
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234342e3232342e302f31392d3139203d3e2034383038.roa
File: 3231382e3234342e3232342e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: WxdzB+fNraZ293XSBWcaPFhsSf6ei4WgOJ6MTN64xeY=
Subject key identifier: 1C:56:76:F4:A7:49:9B:D9:43:BD:60:44:F7:9B:88:DF:A1:32:F5:5E
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 2EFE391FD70EC1FD0DC7D403C7C4883D904F7FA8
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234342e3232342e302f31392d3139203d3e2034383038.roa
Signing time: Wed 13 May 2026 02:32:57 +0000
ROA not before: Wed 13 May 2026 02:27:57 +0000
ROA not after: Wed 12 May 2027 02:32:57 +0000
asID: 4808
IP address blocks: 218.244.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:fe:39:1f:d7:0e:c1:fd:0d:c7:d4:03:c7:c4:88:3d:90:4f:7f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 13 02:27:57 2026 GMT
Not After : May 12 02:32:57 2027 GMT
Subject: CN=1C5676F4A7499BD943BD6044F79B88DFA132F55E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e4:33:6c:d4:62:bf:62:40:ea:b7:f8:0a:a2:
49:ee:ad:5a:40:23:49:5f:e7:ad:9f:3e:9a:61:59:
3c:86:92:45:9d:ee:3b:e2:85:f7:48:56:4e:fa:89:
be:26:98:70:c2:65:a6:10:9a:24:de:5b:7e:dd:8b:
5b:14:39:4e:f9:f5:19:d3:de:48:fb:c2:a5:25:b1:
23:c4:26:b7:3e:f3:6a:7b:9f:75:08:fd:1d:c4:02:
d7:91:ca:85:ad:35:05:d2:90:8f:8e:09:17:c4:b4:
75:b0:6d:bc:ba:11:6d:24:14:fb:6b:8b:ea:eb:bf:
f0:5a:b3:54:be:68:20:f4:53:81:34:8b:76:82:66:
de:61:c6:c6:70:69:a7:7d:cc:a7:d7:94:4e:6c:0e:
06:a6:ea:9d:e6:f4:80:28:df:2c:f0:c4:10:3c:7e:
51:80:9c:de:d7:c1:c9:77:ea:0c:f2:a2:35:02:84:
48:e9:6b:55:4a:52:50:2c:e8:7f:83:f9:9e:c1:83:
10:20:75:10:c1:52:b1:1f:05:02:b6:59:d6:05:ba:
19:60:73:54:1b:39:be:bf:03:54:5a:5a:6a:fd:01:
51:bd:5b:01:0d:36:78:0c:eb:4f:2c:4c:3c:f6:95:
48:a2:5e:d6:d0:06:b2:bb:bd:47:e3:1c:77:ae:4a:
3d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:56:76:F4:A7:49:9B:D9:43:BD:60:44:F7:9B:88:DF:A1:32:F5:5E
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/3231382e3234342e3232342e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.244.224.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:58:62:9f:72:8f:a1:c4:43:5b:a2:f9:47:9e:c4:0b:ab:02:
d6:18:72:c0:bc:bc:c0:cb:ed:36:52:77:39:9f:1b:2f:1b:6f:
9e:8e:c5:5f:2a:f9:ab:27:4a:df:dd:5f:0e:01:20:fd:8c:43:
5f:47:f6:7b:2d:a1:17:66:d1:4b:25:ab:be:55:36:5a:de:52:
c7:7d:1c:1e:11:be:cd:e1:2c:d6:f8:27:85:dd:f4:96:46:dd:
5a:5f:78:85:f6:99:72:88:0f:4e:99:23:b0:6b:ce:0d:4c:0c:
c9:7c:6b:e9:eb:88:e8:12:aa:8a:c4:05:ad:a6:d9:f4:80:d1:
c9:d1:7b:4e:9c:25:87:7f:2a:cf:d6:23:4d:d1:33:4b:63:82:
95:0b:c3:25:75:09:bb:39:2e:92:7c:94:35:9a:5a:7c:9f:c4:
37:e4:e8:67:4a:ac:04:cc:44:b2:e7:1e:db:05:9d:4d:b0:c1:
87:7e:5c:03:60:25:ef:96:42:00:db:fb:c3:e8:e1:05:41:0b:
25:4c:1a:34:db:74:94:e8:64:58:a1:79:6f:0f:47:3e:2f:6b:
c7:7d:f9:ab:89:58:46:0c:7a:53:e7:f4:b3:43:4e:d6:e8:5d:
07:a8:85:51:44:d7:ea:49:f6:16:6b:da:b7:51:0b:f5:2b:ac:
31:13:79:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:15:19 2026 by rpki-client