
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e203138313138.roa
File: 3132302e34372e302e302f31362d3136203d3e203138313138.roa (raw, json)
Hash identifier: elhFE2fcmKhIGcAJwC+p2AFWn3roSjDIICEJQse2bn4=
Subject key identifier: 1A:F9:53:20:C8:A7:C2:2F:66:D0:08:4E:23:B7:55:D5:47:90:42:4D
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 340D50DCD9A97EE47123F3152F31B37B337CD061
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e203138313138.roa
Signing time: Mon 29 Jun 2026 09:35:58 +0000
ROA not before: Mon 29 Jun 2026 09:30:58 +0000
ROA not after: Mon 28 Jun 2027 09:35:58 +0000
asID: 18118
IP address blocks: 120.47.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:0d:50:dc:d9:a9:7e:e4:71:23:f3:15:2f:31:b3:7b:33:7c:d0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 29 09:30:58 2026 GMT
Not After : Jun 28 09:35:58 2027 GMT
Subject: CN=1AF95320C8A7C22F66D0084E23B755D54790424D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:37:96:3f:92:5d:dd:41:c5:d5:14:57:93:
2b:b9:f6:19:db:94:c1:d0:cc:e3:02:aa:a8:ef:86:
2a:fd:2f:42:90:8d:e7:d0:f5:6a:a4:85:6d:66:7f:
b3:bd:ec:07:e6:1e:2b:7f:73:be:df:be:b4:8b:7d:
d8:2e:00:c1:3d:9b:81:76:01:59:a9:81:76:f3:66:
d4:73:02:20:10:2d:e8:eb:89:fe:65:1d:59:2e:fa:
bf:1f:a7:b0:70:36:23:61:c4:6e:e5:c5:f9:fb:4f:
11:8a:46:66:3a:23:e5:34:70:c1:8b:48:0c:02:2a:
eb:15:7b:1a:c4:09:46:93:24:89:57:36:20:f6:c5:
d8:45:a2:95:91:b7:a1:43:e8:ef:36:1a:3a:7f:a3:
9c:7d:06:1e:61:7b:85:94:2f:90:ac:dc:00:44:b5:
dc:20:12:13:24:16:09:7b:88:8d:d6:01:d9:4b:09:
79:8d:9e:cc:bf:74:35:1d:29:4d:8d:5b:66:e9:75:
f7:83:b5:ef:5b:9a:4f:96:7f:60:f0:f7:e2:5f:52:
0c:48:45:53:46:b6:ce:e2:a9:58:cd:2a:fc:8d:39:
2e:ff:52:16:40:1f:e4:f2:b7:0b:73:04:78:a0:c8:
f9:c9:4e:67:f0:f2:19:99:16:7b:18:2b:71:ad:ae:
bf:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F9:53:20:C8:A7:C2:2F:66:D0:08:4E:23:B7:55:D5:47:90:42:4D
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e302e302f31362d3136203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.0.0/16
Signature Algorithm: sha256WithRSAEncryption
55:dd:fe:05:6c:db:2e:c5:58:f5:f2:5f:5e:1d:d2:49:8b:26:
15:ed:c4:04:00:b5:a2:be:44:63:44:58:37:56:0f:4f:bf:50:
43:a6:13:e9:61:e6:5f:45:0f:60:a9:c0:b0:c2:b9:0f:9c:c3:
99:a8:c7:84:6c:4c:36:74:45:0f:b6:0e:0a:8b:fd:df:34:a6:
13:03:dd:e5:07:20:c7:8a:7e:63:b0:47:5a:13:24:95:53:2c:
ce:ef:2d:2d:67:78:64:6e:c9:e8:b0:96:19:5a:9f:9b:a7:45:
11:f1:e0:46:c9:2e:6a:23:9b:c2:13:a0:9a:01:4f:ca:42:a2:
73:79:96:b2:45:27:44:98:37:2a:2f:77:75:fd:cc:aa:e3:70:
03:a2:bd:e4:bc:41:4c:30:ca:06:88:a5:00:63:67:6d:1c:f1:
a8:b7:03:c4:24:c6:c2:35:4a:a0:e7:28:a4:95:15:4b:4e:e2:
a9:f5:82:a4:f2:01:88:98:64:76:47:59:26:34:db:80:d3:d3:
bb:e6:b4:96:d5:50:4b:dc:e9:e1:17:ab:87:9c:b1:82:4c:1e:
cd:32:93:2e:9d:38:1d:12:f3:b5:4e:b4:84:2a:32:d3:e9:55:
96:0c:3a:18:91:65:69:49:0d:49:6e:3a:32:04:54:6a:95:1a:
fc:c1:a8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:26:23 2026 by rpki-client