
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e302e302f31382d3138203d3e2034383038.roa
File: 36302e3139342e302e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: Ta3r3bVgIWHIEkFREn+NKs5AHiV/PYhsALzb9/bVxPc=
Subject key identifier: E9:83:11:97:A2:A2:F5:DC:80:DA:86:21:FB:64:02:7D:88:64:AC:F9
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 703004193C3E31A8468E85CCA9FAA6190EB53CFA
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e302e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:57:32 +0000
ROA not before: Fri 05 Jun 2026 05:52:32 +0000
ROA not after: Fri 04 Jun 2027 05:57:32 +0000
asID: 4808
IP address blocks: 60.194.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:30:04:19:3c:3e:31:a8:46:8e:85:cc:a9:fa:a6:19:0e:b5:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:52:32 2026 GMT
Not After : Jun 4 05:57:32 2027 GMT
Subject: CN=E9831197A2A2F5DC80DA8621FB64027D8864ACF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:22:c9:07:73:ea:1d:f2:00:f6:2d:9b:6a:7a:
96:88:42:c4:3a:ac:1f:a5:92:d2:8d:65:67:87:87:
ea:d4:0f:8c:52:ed:bf:a9:6a:06:a0:1e:73:47:48:
10:9e:ad:b0:63:56:47:48:3c:0d:2a:dd:24:18:32:
e8:6d:e9:c9:38:5f:34:9a:86:7e:0c:40:be:19:23:
66:84:ca:e8:3f:77:91:88:d9:a7:bb:50:10:10:50:
e3:76:00:b9:e2:66:93:39:ce:c1:a7:09:cc:98:4b:
e0:08:96:13:63:78:68:8a:7a:43:c5:e8:1a:4d:09:
a3:72:9a:b5:60:b0:17:16:e9:f5:1a:d8:18:14:16:
a1:a3:fc:ed:ed:3e:78:77:d6:e5:7e:0a:c5:b9:1e:
ad:e7:82:d4:0c:5a:43:8e:d4:c6:e7:33:a3:10:a1:
45:25:0a:78:66:58:67:86:fb:47:29:31:c3:aa:97:
b9:96:93:e5:28:c8:a3:cb:5b:4f:8f:90:4b:23:dd:
c7:ec:90:92:e6:55:bb:42:f0:cf:c5:c1:85:a8:95:
6c:49:c3:ef:7e:4a:36:78:a9:b8:05:cd:72:4d:80:
32:e7:18:8f:d7:fc:07:ca:49:e0:30:84:e0:c5:1c:
b2:48:a0:04:89:97:47:58:8c:ff:7a:6d:fe:2d:dd:
bb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:83:11:97:A2:A2:F5:DC:80:DA:86:21:FB:64:02:7D:88:64:AC:F9
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e302e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.194.0.0/18
Signature Algorithm: sha256WithRSAEncryption
23:ff:e5:3c:e2:95:e6:79:db:3a:7e:40:02:1c:ed:e2:59:a8:
fb:cb:97:1c:9f:dc:6f:88:1c:49:61:df:31:bb:2d:22:75:f7:
30:bb:62:ec:10:a9:5c:15:78:6a:31:3a:da:c2:44:86:b3:0c:
82:60:72:de:d4:f1:f3:cd:38:72:24:22:7b:66:46:3a:93:70:
f7:7c:79:0c:18:52:32:49:6c:db:95:50:66:53:cf:6c:d4:0a:
4c:59:0b:37:11:b2:69:b5:b5:61:e9:3b:0f:b1:88:6c:f1:f2:
69:3f:a4:6e:88:ee:68:8a:18:a9:e5:84:65:57:4d:c5:04:4b:
5c:3a:2b:c4:1d:19:97:99:3c:8e:53:ed:db:01:fe:2b:e4:c0:
f8:3b:3e:d1:aa:65:60:9a:f0:9e:e3:a1:4c:e1:5b:6c:d5:82:
5b:f8:68:f4:5b:36:22:27:53:86:69:41:81:6a:15:6a:fe:99:
04:4e:0a:30:19:2e:bf:c1:30:bb:6c:29:7a:6a:13:d6:da:dc:
f8:f0:09:e3:b2:bc:3a:2d:7d:55:2a:a6:0c:6d:03:6a:1b:d2:
03:ae:eb:ac:33:9f:5e:6e:03:02:e1:37:be:a3:86:7c:e4:66:
ff:e0:ca:e7:ff:1d:2d:8a:53:d3:dd:19:53:5e:1d:bd:e4:1d:
2d:6c:16:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:48 2026 by rpki-client