
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e36342e302f31382d3138203d3e2034383038.roa
File: 36302e3139352e36342e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: thvFRfExYNXNfkCA1ChZpF0ebyhdqsN9G13iZBBf4sE=
Subject key identifier: E2:3B:4C:13:D9:47:94:69:00:06:F6:16:4D:4A:F8:24:28:FC:DB:25
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 5D122D49711EC54AACCC257CDB71D884C07C7E5D
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e36342e302f31382d3138203d3e2034383038.roa
Signing time: Fri 05 Jun 2026 05:58:35 +0000
ROA not before: Fri 05 Jun 2026 05:53:35 +0000
ROA not after: Fri 04 Jun 2027 05:58:35 +0000
asID: 4808
IP address blocks: 60.195.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:12:2d:49:71:1e:c5:4a:ac:cc:25:7c:db:71:d8:84:c0:7c:7e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: Jun 5 05:53:35 2026 GMT
Not After : Jun 4 05:58:35 2027 GMT
Subject: CN=E23B4C13D94794690006F6164D4AF82428FCDB25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7e:51:00:e9:5e:f2:e8:08:d0:94:4a:93:75:
0c:c2:dd:c8:36:a8:2b:ef:cd:d8:9f:83:77:64:63:
80:a8:fe:6c:29:1e:e4:b6:47:f9:7b:b3:b8:df:e5:
95:1d:41:46:76:be:a9:ac:8f:81:84:ee:b3:80:36:
fd:1d:65:a6:db:dd:78:6a:7e:56:45:c9:4c:72:9a:
7f:15:8c:ff:72:b4:6a:f1:f1:9c:97:6a:9d:63:12:
dd:64:9f:5f:c1:fc:59:58:f8:5f:d0:79:33:70:3f:
2a:32:0c:a0:26:c1:69:a1:47:91:a0:3c:a5:af:69:
73:e2:04:f0:53:c7:b4:c1:ff:ad:2b:57:15:3f:86:
78:40:23:b3:ee:18:7e:06:1d:a6:e3:8b:c1:cf:26:
7a:9f:59:29:20:4f:6b:da:36:4e:a2:80:89:7a:de:
cf:a1:0b:86:1a:68:4f:13:3b:a6:75:dc:58:78:07:
08:d4:5e:54:16:0b:d5:45:5d:72:d8:52:b4:6c:9e:
f8:f2:87:ee:ac:bc:ea:c7:68:3a:20:a6:ae:8b:cd:
36:55:91:9d:ba:4b:2e:e9:a1:41:8b:62:75:e3:43:
d1:3b:3e:85:9a:f3:b5:3b:d4:26:5a:f0:ba:1e:e8:
94:4e:71:29:06:5c:fa:c8:f9:64:af:10:6e:b3:66:
a8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3B:4C:13:D9:47:94:69:00:06:F6:16:4D:4A:F8:24:28:FC:DB:25
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139352e36342e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.195.64.0/18
Signature Algorithm: sha256WithRSAEncryption
16:90:51:92:ce:29:46:6a:59:6d:5f:9e:39:da:96:66:5d:1f:
1f:6c:da:4a:23:55:52:7e:f2:60:73:40:23:c4:43:6b:2f:7f:
60:7a:2b:19:91:e6:fa:d1:a1:d2:d6:24:30:8c:35:4c:51:7b:
00:ff:b3:11:09:87:09:7d:29:91:0c:60:e6:71:5b:69:08:b3:
90:47:31:43:7c:11:5a:3a:e0:47:04:ee:32:f1:14:53:a9:d9:
a2:20:18:53:0c:5c:a6:b3:47:30:00:58:8e:15:09:32:fb:16:
9e:d3:bc:c7:ef:35:19:34:9c:f0:73:22:83:a0:8e:d9:da:96:
0b:58:e9:7d:e3:a9:36:c2:8c:fe:50:2a:19:bc:c7:b7:22:98:
b5:ba:b7:1b:1f:14:c2:a9:f9:36:d2:e0:8e:cc:7e:61:c8:29:
04:06:eb:e0:00:6a:29:35:1b:50:98:03:fb:f8:34:d3:38:cf:
65:7e:4e:8e:72:e7:b5:bc:a3:fd:a2:11:3d:43:19:91:a6:69:
38:73:d2:06:d3:41:0d:66:c6:b9:01:22:e8:c6:9c:6e:eb:bd:
a3:60:d3:4d:4a:12:43:f7:8e:52:84:4b:e1:1b:48:c8:91:d4:
b8:3e:c3:92:49:52:73:4b:e3:52:04:59:ea:cd:48:df:84:37:
89:c8:8d:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:14 2026 by rpki-client