
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233382e36342e302f31382d3138203d3e2034383038.roa
File: 3231392e3233382e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: uZtewJBM3NbGB6/riwGEPWty3KidHDRizQ5RnmaadoI=
Subject key identifier: 9F:F3:F6:60:4C:E4:B1:EF:1F:62:56:60:B1:56:48:CE:EF:C7:2E:FE
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5F437803D1E4AA672AC1BCEA06B0DAA74283728F
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233382e36342e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:21 +0000
ROA not before: Fri 05 Jun 2026 05:53:21 +0000
ROA not after: Fri 04 Jun 2027 05:58:21 +0000
asID: 4808
IP address blocks: 219.238.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:43:78:03:d1:e4:aa:67:2a:c1:bc:ea:06:b0:da:a7:42:83:72:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:21 2026 GMT
Not After : Jun 4 05:58:21 2027 GMT
Subject: CN=9FF3F6604CE4B1EF1F625660B15648CEEFC72EFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:73:4f:5b:8d:e3:3b:d1:6e:1c:1e:ee:28:43:
2f:10:9f:8a:92:dd:a9:22:cc:76:72:53:2c:cd:4b:
d6:04:b2:91:b1:e1:80:16:ad:1c:57:74:d3:35:d9:
4c:4d:0b:09:7a:04:70:73:33:57:6d:1b:13:47:e3:
bf:7b:d2:1f:74:43:32:51:bd:fb:30:0d:d5:77:66:
3d:a7:db:1d:70:0b:8c:11:3f:71:e8:30:65:06:b9:
af:d3:40:95:88:f4:61:99:e7:b6:fb:85:33:62:53:
6b:bd:d3:20:56:11:b2:17:c8:1c:eb:83:68:d1:5b:
5f:f0:b9:9a:b2:c2:d4:ba:8a:1b:a2:9a:42:ca:58:
ac:27:e1:c7:db:c4:ed:d8:3b:5d:3e:6d:4f:de:b3:
11:eb:9a:9c:44:97:29:60:9f:9e:b3:2e:c6:08:cd:
7d:3f:8e:e5:d9:d9:13:f8:c4:b2:6c:4a:35:42:46:
df:b2:8d:81:fd:8c:db:75:b9:22:5c:4f:05:1c:ed:
11:19:d2:29:2b:e5:d4:78:84:fa:07:ec:e9:bb:df:
f7:f9:27:02:15:cb:5e:b3:09:e8:5e:5d:a2:eb:c2:
61:7b:5b:2c:92:d8:a9:b4:a9:42:6a:c6:0f:25:ff:
76:fe:b6:09:c8:79:0b:3a:f4:71:f1:70:7a:50:f8:
14:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F3:F6:60:4C:E4:B1:EF:1F:62:56:60:B1:56:48:CE:EF:C7:2E:FE
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233382e36342e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.238.64.0/18
Signature Algorithm: sha256WithRSAEncryption
57:7c:f2:8d:bc:24:a7:b9:31:d9:11:e4:dd:4f:c0:9c:f2:5a:
0c:17:f4:73:76:5c:90:5a:48:59:22:79:d1:0e:db:fd:76:9a:
21:8a:13:74:34:c1:b4:4b:e0:cb:df:c9:e4:64:37:16:9a:11:
ec:30:b0:e9:e1:73:1f:56:5f:4f:aa:2f:50:f2:f5:d3:da:17:
ce:34:28:55:0c:e1:70:90:0d:ca:94:e5:3b:48:f3:2a:c9:92:
c7:16:b5:c8:47:18:a2:c1:58:86:1d:a1:1c:ae:51:49:4b:58:
64:92:4d:8e:fc:a4:b9:84:7c:d7:28:40:46:3d:12:69:75:10:
5c:90:00:ee:3b:61:8d:d0:06:30:20:09:fe:33:f6:7e:b4:c3:
a7:40:d9:46:78:69:45:a9:44:60:c3:f6:bc:f2:29:57:30:82:
d5:bd:06:dc:7b:69:11:f3:1e:ac:4e:32:ac:6c:76:cb:c5:8b:
45:a3:68:a4:82:57:0c:fb:1d:4f:06:a1:4c:64:3c:e3:ff:f4:
ae:3f:e8:d6:4f:1f:4a:0d:c8:93:a5:60:66:c7:69:59:ac:61:
bd:de:47:19:46:03:16:6d:7b:e2:9f:c2:f8:44:3e:83:60:0e:
0c:4d:a2:ac:b7:72:82:ff:63:46:a4:a2:2d:2b:77:88:b8:8b:
0d:39:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:11 2026 by rpki-client