
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e362e302f32332d3233203d3e203536323832.roa
File: 3136332e34372e362e302f32332d3233203d3e203536323832.roa (raw, json)
Hash identifier: KBkj4x6cFX8KCN9dff0KXOZN5JNmyK+jP3FZzqMSyWM=
Subject key identifier: F0:39:F9:45:64:33:2A:EA:89:75:2B:BC:F0:04:5E:D8:BC:CE:08:19
Certificate issuer: /CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Certificate serial: 40E0735AF10E460AE6E2B3D7BDCBE20473035854
Authority key identifier: AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e362e302f32332d3233203d3e203536323832.roa
Signing time: Tue 09 Jun 2026 06:14:05 +0000
ROA not before: Tue 09 Jun 2026 06:09:05 +0000
ROA not after: Tue 08 Jun 2027 06:14:05 +0000
asID: 56282
IP address blocks: 163.47.6.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 14:56:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:e0:73:5a:f1:0e:46:0a:e6:e2:b3:d7:bd:cb:e2:04:73:03:58:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8
Validity
Not Before: Jun 9 06:09:05 2026 GMT
Not After : Jun 8 06:14:05 2027 GMT
Subject: CN=F039F94564332AEA89752BBCF0045ED8BCCE0819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c5:17:65:3b:1b:b9:ac:75:e7:e0:a7:a7:99:
3e:a8:b7:77:53:31:f3:1a:d3:78:14:11:f7:d8:00:
0d:49:8a:f0:97:e0:a0:e7:de:26:73:5c:0d:71:e7:
80:fa:cc:ab:43:5f:78:ad:47:20:29:c2:de:32:66:
11:90:f9:00:7c:4e:cd:b6:9c:5c:e3:31:38:40:33:
a9:17:4a:45:b5:69:6e:67:d5:9c:36:dd:8b:7d:fe:
f1:35:13:25:c7:71:98:5d:51:cb:64:69:11:a0:f3:
91:10:c2:29:7a:b6:f0:11:33:25:dd:32:e2:71:20:
a0:ca:63:3b:2b:61:af:c9:14:67:7f:b2:5b:2a:08:
6f:da:34:8c:ae:8c:6a:de:99:05:89:06:73:64:73:
32:f1:dd:68:bf:1d:a7:17:f5:f4:97:59:1e:30:84:
a3:a8:be:76:3f:af:c3:16:b1:65:0c:b8:4a:fa:af:
98:32:6f:58:67:09:b0:2d:87:6c:5e:64:35:68:56:
36:ab:c0:42:8d:eb:a3:ed:8b:ea:ce:66:ba:0e:cf:
6c:25:70:2c:ea:12:03:30:0e:cc:55:89:a4:cc:18:
0d:39:f4:68:a6:6c:a0:51:e7:23:1f:71:97:c7:06:
a5:5c:3b:f7:63:c1:2e:56:28:a9:b1:03:2e:f7:9f:
b8:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:39:F9:45:64:33:2A:EA:89:75:2B:BC:F0:04:5E:D8:BC:CE:08:19
X509v3 Authority Key Identifier:
keyid:AF:38:22:BA:7A:58:50:DA:06:99:3B:F2:2D:99:0B:2B:CA:F2:BD:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AF3822BA7A5850DA06993BF22D990B2BCAF2BDE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947668481/0/3136332e34372e362e302f32332d3233203d3e203536323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
163.47.6.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:ca:86:08:df:bb:91:e1:6e:e9:1e:3b:65:51:f0:77:86:76:
6c:a1:44:e7:ba:dc:d2:9e:ec:ed:81:7f:90:3b:f3:d2:10:2d:
68:a0:3c:82:6b:21:b7:eb:18:72:f3:25:53:28:8e:b0:d0:28:
d7:30:55:3b:00:02:e4:2e:83:9b:e8:77:9f:34:66:0e:61:fd:
2b:6a:ba:aa:4d:00:3a:d2:34:c2:c4:c4:3e:17:5f:c7:68:3c:
38:3c:00:df:1d:c1:45:9e:a1:9b:58:5b:ce:a1:6d:ed:eb:2b:
8b:50:92:40:1d:3c:96:09:8a:de:57:4c:b8:de:17:36:f0:46:
93:2b:a0:37:f6:bd:e0:61:fd:df:57:b4:ec:b1:a4:30:62:88:
5f:99:58:9e:cb:84:d3:d0:c3:81:44:6b:85:37:41:da:53:e8:
18:53:b1:58:e3:00:b3:6f:69:96:f9:8b:58:c6:c0:b8:61:1e:
3e:c6:c8:6a:10:f7:39:34:d0:52:1c:1d:16:dd:68:2d:f0:fb:
3b:28:22:2a:a0:c4:61:93:af:5d:e2:4d:55:35:88:b7:f0:b5:
a6:0e:7a:6e:11:99:c1:95:de:ca:6d:1a:ea:23:c5:00:b9:47:
56:4d:81:3a:eb:46:c4:43:bf:8e:40:25:9f:89:7e:83:bc:10:
ab:2d:35:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:01:06 2026 by rpki-client