
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230332e3137362e302f32302d3230203d3e2034383437.roa
File: 3132342e3230332e3137362e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: 4Qs9U9XfFNv/TY+eQSbKZFJuGLXlxLsbx7QLeVFW+dw=
Subject key identifier: B2:B9:D2:75:60:1D:0F:49:6C:16:23:03:EF:79:8B:AA:A0:33:73:36
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 60C2E2C8F841C6E4F560478875494EAF05604B96
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230332e3137362e302f32302d3230203d3e2034383437.roa
Signing time: Wed 13 May 2026 01:52:38 +0000
ROA not before: Wed 13 May 2026 01:47:38 +0000
ROA not after: Wed 12 May 2027 01:52:38 +0000
asID: 4847
IP address blocks: 124.203.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c2:e2:c8:f8:41:c6:e4:f5:60:47:88:75:49:4e:af:05:60:4b:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 13 01:47:38 2026 GMT
Not After : May 12 01:52:38 2027 GMT
Subject: CN=B2B9D275601D0F496C162303EF798BAAA0337336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:8c:4d:fd:a1:ad:d1:48:31:04:3d:e3:f6:
93:2b:43:29:8c:26:6e:80:63:ce:78:d7:ef:2e:c5:
a4:dc:9e:21:d4:b1:bb:3e:e5:9b:51:20:a8:53:00:
bc:09:73:f0:36:b7:3b:15:53:ab:bb:0b:46:3b:46:
80:47:eb:41:de:15:e1:b8:23:93:4f:04:47:3b:dd:
bd:b3:26:22:0c:21:b7:99:7a:16:8c:bc:4a:03:12:
a2:99:c5:9d:9e:b5:6e:5a:be:d3:73:2b:4c:4d:1a:
d3:08:0e:e8:f7:29:41:58:f2:43:de:e5:1a:84:e7:
8a:40:66:75:95:f6:4c:80:48:cf:c2:fa:2e:60:27:
11:fa:e9:82:35:6f:4e:22:32:c5:1d:05:48:d7:1d:
0d:4e:c9:b3:06:03:58:1f:68:9c:55:7d:bc:3e:7b:
f0:72:be:6e:f2:05:1b:97:9d:ee:f6:56:c7:e7:6e:
57:a7:15:27:6c:8b:2f:d8:e4:37:c6:60:f4:20:0a:
23:3d:ba:65:b1:f7:fe:18:94:87:d9:f7:60:2e:6b:
5c:eb:a3:d3:f6:77:42:54:f9:75:e3:8a:88:8e:40:
27:55:75:73:86:87:c8:ba:c8:6c:fb:3e:b0:c4:ff:
7f:28:a0:3b:86:64:3a:75:98:83:1b:01:cb:50:bf:
7f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:B9:D2:75:60:1D:0F:49:6C:16:23:03:EF:79:8B:AA:A0:33:73:36
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3132342e3230332e3137362e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.203.176.0/20
Signature Algorithm: sha256WithRSAEncryption
94:f6:a6:b2:c5:ec:d8:8f:e0:ff:ca:45:bf:87:20:8a:24:63:
af:34:e5:04:44:90:eb:1f:2d:d8:87:7d:c8:a8:0d:c6:9d:59:
c7:f8:dc:18:df:ac:0a:e0:a3:de:7e:1e:e6:00:b7:df:94:14:
27:07:68:34:fb:a8:be:53:7d:87:e1:e4:69:f4:51:1a:71:b5:
4e:aa:da:e1:cb:c0:9f:cc:ec:3d:e7:b9:db:b9:6b:51:68:93:
d0:ca:7c:6c:f3:a9:cb:68:61:90:ec:51:d0:6d:5f:7d:c9:d4:
cf:41:d1:a6:16:40:4a:6c:66:1c:38:04:69:3f:2d:64:1b:8a:
46:da:89:4c:b8:b3:52:c4:c9:a2:4d:c3:fb:71:5b:52:1c:af:
28:20:96:20:18:f7:04:a9:67:61:ea:d9:2b:d9:c2:fd:eb:bf:
92:43:c2:50:9e:60:59:c2:dc:37:82:99:f3:c3:20:20:ad:68:
80:85:98:56:25:00:84:f8:a5:bc:8c:70:4b:a8:d9:9a:fe:cd:
16:6f:33:50:8e:48:2a:37:ac:fc:b7:c2:5a:db:c9:72:31:50:
22:83:c7:bc:e7:8f:91:6c:72:96:22:9c:20:a9:f8:62:b5:bb:
8f:33:25:82:e0:94:d6:4a:17:a1:f8:83:33:3c:a6:a7:9d:e2:
a6:c3:6d:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 17:09:31 2026 by rpki-client