
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e203138313138.roa
File: 3132302e34352e302e302f31362d3136203d3e203138313138.roa (raw, json)
Hash identifier: OT/+eg9996rVLH0jSOE0N1lp+M4BSMfgq7+F0LxPGhY=
Subject key identifier: 70:56:9F:46:9D:DA:CC:11:1C:EC:E3:76:CD:28:F9:21:10:3B:7C:3C
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 6095837B0CC48988F6D01724C5D21C461FD1ABF1
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e203138313138.roa
Signing time: Mon 29 Jun 2026 09:35:58 +0000
ROA not before: Mon 29 Jun 2026 09:30:58 +0000
ROA not after: Mon 28 Jun 2027 09:35:58 +0000
asID: 18118
IP address blocks: 120.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:95:83:7b:0c:c4:89:88:f6:d0:17:24:c5:d2:1c:46:1f:d1:ab:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 29 09:30:58 2026 GMT
Not After : Jun 28 09:35:58 2027 GMT
Subject: CN=70569F469DDACC111CECE376CD28F921103B7C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0e:cd:41:67:28:d5:f1:a0:4a:36:e1:50:85:
a6:15:14:ee:2d:cd:6f:b5:aa:ae:4c:d1:b9:1b:b4:
2e:22:e5:e6:90:fb:3e:42:b9:90:44:ae:17:1d:b7:
63:88:cb:e4:62:2f:47:1c:a7:a5:18:19:f4:f0:f9:
96:05:9b:f5:28:31:51:39:07:a1:e5:a5:33:2e:a7:
23:ba:a0:81:7e:32:8b:57:81:f3:b6:ca:0c:5b:c7:
d7:9f:d6:9c:8e:a5:4e:3e:5c:8c:6d:f8:60:20:16:
fb:70:15:21:ea:ec:fc:cd:0f:00:76:68:d1:3e:b4:
80:82:8b:a6:61:e2:62:2d:03:d8:86:e3:21:18:cf:
33:7a:3f:58:77:a8:a9:d8:4b:1f:5d:1f:11:c0:67:
81:89:6e:8a:65:16:35:b8:af:ba:6f:b1:79:29:36:
cd:25:f2:ba:19:51:93:dc:b6:8a:bd:e3:a1:f2:5a:
5b:e9:75:12:06:ec:ac:d6:da:e8:6b:84:e8:9c:6d:
0c:cc:f4:0f:fe:55:dd:77:71:f2:8c:06:d7:3f:e8:
50:c8:86:b6:30:21:ad:47:03:17:f0:5e:e9:9e:cc:
b8:12:59:6f:6e:d6:c3:83:13:41:91:b6:5b:1c:cf:
e5:1b:bf:8b:35:c6:a3:77:de:cf:e0:d2:9b:22:f0:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:56:9F:46:9D:DA:CC:11:1C:EC:E3:76:CD:28:F9:21:10:3B:7C:3C
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e302e302f31362d3136203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
93:73:7c:08:61:61:7a:fa:c4:4e:99:d4:a1:0b:97:32:5c:7f:
c8:f0:03:9c:f9:d1:b9:57:7a:db:48:d4:1f:a5:a1:69:4c:1f:
5d:0f:d7:37:47:22:cf:10:14:74:10:0e:a7:dd:96:48:8f:f4:
46:83:62:db:e5:b9:ed:dc:66:67:5b:85:f7:d6:80:bf:2c:70:
30:12:ef:71:96:ef:cd:9f:29:7f:34:5f:cd:61:62:78:b3:ae:
84:d5:8f:cf:fa:da:7a:c8:77:2f:93:82:f6:e7:12:b9:2f:c8:
29:53:f3:15:51:53:d4:0c:3c:1b:28:48:5c:64:cc:87:d7:de:
dd:87:83:4d:ff:e2:73:5a:04:37:04:e0:ab:b2:4a:b4:94:35:
5c:38:40:94:2b:17:d6:ec:5c:fe:a7:a8:98:a8:08:59:67:a2:
62:6c:1f:f9:99:f1:1d:15:54:4a:57:67:88:7a:83:80:fc:5b:
e3:51:bf:9b:9e:f8:20:c9:2d:40:f6:03:77:0c:07:53:f3:1e:
7b:69:73:9a:27:47:ab:0d:c1:92:23:6c:6a:b3:45:8b:a6:75:
79:d7:07:c6:d8:f0:62:c0:f7:7f:1f:1f:fb:c4:bb:a9:a7:37:
5c:f1:73:5f:53:8a:00:07:32:08:f2:f3:ef:44:7c:26:d0:82:
94:dc:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:26:23 2026 by rpki-client