
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e342e302f32332d3233203d3e203536323832.roa
File: 3136332e34372e342e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: 6c1EgurRlPOBW3c/9Ea0uC48zWPO0Brwjkr14S/AWR0=
Subject key identifier: 40:CC:F3:57:F8:D0:85:A1:B1:53:6C:B4:D9:8C:E2:0E:93:75:A3:C3
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 027A78346963B2648DBBFD605E773946AEB25A81
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e342e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:14:14 +0000
ROA not before: Tue 09 Jun 2026 06:09:14 +0000
ROA not after: Tue 08 Jun 2027 06:14:14 +0000
asID: 56282
IP address blocks: 163.47.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7a:78:34:69:63:b2:64:8d:bb:fd:60:5e:77:39:46:ae:b2:5a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:09:14 2026 GMT
Not After : Jun 8 06:14:14 2027 GMT
Subject: CN=40CCF357F8D085A1B1536CB4D98CE20E9375A3C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e5:c0:f0:93:1a:cb:46:2e:f6:41:7c:75:c5:
98:7e:99:fc:23:ee:7f:29:9e:7c:a5:ba:83:c1:e2:
63:08:ef:4a:1f:f7:f3:87:9d:8f:fa:e3:3a:6d:83:
03:bf:1e:b3:b8:86:83:7d:cd:42:d2:c2:25:c9:cc:
f6:19:d3:a4:21:58:96:e7:1e:f9:85:87:0f:ea:d2:
01:21:3a:d4:9a:f9:c4:a0:24:5c:b6:ec:5b:f9:35:
7a:bc:d6:99:3b:b2:48:0f:ef:b4:78:66:8d:f0:67:
f4:3e:cc:41:bf:16:d4:77:f9:b9:bc:e4:d3:ad:88:
b1:e1:59:f4:16:47:56:04:dd:e3:13:d8:ff:4e:b9:
de:00:6e:2d:b6:ad:85:e3:49:21:10:6c:80:f6:1c:
3d:59:60:02:69:7a:70:55:5c:6f:60:8a:77:ab:e7:
b4:0a:75:29:44:59:49:62:53:8d:75:ee:1a:ca:76:
5a:f5:7f:a2:5d:f5:74:39:97:60:2c:0b:bd:e4:2c:
01:2e:9b:54:2d:56:89:c4:42:aa:15:43:bf:d9:b1:
62:48:d4:45:6a:96:85:4c:cb:a6:35:49:1d:7f:24:
16:32:3d:b4:f8:e2:c2:55:9d:38:9a:de:b4:78:23:
d5:01:c0:b7:f0:c7:0e:dc:87:e9:22:24:5f:44:a0:
f6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CC:F3:57:F8:D0:85:A1:B1:53:6C:B4:D9:8C:E2:0E:93:75:A3:C3
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e342e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.47.4.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:7a:61:a8:b7:8d:aa:b6:b3:5d:e8:34:e8:47:40:0f:a4:5c:
7c:16:1f:7f:94:3b:50:d0:30:1e:e5:7f:fb:6f:67:6c:26:5b:
ba:c8:f5:69:11:f0:9d:55:26:5e:ef:e2:58:03:e1:bb:dc:b1:
83:8d:74:27:ab:db:9a:08:b8:41:6b:c7:82:cb:c6:44:4a:ba:
4e:9b:05:b2:c6:0d:65:0c:bc:a8:21:76:d5:bd:7a:2c:48:09:
41:28:97:a0:95:cc:54:c7:32:a5:31:87:41:85:e1:81:f1:eb:
e2:e8:84:a2:be:1c:40:ad:8e:8c:97:c2:3e:75:8e:49:62:d7:
c6:b2:03:41:36:ab:bd:86:dc:db:da:58:e9:fb:19:e2:08:79:
de:95:3d:e3:09:42:e3:1a:05:09:e4:3e:54:d9:5e:70:1e:43:
df:3b:89:a2:a3:24:56:8d:b1:65:bb:94:2d:c9:95:94:5e:fa:
cc:2d:79:79:ef:eb:09:16:1a:04:c9:d2:88:0f:9d:d8:23:10:
03:03:52:72:98:d6:9e:44:0a:b4:12:87:43:e7:b7:52:6b:73:
0c:24:52:30:21:8f:5e:e3:16:67:a0:b7:21:dd:b5:2f:7e:d1:
ac:ca:db:eb:c0:cd:0b:56:0e:a6:72:78:8a:d3:7b:73:f3:6d:
ee:3c:11:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:06 2026 by rpki-client