
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232352e302f32342d3234203d3e203138313138.roa
File: 3132302e34372e3232352e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: W+d4H5FcQ0N8izXeO76SX4RboCnjSVWnm0M/GFhiPDc=
Subject key identifier: FD:B5:CD:15:B6:88:E7:07:FC:DF:8C:1F:44:C3:F4:A9:15:EC:55:CE
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 69D96F85FED1C561830029A6269D9C223FFDEEC7
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232352e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:09:53 +0000
ROA not before: Fri 26 Jun 2026 04:04:53 +0000
ROA not after: Fri 25 Jun 2027 04:09:53 +0000
asID: 18118
IP address blocks: 120.47.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:d9:6f:85:fe:d1:c5:61:83:00:29:a6:26:9d:9c:22:3f:fd:ee:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:04:53 2026 GMT
Not After : Jun 25 04:09:53 2027 GMT
Subject: CN=FDB5CD15B688E707FCDF8C1F44C3F4A915EC55CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:cb:6b:68:bd:6c:98:f5:e8:6f:47:83:d7:
a9:fd:ee:de:ef:7d:76:5f:d7:74:07:5c:30:ec:f8:
9d:6d:6a:e8:19:6d:c3:53:d4:c4:bc:59:10:a9:de:
0c:74:72:06:7f:59:45:f8:7f:81:05:d1:79:e6:60:
66:ca:fe:54:e3:ea:d6:d2:31:e5:86:ae:5d:31:72:
64:fe:6d:00:13:7f:ba:43:33:c0:a0:76:6c:dd:aa:
d1:cf:dc:50:d0:95:94:dc:13:18:07:95:10:77:a7:
ee:49:a0:53:f1:1b:1d:44:19:e0:d0:86:17:a5:ea:
06:5d:7b:46:2c:99:9b:f9:01:f5:55:68:8f:22:06:
66:a5:96:6f:0a:b2:cf:bd:1c:f4:f2:0e:c7:46:b2:
00:fe:2a:10:c7:bc:fd:5a:3b:79:bf:64:07:e4:38:
94:7c:b1:c7:52:c4:79:9a:34:2e:89:e2:2b:e8:10:
11:cd:43:1b:20:5d:97:63:30:bc:e9:fd:c1:0e:f6:
22:68:48:13:0c:dc:e6:1a:06:e3:9c:46:e3:da:a8:
1c:50:eb:e5:d8:f0:ef:ed:52:7f:cd:a5:ea:93:20:
27:e7:fc:08:82:9e:a0:44:e1:46:1c:2d:c3:1e:05:
c2:e0:36:bd:4a:9f:11:86:56:fa:73:ca:d5:48:ba:
56:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:B5:CD:15:B6:88:E7:07:FC:DF:8C:1F:44:C3:F4:A9:15:EC:55:CE
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232352e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.225.0/24
Signature Algorithm: sha256WithRSAEncryption
23:27:64:6a:72:bd:9b:d2:93:1a:7c:be:9c:e0:0b:92:fd:57:
e8:bf:7a:c3:50:d3:97:9c:54:20:ff:7c:e4:23:31:a1:4d:66:
0f:b1:cb:01:2c:f8:ca:ae:f5:38:06:a5:ef:1b:96:bd:1d:42:
01:ca:9c:c2:fe:9d:73:5b:41:76:0f:18:d4:65:d5:26:ec:ee:
1e:87:21:cd:91:02:e0:9c:7d:ab:0b:0f:5f:ef:45:83:e0:1f:
ff:56:91:dc:8c:ac:88:22:20:e1:30:d9:ef:d8:65:37:4d:c6:
be:ad:be:b2:d9:7e:b9:4e:fe:4a:af:c4:a3:97:62:5b:98:90:
6e:18:ed:65:dd:0c:4a:e3:4d:db:ef:4b:da:e1:0f:6d:a4:be:
97:05:57:82:87:e0:68:e9:22:3e:42:f2:cd:44:db:8b:c2:d3:
5c:e1:49:01:40:73:7b:8e:a4:03:db:ce:f8:9c:f7:56:0e:5a:
c7:fe:3e:37:40:0b:8b:e3:e0:d6:a0:6a:53:ea:98:d5:c8:47:
1c:0d:e1:40:b8:c1:54:a2:94:a0:6a:e8:fe:20:9a:38:70:16:
9d:8d:a3:f1:46:85:d0:17:06:51:22:9b:ed:7f:e6:84:5c:cd:
7c:ea:7a:1d:6c:45:7c:05:3e:29:b0:e3:a3:e3:85:49:a0:43:
45:eb:a3:33
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUadlvhf7RxWGDACmmJp2cIj/97scwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDA0NTNaFw0yNzA2MjUwNDA5NTNaMDMxMTAvBgNV
BAMTKEZEQjVDRDE1QjY4OEU3MDdGQ0RGOEMxRjQ0QzNGNEE5MTVFQzU1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyLctraL1smPXob0eD16n97t7v
fXZf13QHXDDs+J1taugZbcNT1MS8WRCp3gx0cgZ/WUX4f4EF0XnmYGbK/lTj6tbS
MeWGrl0xcmT+bQATf7pDM8CgdmzdqtHP3FDQlZTcExgHlRB3p+5JoFPxGx1EGeDQ
hhel6gZde0YsmZv5AfVVaI8iBmallm8Kss+9HPTyDsdGsgD+KhDHvP1aO3m/ZAfk
OJR8scdSxHmaNC6J4ivoEBHNQxsgXZdjMLzp/cEO9iJoSBMM3OYaBuOcRuPaqBxQ
6+XY8O/tUn/NpeqTICfn/AiCnqBE4UYcLcMeBcLgNr1KnxGGVvpzytVIulY1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU/bXNFbaI5wf834wfRMP0qRXsVc4wHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMxMzIzMDJlMzQz
NzJlMzIzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHgv4TANBgkqhkiG9w0BAQsFAAOCAQEAIydkanK9m9KTGny+nOALkv1X
6L96w1DTl5xUIP985CMxoU1mD7HLASz4yq71OAal7xuWvR1CAcqcwv6dc1tBdg8Y
1GXVJuzuHochzZEC4Jx9qwsPX+9Fg+Af/1aR3IysiCIg4TDZ79hlN03Gvq2+stl+
uU7+Sq/Eo5diW5iQbhjtZd0MSuNN2+9L2uEPbaS+lwVXgofgaOkiPkLyzUTbi8LT
XOFJAUBze46kA9vO+Jz3Vg5ax/4+N0ALi+Pg1qBqU+qY1chHHA3hQLjBVKKUoGro
/iCaOHAWnY2j8UaF0BcGUSKb7X/mhFzNfOp6HWxFfAU+KbDjo+OFSaBDReujMw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:16 2026 by rpki-client