
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e302e302f31382d3138203d3e2034383038.roa
File: 36302e3139352e302e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: muW4ECt2ebKC8U/8ENs+OU8frp1hM6eau7YOdgzq15Y=
Subject key identifier: AA:8E:23:6C:51:D6:28:52:F0:A7:4E:4A:43:D6:5E:13:1D:2A:50:FA
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 56EFF1EB07822FA5D243DD4DCB3AD0A8F14206DD
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e302e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:34 +0000
ROA not before: Fri 05 Jun 2026 05:53:34 +0000
ROA not after: Fri 04 Jun 2027 05:58:34 +0000
asID: 4808
IP address blocks: 60.195.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ef:f1:eb:07:82:2f:a5:d2:43:dd:4d:cb:3a:d0:a8:f1:42:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:34 2026 GMT
Not After : Jun 4 05:58:34 2027 GMT
Subject: CN=AA8E236C51D62852F0A74E4A43D65E131D2A50FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:2d:42:c0:cd:e0:9c:ea:8b:42:a7:56:0e:5a:
35:98:5a:6b:4e:bc:c7:3f:8c:c3:19:14:c4:ce:14:
83:f9:92:f7:f0:96:4d:5f:bd:88:4e:f9:07:8e:d8:
38:50:c0:4d:01:5b:4e:3a:ec:e8:89:d6:ac:bf:f4:
84:05:a3:4e:40:a3:2a:5f:6d:44:db:24:b6:70:0d:
13:79:a6:58:4f:a6:b8:48:28:98:2a:00:7b:f1:aa:
ed:21:2f:78:3f:99:b8:62:1c:61:17:90:cf:d9:a2:
2f:16:36:5b:49:c2:64:0c:2c:28:48:21:77:88:97:
27:0d:f4:8e:6b:82:8a:d9:fc:19:34:55:73:8e:9a:
3a:ca:b8:b5:bf:6f:2c:33:fb:4f:64:e6:19:07:c2:
b8:b0:ee:dd:2d:4a:ff:ad:b5:03:8a:d1:19:a8:60:
63:1b:c4:48:b7:dc:44:48:9b:20:09:d4:bf:15:57:
47:a7:d9:20:82:0b:7b:db:4d:f3:0f:74:99:3f:20:
11:14:2b:f2:90:41:82:6a:6c:1d:d3:89:0e:1d:b4:
cc:e2:68:85:68:ad:f4:97:77:34:c7:cd:4c:f0:42:
06:6a:70:70:78:7c:c1:84:ae:58:1f:de:e8:c7:05:
66:1a:2f:f6:a9:e3:71:10:33:69:03:1a:fb:2e:28:
40:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8E:23:6C:51:D6:28:52:F0:A7:4E:4A:43:D6:5E:13:1D:2A:50:FA
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e302e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.195.0.0/18
Signature Algorithm: sha256WithRSAEncryption
00:f9:9a:74:a5:24:eb:26:60:e6:0b:7e:bd:b6:03:69:4e:ec:
1d:04:fe:c9:07:e5:21:e2:39:57:d8:f6:70:91:a8:cf:02:60:
ae:a6:a3:fe:92:93:6a:0c:d9:bf:70:5a:2e:89:da:13:29:25:
c3:08:c5:b4:5c:65:8f:11:1d:14:f0:87:f4:a2:57:97:10:4b:
45:42:5c:21:4a:f4:5f:9a:da:3a:61:05:0e:d0:c9:a7:df:f0:
03:ae:47:2a:2d:d0:d3:ca:0b:4c:73:9a:38:49:f5:f5:f8:f3:
e4:a7:0a:09:99:cb:51:60:e8:73:09:13:d7:d6:c2:18:15:3d:
84:e1:40:26:4c:9a:1c:2f:67:7d:54:80:95:ae:a8:f1:72:70:
2c:aa:41:c4:ed:f6:5e:83:bd:08:ca:d3:0c:a4:1f:78:dc:81:
df:87:80:82:e8:e9:a3:49:46:d6:26:09:b2:26:d5:27:96:00:
b9:62:22:e3:9c:94:09:03:68:2b:17:2f:ec:b9:3c:f9:02:8a:
63:04:60:38:52:cd:aa:86:e2:c1:5c:40:ba:89:0a:d6:ff:86:
94:50:dc:05:ba:c4:f6:5c:cf:4a:e4:bc:f2:27:83:21:a6:4b:
d6:45:10:0d:2d:78:5c:1c:b8:e3:43:5f:e2:d3:60:18:40:69:
9b:55:28:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:48 2026 by rpki-client