
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e3132382e302f31382d3138203d3e2034383038.roa
File: 36302e3139352e3132382e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: nH9NZ0SWtczDasb6UCy0cpYD7o0efQ4/IiTx84Dpawc=
Subject key identifier: D4:CC:2B:C2:3B:9E:D1:2A:80:E4:18:2B:EC:25:4F:85:F0:1B:CA:7A
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5F2E01F23C37131A035A9860DDCD590935AFBCA7
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e3132382e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:34 +0000
ROA not before: Fri 05 Jun 2026 05:53:34 +0000
ROA not after: Fri 04 Jun 2027 05:58:34 +0000
asID: 4808
IP address blocks: 60.195.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:2e:01:f2:3c:37:13:1a:03:5a:98:60:dd:cd:59:09:35:af:bc:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:34 2026 GMT
Not After : Jun 4 05:58:34 2027 GMT
Subject: CN=D4CC2BC23B9ED12A80E4182BEC254F85F01BCA7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ab:03:8c:ab:81:07:5f:d9:27:85:a3:ef:c9:
c6:2e:c1:fa:77:2f:f2:d0:68:9e:55:24:62:5d:4c:
23:f0:fd:0a:45:69:66:e4:c3:0f:9f:ce:97:b6:c4:
cc:36:e3:31:32:72:e7:a3:da:be:dd:45:a3:b9:e6:
96:4d:a6:55:53:0f:0b:4a:b8:2e:dc:e0:6f:dd:7c:
75:f2:51:3b:36:a1:af:f7:67:9f:63:95:ff:52:ed:
20:df:26:db:7d:3e:20:87:9b:7b:71:f0:66:5e:22:
05:51:51:7a:b5:22:13:5a:f8:d0:e2:8d:42:7c:b5:
d4:53:4b:d7:00:e6:a1:89:1a:8d:b0:5e:2d:60:dc:
42:e4:ab:f3:d8:a4:2f:ae:4c:f7:df:ef:71:0a:ff:
af:b9:67:99:39:3d:94:68:cb:d6:71:8e:73:c9:95:
9a:55:46:f2:24:59:0e:01:21:da:88:67:13:35:44:
c8:a6:90:d8:db:3b:60:98:38:fd:97:9b:ca:8f:92:
cb:6f:84:ab:72:ce:f0:cb:d7:00:07:e4:a5:14:71:
10:9b:59:0d:58:d2:e4:ee:40:c7:33:cc:c6:62:b4:
9c:a1:5f:68:ea:fc:20:a4:48:ac:a5:4f:85:ef:2f:
ca:08:8f:05:2f:80:cd:67:06:c4:77:6f:fd:57:e7:
a7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:CC:2B:C2:3B:9E:D1:2A:80:E4:18:2B:EC:25:4F:85:F0:1B:CA:7A
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e3132382e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.195.128.0/18
Signature Algorithm: sha256WithRSAEncryption
27:fd:9b:b0:56:53:70:e2:78:c3:e0:e1:8a:cb:31:1b:3e:b0:
26:bf:0b:b3:ab:f1:f6:0d:d0:f0:dc:d3:4b:a6:e0:42:05:09:
13:5e:78:cc:c5:fa:0a:02:32:63:f7:1a:63:c4:50:87:ab:17:
e6:74:a7:48:fa:6c:a5:2a:29:c9:b7:09:e3:60:bb:df:b0:31:
ed:9d:58:ee:66:5c:f5:aa:e2:35:4e:7e:77:e9:c2:42:f7:6a:
7c:7b:59:5a:3f:dc:86:7e:a3:17:90:64:d1:ed:49:e6:7b:46:
5e:07:3f:c5:fc:ba:a0:51:2d:4a:76:48:9b:8f:99:bc:b5:f9:
82:af:d7:7a:8e:c4:48:e3:30:fc:ee:97:5a:ef:77:bb:3f:fe:
a9:3b:c8:dc:38:e1:28:5b:4c:d6:f9:59:65:74:46:83:3b:5f:
9b:ea:ad:c3:b0:be:08:41:bd:1e:6b:52:d7:10:60:b7:00:df:
e8:98:c8:e8:43:c6:9a:21:2b:60:f3:c8:57:54:d5:29:84:fa:
d5:a1:2c:4a:cf:c5:18:35:ce:79:a2:02:b9:c8:0f:65:25:83:
10:03:c9:c5:f0:1e:c3:99:08:f2:51:99:9d:80:83:7e:c3:91:
f9:1d:df:5c:8e:6f:43:6b:26:02:91:f0:64:db:70:36:1c:bf:
a8:64:eb:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:07 2026 by rpki-client