
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e3132382e302f31382d3138203d3e2034383038.roa
File: 36302e3139342e3132382e302f31382d3138203d3e2034383038.roa (raw, json)
Hash identifier: fHg9dra9mMab3aobPYJjZr/VYfI3JbdqpfcMGmLeyj8=
Subject key identifier: F4:FD:E6:76:79:F6:25:DC:6B:CB:22:0D:84:4C:00:59:F4:E3:FD:A7
Certificate issuer: /CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Certificate serial: 76B202BF2A3BD65B5DE62A472DE40EF494E4F76B
Authority key identifier: AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e3132382e302f31382d3138203d3e2034383038.roa
Signing time: Wed 13 May 2026 03:41:32 +0000
ROA not before: Wed 13 May 2026 03:36:32 +0000
ROA not after: Wed 12 May 2027 03:41:32 +0000
asID: 4808
IP address blocks: 60.194.128.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:17:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:b2:02:bf:2a:3b:d6:5b:5d:e6:2a:47:2d:e4:0e:f4:94:e4:f7:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE487B72C4F38EA548F6721BB60B773705BD9515
Validity
Not Before: May 13 03:36:32 2026 GMT
Not After : May 12 03:41:32 2027 GMT
Subject: CN=F4FDE67679F625DC6BCB220D844C0059F4E3FDA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:37:e5:b2:87:6b:3b:47:6c:12:3c:29:65:bc:
b4:08:a5:5f:e8:27:ec:cc:49:a2:be:45:9e:5e:21:
d3:20:c1:b6:04:d8:92:55:db:8d:8e:e4:af:88:e7:
ed:09:60:71:fe:fb:69:72:c5:5e:80:37:ad:1c:e6:
53:3b:36:5e:c6:e8:48:9f:70:a3:5b:bd:e2:89:ce:
94:84:03:26:08:ea:55:26:47:8a:3f:4d:0a:22:20:
6a:81:1c:cb:98:d4:b9:f0:2a:70:22:ae:46:30:78:
22:8c:fd:f5:dc:df:58:25:dc:a5:16:cf:58:d7:13:
b3:fd:9d:70:66:96:b8:26:2a:a3:7f:13:b0:07:a3:
34:bc:18:e1:0f:90:9d:2a:1a:d0:71:09:4d:4c:ed:
44:cf:d9:a3:47:5d:96:05:24:05:15:21:57:59:ec:
52:23:97:dd:1b:74:92:f6:9c:d4:e3:fb:b8:01:42:
ae:69:a2:3e:a7:28:cf:dc:e3:1d:01:f4:2f:50:75:
3b:e3:82:38:d7:ff:4e:8d:d1:9b:b8:ae:a5:99:72:
4c:be:e1:d1:8c:64:7c:f2:0b:fd:3a:f6:51:ab:24:
d7:e7:be:de:e9:0e:96:db:2e:b2:d7:38:c1:f6:a6:
ae:8f:06:10:96:f7:0e:86:58:d2:21:45:c6:d6:29:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:FD:E6:76:79:F6:25:DC:6B:CB:22:0D:84:4C:00:59:F4:E3:FD:A7
X509v3 Authority Key Identifier:
keyid:AE:48:7B:72:C4:F3:8E:A5:48:F6:72:1B:B6:0B:77:37:05:BD:95:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/AE487B72C4F38EA548F6721BB60B773705BD9515.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE487B72C4F38EA548F6721BB60B773705BD9515.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947943939/0/36302e3139342e3132382e302f31382d3138203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.194.128.0/18
Signature Algorithm: sha256WithRSAEncryption
6b:07:8d:19:ec:15:81:5a:d3:54:30:b0:64:ac:60:54:88:14:
0c:38:7c:5f:dd:f0:78:6e:ff:84:04:cd:9c:5a:a7:8b:ac:bf:
a8:96:ba:4e:0c:77:2e:12:9c:c5:7b:85:37:96:04:f7:02:ff:
fa:e2:72:50:92:22:a3:dc:88:0f:b4:29:a9:29:ee:06:72:1e:
45:20:3f:c4:54:f3:8b:60:45:a5:f0:c3:26:e9:ce:3a:d5:d6:
a3:50:f8:d5:d5:2c:5f:8b:3e:ef:36:c6:d1:0d:77:87:e3:94:
52:ba:10:cd:f3:db:55:43:e3:8e:d9:da:8e:bb:9a:a6:2c:a5:
b9:58:87:ca:04:19:f4:09:f6:c3:01:fb:b5:50:09:d2:4e:80:
ba:cd:53:b7:6c:d3:14:05:b5:aa:4b:f0:b2:77:46:26:30:61:
d2:04:4b:52:05:4c:ba:dd:3d:1b:1f:d1:da:69:ee:bd:81:b5:
06:3f:b5:ca:46:7d:64:9a:86:a7:2a:ea:f2:be:2b:e5:87:10:
39:bf:61:a6:52:e9:96:99:2c:ff:ce:4a:0f:b6:4a:7f:16:4d:
2b:32:2e:f7:92:0a:a0:a3:bf:30:d4:6f:a6:48:84:b6:00:fb:
c2:02:10:15:6f:dc:15:74:91:0c:c9:d0:2c:6a:5c:05:22:05:
7f:25:ac:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:15:03 2026 by rpki-client