
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa
File: 3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: nC5H7/3cnvSLqEGptGH6553AECcDugvbRJkQZjQubfo=
Subject key identifier: 2C:E8:1B:67:7A:0E:6D:EE:DB:61:D6:DF:99:A4:2C:41:D5:32:A4:3B
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 0B7933B4871783E702843D596B6B4C1F3E0B4BC3
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 09:00:24 +0000
ROA not before: Thu 04 Jun 2026 08:55:24 +0000
ROA not after: Thu 03 Jun 2027 09:00:24 +0000
asID: 4808
IP address blocks: 219.234.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:79:33:b4:87:17:83:e7:02:84:3d:59:6b:6b:4c:1f:3e:0b:4b:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 4 08:55:24 2026 GMT
Not After : Jun 3 09:00:24 2027 GMT
Subject: CN=2CE81B677A0E6DEEDB61D6DF99A42C41D532A43B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5a:26:e8:68:fc:33:e6:e2:56:f0:a3:d1:9d:
f1:96:91:6b:d5:a2:de:ee:73:22:89:2d:71:97:4e:
38:40:f9:50:28:7f:26:ae:90:d9:a8:91:c4:a5:bd:
4e:a7:58:00:be:e3:07:29:40:7e:60:ba:8f:6b:8b:
9b:b1:71:e7:f1:c9:a2:b2:ab:e5:4f:35:04:3c:54:
d6:4f:60:23:de:52:57:b2:04:6a:a5:2a:48:6b:5a:
37:73:cd:40:3f:31:7f:56:03:12:e2:4b:5f:4c:79:
2a:7c:a7:f3:e7:f4:18:dc:40:37:80:e6:ee:fb:ec:
ec:8f:12:a4:b4:d0:8c:b8:23:a4:9d:ae:fb:b0:2e:
94:75:e0:57:72:eb:60:02:a4:3e:de:e0:40:ac:5c:
bd:33:60:2d:04:c0:a3:20:dc:8d:5a:f4:78:34:76:
c9:fa:eb:e1:47:58:1d:de:56:cb:a7:25:9d:c2:3f:
bd:dd:2a:6a:88:6f:c2:2d:4b:22:98:a7:37:c9:f5:
84:b8:6b:0b:35:aa:4c:60:5c:b6:12:e5:c5:74:4b:
17:b2:7f:9f:5d:03:96:7e:0d:d0:57:12:d0:f2:0d:
a8:83:af:11:98:a2:89:5b:bc:6b:e2:bc:f9:45:07:
82:9a:52:9e:6f:c5:2f:d4:20:63:39:82:3c:b2:72:
99:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:1B:67:7A:0E:6D:EE:DB:61:D6:DF:99:A4:2C:41:D5:32:A4:3B
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233342e3132382e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.234.128.0/18
Signature Algorithm: sha256WithRSAEncryption
1c:d0:ce:7c:5e:c4:a0:49:16:1f:56:72:0e:7d:e7:69:12:15:
20:88:04:c8:71:8b:a5:bb:ca:e6:37:78:6f:8c:0c:e5:3f:1d:
3e:0d:ec:b3:8c:ab:1a:58:0a:ab:49:27:e6:ef:f0:f2:37:44:
c1:17:6a:d6:df:07:62:c4:e4:76:db:12:4c:47:fe:da:e8:5e:
a0:9f:80:d3:cf:02:3c:b9:eb:aa:d2:0f:f9:6c:8c:e2:5a:e2:
a2:92:c0:60:5e:8d:b3:38:9d:a5:c4:73:15:70:64:c2:c2:d4:
55:3c:ce:12:5c:23:40:50:78:d4:e0:57:da:ed:7a:10:7b:a9:
e9:1c:ca:aa:ba:ae:49:d9:76:fa:bb:13:5a:9c:87:17:54:8f:
d9:d7:3d:0b:c8:00:2b:b4:fe:57:9e:fd:ae:0a:b1:29:f4:90:
8b:53:27:36:6d:fe:03:66:c1:0b:ed:89:d9:9f:81:a9:06:9d:
5b:c3:be:c5:dc:71:fd:e3:ca:8d:e7:a4:c4:2f:b3:9e:1c:7a:
29:9a:32:88:cf:ba:e4:50:4e:1d:74:34:9d:ef:9a:c6:81:ec:
5e:8c:1c:ac:07:4c:90:55:eb:01:f8:0d:37:d7:b4:99:ab:21:
d6:e3:e9:29:94:73:5b:a0:19:20:d0:37:17:dc:ef:3a:ed:2b:
c9:bf:54:83
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client