
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e203138313138.roa
File: 3132302e34352e3133362e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: dDK7mENcPHJnbWZIY2BsJ8HBTKTO2CXqc8PbgazvQbA=
Subject key identifier: EE:0F:A8:E9:73:5E:0A:0F:89:73:40:A6:63:AC:DA:FB:56:7F:67:F6
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 65F7AEE9588ACC26BC9451C368948DF55ACD3EE6
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:09:54 +0000
ROA not before: Fri 26 Jun 2026 04:04:54 +0000
ROA not after: Fri 25 Jun 2027 04:09:54 +0000
asID: 18118
IP address blocks: 120.45.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f7:ae:e9:58:8a:cc:26:bc:94:51:c3:68:94:8d:f5:5a:cd:3e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:04:54 2026 GMT
Not After : Jun 25 04:09:54 2027 GMT
Subject: CN=EE0FA8E9735E0A0F897340A663ACDAFB567F67F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5c:1b:41:3d:69:61:a1:7f:f8:4b:47:cc:e0:
56:26:b5:c2:93:aa:8f:99:d2:14:b0:b1:1f:0e:cb:
80:0c:b8:34:59:70:67:36:15:b8:49:b2:06:43:e3:
08:36:b8:ef:5d:c5:b7:a4:fd:83:39:15:fd:32:9e:
4c:ef:25:9d:1a:64:ba:71:3d:0a:df:61:26:b2:63:
97:f7:78:db:cf:98:0e:68:27:d4:61:af:62:e6:2a:
7f:34:53:e8:b2:e0:97:84:3b:77:d0:6d:ac:63:00:
60:ad:e5:f3:a6:9e:86:01:16:17:bb:61:9f:ca:bc:
cd:c5:b4:9c:ee:99:ec:77:62:e0:0d:7e:20:47:ee:
cd:52:f9:75:a7:81:b2:65:4b:17:e6:19:cb:d2:0b:
bc:50:2d:ac:e6:b5:6a:52:25:0f:42:65:34:36:2b:
52:0a:42:95:11:d0:16:c6:f8:e1:7a:b8:3a:5e:55:
ea:71:d0:57:32:dc:66:24:e9:97:37:c8:e6:43:63:
de:a8:fa:c3:ee:c5:a6:18:83:b6:b4:73:bf:9c:ff:
77:6a:11:32:99:ce:11:f1:ce:41:b1:27:c6:eb:2d:
47:06:40:86:0c:c2:26:37:89:72:ed:ab:f3:68:e1:
8e:91:13:ca:0f:68:97:f3:d9:11:b9:88:a9:c5:b3:
36:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:A8:E9:73:5E:0A:0F:89:73:40:A6:63:AC:DA:FB:56:7F:67:F6
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3133362e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.45.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c1:7c:44:12:29:96:d4:67:90:70:4e:a1:de:b6:c5:66:a4:
96:a6:3a:86:ef:5c:d1:73:94:74:7f:ef:e8:03:c6:f1:a9:a0:
bc:dd:ec:51:37:54:31:44:73:c0:41:59:40:e9:da:3d:90:70:
6d:74:07:b5:7e:c8:32:e1:3c:04:83:b4:eb:a8:f1:29:85:f5:
0e:31:b0:44:b6:62:32:ff:da:22:03:9e:20:7b:6d:3a:48:90:
8f:1d:0b:22:1b:c9:0a:82:07:89:29:e4:a0:77:22:93:64:80:
d5:66:16:fa:2f:9a:48:81:81:8e:ee:36:b7:8c:62:6c:f2:b5:
c2:9e:3f:02:bc:f7:68:75:53:22:6c:16:6a:d2:ef:9c:5d:53:
b7:c6:e9:72:72:62:f2:8d:38:80:69:4d:e3:8a:99:28:56:ee:
95:6f:c4:c7:cf:6e:fd:6b:e6:b4:f8:a7:6a:4b:5d:54:29:5e:
bd:fe:fe:14:fa:4b:18:09:ec:b6:5d:93:c9:a4:cc:c2:74:93:
48:3a:65:43:be:d9:c0:98:a9:53:36:60:4d:53:15:6b:11:03:
e5:f5:32:33:c8:7e:ff:99:3b:1b:9a:bb:1a:d5:3c:3c:7c:31:
36:90:e8:2b:fa:f9:c6:c3:44:53:9a:ba:fa:73:5f:26:b1:4e:
2b:b4:26:bc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:17 2026 by rpki-client