31
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234392e3139322e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.249.192.0/18
Signature Algorithm: sha256WithRSAEncryption
65:10:e3:7c:72:da:90:5e:04:5b:eb:fa:51:c8:87:bd:97:53:
f7:84:2c:e4:d6:a2:54:6f:80:e6:d8:ec:5f:93:e8:84:07:17:
6f:a6:be:d2:50:3f:ac:b0:c9:1a:c8:24:2f:8b:7e:08:52:92:
1c:45:45:36:ce:ef:4a:d9:24:b7:08:0a:4d:76:49:f0:41:4f:
12:b3:ab:76:da:54:97:a9:87:ba:52:e0:ec:55:9e:28:48:d3:
5e:0c:b8:64:92:16:a4:cf:da:d6:41:6f:b2:91:5c:5a:f5:78:
fd:c8:25:2c:32:f3:d1:55:66:84:f1:2a:c8:d3:df:6b:0c:57:
8e:c9:5c:d2:5e:2d:c8:6f:c1:ac:71:31:91:a3:60:59:6b:c3:
53:c1:af:61:54:76:b5:79:df:46:6b:ed:4b:6f:fc:7f:29:01:
41:f1:10:ec:87:42:11:17:fe:e0:ee:1c:6f:de:e1:5c:92:bc:
08:93:49:ad:05:87:f1:98:1d:57:4f:9e:ab:91:f3:fc:d3:77:
86:3a:11:05:cd:c5:9d:b4:4e:1a:ca:e9:bf:26:57:a7:f9:ac:
58:28:ab:45:37:5f:9a:00:a7:d3:67:47:62:41:36:68:95:f4:
c1:59:81:0e:41:f6:5e:58:46:86:71:6c:00:a6:a5:40:8c:91:
5e:92:d9:f6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:32:09 2026 by rpki-client