
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3135302e3132392e3139342e302f32332d3233203d3e203536323832.roa
File: 3135302e3132392e3139342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: sGOfaLhR17F8HZSdA/PMdCng3VufOgHYE8qAML1Mppo=
Subject key identifier: 0E:FF:66:EC:AE:90:65:EC:0D:D8:9D:80:D6:BF:78:D1:45:1E:C8:16
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 54191183F86527BB34ACC022E5DF725A7FED9659
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3135302e3132392e3139342e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:37:42 +0000
ROA not before: Tue 09 Jun 2026 06:32:42 +0000
ROA not after: Tue 08 Jun 2027 06:37:42 +0000
asID: 56282
IP address blocks: 150.129.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:19:11:83:f8:65:27:bb:34:ac:c0:22:e5:df:72:5a:7f:ed:96:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:32:42 2026 GMT
Not After : Jun 8 06:37:42 2027 GMT
Subject: CN=0EFF66ECAE9065EC0DD89D80D6BF78D1451EC816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ee:23:61:1b:4b:14:cd:05:66:88:05:fc:3d:
56:d3:d6:11:9b:55:fb:ea:26:59:ac:ae:0c:35:cc:
69:d5:07:8b:54:63:f8:b4:15:c6:cf:a3:1c:98:1f:
45:a0:2a:74:ac:be:8a:0e:07:bb:dd:1e:ba:37:0e:
8e:08:49:92:67:ba:98:4a:50:da:85:c6:11:f0:17:
54:34:74:1d:e3:44:2e:c9:af:8a:9b:84:aa:7a:aa:
da:92:a1:d5:74:ad:bf:24:dc:cf:fd:9e:a8:e5:93:
29:49:7f:73:a4:ae:ce:11:ed:a9:d1:ff:08:33:94:
d8:24:14:25:af:99:34:13:41:62:2e:d0:d5:af:eb:
ba:d0:70:8a:de:b1:4f:75:02:69:1d:91:de:31:65:
2a:ef:e6:9b:05:f0:d6:77:b7:80:c0:d0:7e:57:bc:
60:39:36:79:b8:01:0d:35:5c:3d:59:84:44:0f:2d:
03:31:1e:99:25:dd:a1:94:3c:ee:bb:1f:74:d1:85:
c9:aa:02:77:73:43:ae:28:9a:f4:90:b3:28:18:15:
5d:06:f9:7e:cd:5b:ec:23:a7:e4:6f:87:9a:aa:56:
d9:d8:86:60:4d:9c:d5:82:f3:65:9d:10:5d:fc:d5:
4b:8e:65:e5:95:84:69:03:37:e8:48:ae:3a:6d:a7:
33:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:FF:66:EC:AE:90:65:EC:0D:D8:9D:80:D6:BF:78:D1:45:1E:C8:16
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3135302e3132392e3139342e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.129.194.0/23
Signature Algorithm: sha256WithRSAEncryption
af:49:62:bf:ec:a6:71:a3:c7:b7:49:18:69:4d:5f:13:42:93:
e8:bc:5d:a2:50:26:56:ec:27:96:b4:e5:88:9b:2e:1c:f9:ce:
0e:67:84:d2:56:e1:d3:2d:4a:09:10:70:ae:09:5f:01:3c:72:
26:d6:d5:9d:5c:8b:14:4d:dc:48:51:ce:ec:1a:f3:15:2e:1c:
24:15:ca:1d:45:ab:62:f6:21:b0:b9:d1:0a:38:f7:86:a2:f2:
97:ce:a9:be:a0:36:99:f5:0c:53:7e:a1:e3:4e:8b:d8:43:60:
fd:40:26:e7:32:fe:6c:6a:f3:1e:5c:f3:0c:af:05:04:bb:a0:
0a:7a:55:40:62:5d:31:88:7d:94:cb:6e:62:d1:ad:c1:c9:a9:
ea:42:0a:95:d6:e2:35:ff:af:51:6c:c7:59:86:8d:9a:59:ae:
fc:c2:d0:ca:8f:f6:de:85:57:71:5b:1b:5b:fb:62:21:b7:b5:
fe:42:0a:c1:b2:a6:41:ea:ec:1c:49:70:6e:ba:70:ef:69:ed:
56:d9:d4:05:7f:84:5a:36:5b:46:73:94:a4:e6:51:cc:00:1c:
63:80:72:32:71:7a:40:cd:1e:98:61:09:04:30:a2:5e:3c:4e:
2f:1c:a4:84:08:36:bb:ab:ed:05:3c:5e:20:d2:f6:11:c2:0a:
68:e8:27:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:17 2026 by rpki-client