
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232342e302f32342d3234203d3e203138313138.roa
File: 3132302e34372e3232342e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: WHjX/AnEfXbMdZD3SDQJzhdgZx+k0hmKcyTTD4ogLdM=
Subject key identifier: B6:BD:49:75:1B:C3:D3:24:9A:54:91:C8:B9:AE:DE:E2:82:8E:0C:3E
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 3FF048C153E5CCF53A1822D4A94C1FBB112BA4EA
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232342e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:09:54 +0000
ROA not before: Fri 26 Jun 2026 04:04:54 +0000
ROA not after: Fri 25 Jun 2027 04:09:54 +0000
asID: 18118
IP address blocks: 120.47.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:f0:48:c1:53:e5:cc:f5:3a:18:22:d4:a9:4c:1f:bb:11:2b:a4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:04:54 2026 GMT
Not After : Jun 25 04:09:54 2027 GMT
Subject: CN=B6BD49751BC3D3249A5491C8B9AEDEE2828E0C3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:15:f4:dc:c0:5e:1e:f8:70:42:97:f5:76:
36:b5:84:01:64:96:98:9f:36:9e:4e:81:97:94:af:
e5:c2:2b:36:b8:57:b2:73:4e:72:4b:d2:a4:e8:05:
ee:68:c1:a9:be:5c:6c:67:aa:f8:3b:e3:4a:01:f8:
e0:97:a9:e0:ac:8b:19:14:c6:cc:44:c0:dd:c8:27:
61:4d:46:52:1f:82:5c:13:d7:56:89:87:8c:40:e8:
04:09:99:6e:72:f8:a9:db:21:81:b0:fa:51:6b:3f:
08:c7:97:5d:35:38:ad:d8:2d:f0:93:46:57:ae:a6:
c8:f4:7e:68:ad:4c:10:9d:b7:3b:9d:1a:8a:b5:9a:
4f:55:63:4c:5f:01:61:6f:ef:1a:07:57:b3:9e:c4:
97:83:09:11:fd:2e:c9:56:02:1c:1f:9e:ce:07:e8:
07:e5:9b:2b:44:ca:74:7e:c1:04:cf:6c:7c:43:b3:
1a:09:7c:5d:34:33:06:86:d9:d0:e8:49:07:49:ae:
40:31:51:2e:1a:1e:51:8c:d0:52:83:92:b8:55:6f:
ce:4d:5a:2d:bc:55:14:5c:91:18:c8:b1:c8:26:09:
fd:e2:ef:89:12:4a:48:6a:9c:7a:77:c3:a6:8a:aa:
71:7a:fb:52:a6:5f:4a:cf:8f:a4:9d:d1:d8:23:62:
2a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:49:75:1B:C3:D3:24:9A:54:91:C8:B9:AE:DE:E2:82:8E:0C:3E
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232342e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.224.0/24
Signature Algorithm: sha256WithRSAEncryption
12:12:f7:16:8d:de:3b:3f:2b:ed:00:20:3f:75:62:a8:8c:7d:
17:1a:52:76:f3:97:dc:ca:f1:54:47:9a:d2:bb:bb:b5:14:9e:
b8:df:45:ef:2a:b3:47:2b:96:d0:03:ed:60:5b:dc:07:0c:c7:
21:b2:cc:4e:15:c4:4a:96:e2:e1:d8:11:95:b9:13:08:5c:2f:
29:e0:fc:ca:8c:e6:c2:31:cb:5b:e5:9c:00:f8:56:d2:5f:3f:
fa:50:27:d1:a1:ce:cb:32:26:13:c5:bc:19:1a:ec:01:8b:e4:
43:05:2c:89:22:e3:b3:de:47:54:c3:f0:fd:13:61:9e:11:cd:
d2:4c:25:00:a1:29:f4:9a:8d:47:7d:57:5e:68:e3:07:75:1c:
11:12:10:09:d7:8b:a9:b7:8e:98:bc:ec:91:69:78:88:81:bc:
b7:e6:40:a4:ac:49:f5:02:00:89:6c:d7:9c:5c:19:7f:93:4d:
dc:89:ee:f1:59:d6:eb:db:b9:29:d7:49:fa:c6:20:2d:5d:c7:
34:ee:36:fe:ae:de:29:90:18:3b:9f:30:da:8d:cd:6f:2b:7b:
14:7d:72:eb:06:d4:6d:a0:3b:9d:4a:c2:22:0c:54:67:60:a2:
16:22:5f:ac:cb:f2:23:d0:db:27:f9:74:3b:ac:a3:fd:98:eb:
67:54:56:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:12 2026 by rpki-client