
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3136302e302f31392d3139203d3e203138313138.roa
File: 3132302e34372e3136302e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier: OldbeBBrYRu/EyJXn3hyvk9SpZLnYaj+sqp59sxch8Y=
Subject key identifier: 11:D1:E0:F7:6D:A1:58:58:C7:F7:D1:81:7A:A7:8A:F3:84:9F:52:8B
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 4D025B4E3E3BB3643ACA7BE14FB8EB844AF3A727
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3136302e302f31392d3139203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:43:11 +0000
ROA not before: Fri 26 Jun 2026 04:38:11 +0000
ROA not after: Fri 25 Jun 2027 04:43:11 +0000
asID: 18118
IP address blocks: 120.47.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:02:5b:4e:3e:3b:b3:64:3a:ca:7b:e1:4f:b8:eb:84:4a:f3:a7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:38:11 2026 GMT
Not After : Jun 25 04:43:11 2027 GMT
Subject: CN=11D1E0F76DA15858C7F7D1817AA78AF3849F528B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7a:b0:33:2c:00:d2:ff:65:ed:a1:0a:63:76:
6e:ce:ed:b6:2f:3e:ac:4b:63:b2:0c:4a:8d:8c:4d:
fd:a4:c5:4b:65:80:0c:cf:4b:ae:cc:35:58:45:8e:
b2:1a:0c:f7:78:12:f7:88:4d:9d:2d:a8:c9:96:1c:
5a:05:87:e8:2e:1b:e0:2c:6f:f1:85:b0:ac:25:d3:
69:6c:9c:2f:84:67:09:c7:9b:e8:99:9f:64:23:87:
98:1a:09:f6:45:5c:19:45:31:53:1e:9b:6d:2d:cc:
52:a3:e6:7c:d9:04:d4:1c:b6:10:ca:7c:5d:88:ba:
f7:0f:a1:f6:0c:97:98:c3:59:8d:40:c9:ec:28:c7:
cb:96:b9:6b:35:99:a8:52:2b:4f:7f:49:b7:54:c8:
79:51:9c:6d:c8:31:45:96:f8:ba:3c:37:7e:17:9f:
f4:b0:de:af:cc:61:31:b0:ae:83:7e:86:23:cc:26:
3d:f1:78:60:47:f7:22:51:89:c3:b2:6c:93:4c:41:
c2:61:09:62:27:ac:29:26:dc:5e:6a:79:b0:75:af:
f2:29:e2:5b:fd:da:ca:62:41:89:f8:05:c4:fb:17:
55:5f:94:68:c7:00:99:08:ba:d0:01:df:26:13:7f:
bb:6d:1b:9f:1b:91:d2:f8:12:a6:9e:d7:b1:f7:00:
d1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:E0:F7:6D:A1:58:58:C7:F7:D1:81:7A:A7:8A:F3:84:9F:52:8B
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3136302e302f31392d3139203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.160.0/19
Signature Algorithm: sha256WithRSAEncryption
45:4a:06:50:7b:d9:9c:f5:5d:51:e8:61:88:55:cc:df:cc:d7:
09:98:e3:60:c5:e1:fa:81:30:80:2a:a1:8a:8b:97:43:c2:4c:
71:f9:26:6c:ce:21:85:b5:31:f6:75:6e:ed:e7:8d:b0:3d:d2:
ad:de:f4:5b:49:65:6c:1d:ce:3e:3d:56:99:09:0f:d2:a2:c5:
95:a2:7d:9a:9d:44:40:59:33:57:ef:23:44:00:1a:32:67:32:
0c:4f:0b:bc:26:e9:8e:40:7a:e0:8d:4b:58:bf:cd:0b:3f:04:
ad:80:b2:89:f4:ee:38:f9:75:fb:2c:2b:b7:28:ab:aa:ca:72:
f8:2f:12:95:e4:d4:00:f8:7b:28:9b:0e:ed:c3:dc:cd:e8:f5:
ca:36:63:8e:c3:b0:cf:a0:9d:4f:6e:5d:c3:9d:66:b2:ea:a8:
2a:5e:5a:f8:e0:ac:83:ce:2a:ff:c1:f0:1e:ff:52:78:17:79:
e5:4b:84:32:73:9d:00:28:20:a1:37:f2:2f:ca:f5:f0:1e:9b:
2e:de:1e:6b:51:1c:58:75:81:62:cc:e4:c7:6f:bf:c3:e5:07:
31:89:f7:5c:6a:6a:c8:da:ba:ac:1e:39:26:a6:e7:de:4a:9e:
7f:94:8e:10:95:32:42:8c:f1:44:c3:b1:9e:25:c4:9e:b0:97:
90:3e:16:34
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUTQJbTj47s2Q6ynvhT7jrhErzpycwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDM4MTFaFw0yNzA2MjUwNDQzMTFaMDMxMTAvBgNV
BAMTKDExRDFFMEY3NkRBMTU4NThDN0Y3RDE4MTdBQTc4QUYzODQ5RjUyOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoerAzLADS/2XtoQpjdm7O7bYv
PqxLY7IMSo2MTf2kxUtlgAzPS67MNVhFjrIaDPd4EveITZ0tqMmWHFoFh+guG+As
b/GFsKwl02lsnC+EZwnHm+iZn2Qjh5gaCfZFXBlFMVMem20tzFKj5nzZBNQcthDK
fF2IuvcPofYMl5jDWY1Ayewox8uWuWs1mahSK09/SbdUyHlRnG3IMUWW+Lo8N34X
n/Sw3q/MYTGwroN+hiPMJj3xeGBH9yJRicOybJNMQcJhCWInrCkm3F5qebB1r/Ip
4lv92spiQYn4BcT7F1VflGjHAJkIutAB3yYTf7ttG58bkdL4Eqae17H3ANGZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUEdHg922hWFjH99GBeqeK84SfUoswHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMxMzIzMDJlMzQz
NzJlMzEzNjMwMmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBXgvoDANBgkqhkiG9w0BAQsFAAOCAQEARUoGUHvZnPVdUehhiFXM38zX
CZjjYMXh+oEwgCqhiouXQ8JMcfkmbM4hhbUx9nVu7eeNsD3Srd70W0llbB3OPj1W
mQkP0qLFlaJ9mp1EQFkzV+8jRAAaMmcyDE8LvCbpjkB64I1LWL/NCz8ErYCyifTu
OPl1+ywrtyirqspy+C8SleTUAPh7KJsO7cPczej1yjZjjsOwz6CdT25dw51msuqo
Kl5a+OCsg84q/8HwHv9SeBd55UuEMnOdACggoTfyL8r18B6bLt4ea1EcWHWBYszk
x2+/w+UHMYn3XGpqyNq6rB45Jqbn3kqef5SOEJUyQozxRMOxniXEnrCXkD4WNA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:20 2026 by rpki-client