
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233392e3139322e302f31382d3138203d3e2034383038.roa
File: 3231392e3233392e3139322e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: AaWKdFWWZPPGV57zzUsnpXa1dwuaNkzI3LRl3XQ6nkE=
Subject key identifier: 98:4A:5B:DE:EA:09:57:11:97:7C:E5:40:88:59:C2:87:CD:10:9D:9E
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 2633CF48D141B9732435B4AC6F2049AB413F45CC
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233392e3139322e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:57:59 +0000
ROA not before: Fri 05 Jun 2026 05:52:59 +0000
ROA not after: Fri 04 Jun 2027 05:57:59 +0000
asID: 4808
IP address blocks: 219.239.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:33:cf:48:d1:41:b9:73:24:35:b4:ac:6f:20:49:ab:41:3f:45:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:52:59 2026 GMT
Not After : Jun 4 05:57:59 2027 GMT
Subject: CN=984A5BDEEA095711977CE5408859C287CD109D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:54:a0:83:27:97:4b:b6:b5:77:6d:6c:b1:d3:
92:b9:94:9b:8d:a4:f0:64:85:60:63:11:dc:98:9c:
af:8c:3b:ea:f8:6c:74:0d:0b:c6:4d:9c:72:71:8d:
50:97:c5:8d:7b:ef:97:49:bb:b9:da:2b:a5:ad:fd:
7a:c1:f5:2e:19:93:d5:5c:09:aa:ff:a0:46:24:85:
be:40:cc:64:13:ef:5a:37:69:6a:78:4a:a0:4c:e7:
91:3f:b1:ee:4d:6a:f4:48:15:b5:98:e5:3a:b3:a7:
39:7f:b9:5c:88:6e:51:be:21:4f:22:b7:e7:1e:43:
9e:16:f6:db:84:1d:9b:09:59:23:ad:84:b2:0e:a3:
74:04:f4:f3:ad:df:81:c2:a9:19:bb:1f:68:05:ab:
16:58:5e:9a:02:47:87:13:1b:af:87:28:a1:8e:c4:
7c:d8:da:ad:d7:56:61:cc:a0:5d:fc:79:56:2c:af:
fa:02:f9:b8:e5:b8:49:11:22:88:13:c2:4a:c8:fe:
20:6c:16:8f:0d:40:e3:7d:1b:41:f5:10:cf:2d:5f:
b2:38:77:da:df:8d:ca:dc:bb:cd:f1:4e:10:0b:d4:
ed:2d:e6:dd:27:49:b5:a7:4d:e0:aa:22:90:44:2a:
09:7c:19:c8:56:cd:32:69:c4:3e:77:b9:ff:8a:b4:
dd:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4A:5B:DE:EA:09:57:11:97:7C:E5:40:88:59:C2:87:CD:10:9D:9E
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231392e3233392e3139322e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.239.192.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:77:40:bc:ae:d8:91:2f:df:a2:94:f6:91:0d:f0:08:d3:15:
43:e7:48:a8:5b:65:51:a8:5c:f2:9b:d4:9b:37:43:08:64:c5:
2b:d9:92:c9:27:15:de:01:5f:33:e9:09:4f:d1:31:18:ad:e8:
33:bf:84:53:7b:fc:86:5e:12:7e:61:6e:46:e2:ca:1c:09:e0:
d7:3a:a7:9c:70:f0:6d:74:a4:ca:d8:78:0f:fb:61:ea:8b:b8:
6d:0c:34:0b:0a:3b:fd:3d:60:73:f1:21:0b:7c:96:2c:7c:08:
c4:6b:c3:22:d9:34:bf:89:b6:52:17:05:2d:66:b3:3a:cd:fd:
d3:28:d8:24:d3:7b:43:b4:a0:98:83:8a:ae:b1:70:7f:a3:64:
e3:17:f1:5f:3b:e3:bc:15:f1:65:a4:45:a5:1f:9e:5f:49:9c:
7a:75:7e:52:94:18:c9:14:b1:88:46:53:96:02:3b:5c:80:3c:
fc:79:a2:25:fc:cc:90:14:42:d2:ca:74:da:33:64:7b:14:30:
d6:ef:8b:52:7d:21:7a:05:af:8c:71:8c:d0:ff:7e:f7:be:b3:
ce:4b:d6:a5:29:66:95:6b:6e:0e:c0:2a:ab:d4:0a:d0:a3:12:
57:bc:db:44:1b:3d:b3:b2:56:35:49:f1:5b:8e:88:95:54:e6:
f4:cd:ad:f5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client