
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232362e302f32342d3234203d3e203138313138.roa
File: 3132302e34372e3232362e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: TYXMPZojosA6QP4cy5Pvh7HVbNhaYrYsYMYnWSr0dz8=
Subject key identifier: 71:EB:D0:6A:0B:3B:2E:A4:82:C3:47:3B:4E:0F:9F:99:1C:86:F3:F7
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 3CB8A30BE511779077AF53E2D2CD81A1336D830A
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232362e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:09:54 +0000
ROA not before: Fri 26 Jun 2026 04:04:54 +0000
ROA not after: Fri 25 Jun 2027 04:09:54 +0000
asID: 18118
IP address blocks: 120.47.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 15:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:b8:a3:0b:e5:11:77:90:77:af:53:e2:d2:cd:81:a1:33:6d:83:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:04:54 2026 GMT
Not After : Jun 25 04:09:54 2027 GMT
Subject: CN=71EBD06A0B3B2EA482C3473B4E0F9F991C86F3F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d3:e1:c7:84:9a:88:84:c2:73:95:d0:98:5b:
4b:7f:2a:b2:f7:3a:ab:a0:2d:fb:7b:fe:2f:98:a3:
3b:6c:04:ca:b6:48:82:d7:fc:99:4c:59:b6:c2:bb:
6b:77:af:e4:4f:98:49:25:02:3d:1c:a9:42:c9:0d:
2c:c7:77:17:9b:e0:d2:7e:a9:05:b5:99:3f:3f:92:
f6:7d:c3:50:45:a1:3e:2a:92:cb:8a:aa:d9:77:d5:
f3:e3:4b:95:23:d8:2f:2e:4c:23:1e:14:3c:8c:b2:
84:7d:76:d8:38:46:2d:af:57:61:9a:d5:53:8e:16:
44:65:76:a4:ad:f4:25:51:ae:ac:d6:18:7f:0c:c6:
ce:0d:02:b5:83:80:77:df:e9:9b:f3:e7:60:e2:10:
53:45:af:1c:73:6e:d0:a5:c6:3d:07:64:d0:c7:fa:
6d:c9:8e:32:ec:07:2f:63:5c:be:ef:c9:dd:17:40:
7e:95:61:2c:89:a3:61:80:99:a2:91:b3:2a:e5:bf:
36:17:85:83:ad:24:f6:a9:18:88:6b:44:d2:65:df:
25:9d:1a:09:af:5a:c8:9d:19:de:59:cb:de:d9:70:
e0:9a:10:78:ec:0a:75:b1:fc:52:75:30:75:55:a6:
36:6b:62:3a:44:af:bf:c1:86:4a:e7:f9:7d:38:98:
1f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:D0:6A:0B:3B:2E:A4:82:C3:47:3B:4E:0F:9F:99:1C:86:F3:F7
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232362e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.226.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:f4:19:df:f0:fb:0c:c3:09:04:0d:06:8e:4d:8b:29:a8:4c:
c4:0b:ee:86:00:35:2b:90:68:93:54:25:bc:09:3e:a2:e4:17:
73:9c:87:07:68:34:37:a6:90:4e:d8:d3:ec:a7:a6:b0:57:08:
d8:c4:f4:da:1f:24:8b:8a:ed:a2:92:a6:24:5a:74:5c:8a:80:
65:33:c4:be:4f:03:ed:96:cd:46:01:46:6b:11:04:6b:15:49:
9f:64:0f:80:ba:6f:73:b0:c3:25:aa:81:47:c9:5e:4f:aa:22:
d7:2b:2d:90:c8:d5:ac:95:fa:39:f9:88:ad:db:3a:fa:eb:db:
a9:27:ad:cd:db:8e:74:3d:15:d0:60:57:f2:3a:bb:42:99:d0:
11:aa:30:67:93:26:a5:3b:0f:c8:38:98:ca:b5:25:f5:92:6c:
2a:63:7f:04:11:90:77:63:67:18:a9:25:f1:33:b8:c6:8b:d1:
59:1a:b6:9f:10:04:a9:38:99:93:9e:19:fb:5e:26:b0:0c:0d:
8e:63:e5:a9:83:27:f5:8b:6d:ac:96:e5:49:29:dd:28:e4:00:
a0:78:aa:3f:52:b5:5e:ef:6f:d1:ea:4e:7f:0f:03:9d:be:2b:
42:2e:25:21:c2:de:4a:3f:56:90:82:7a:73:a4:f8:9d:ec:38:
fe:a2:02:de
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPLijC+URd5B3r1Pi0s2BoTNtgwowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDA0NTRaFw0yNzA2MjUwNDA5NTRaMDMxMTAvBgNV
BAMTKDcxRUJEMDZBMEIzQjJFQTQ4MkMzNDczQjRFMEY5Rjk5MUM4NkYzRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe0+HHhJqIhMJzldCYW0t/KrL3
OqugLft7/i+YoztsBMq2SILX/JlMWbbCu2t3r+RPmEklAj0cqULJDSzHdxeb4NJ+
qQW1mT8/kvZ9w1BFoT4qksuKqtl31fPjS5Uj2C8uTCMeFDyMsoR9dtg4Ri2vV2Ga
1VOOFkRldqSt9CVRrqzWGH8Mxs4NArWDgHff6Zvz52DiEFNFrxxzbtClxj0HZNDH
+m3JjjLsBy9jXL7vyd0XQH6VYSyJo2GAmaKRsyrlvzYXhYOtJPapGIhrRNJl3yWd
GgmvWsidGd5Zy97ZcOCaEHjsCnWx/FJ1MHVVpjZrYjpEr7/Bhkrn+X04mB+5AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUcevQags7LqSCw0c7Tg+fmRyG8/cwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMxMzIzMDJlMzQz
NzJlMzIzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHgv4jANBgkqhkiG9w0BAQsFAAOCAQEAwPQZ3/D7DMMJBA0Gjk2LKahM
xAvuhgA1K5Bok1QlvAk+ouQXc5yHB2g0N6aQTtjT7KemsFcI2MT02h8ki4rtopKm
JFp0XIqAZTPEvk8D7ZbNRgFGaxEEaxVJn2QPgLpvc7DDJaqBR8leT6oi1ystkMjV
rJX6OfmIrds6+uvbqSetzduOdD0V0GBX8jq7QpnQEaowZ5MmpTsPyDiYyrUl9ZJs
KmN/BBGQd2NnGKkl8TO4xovRWRq2nxAEqTiZk54Z+14msAwNjmPlqYMn9YttrJbl
SSndKOQAoHiqP1K1Xu9v0epOfw8Dnb4rQi4lIcLeSj9WkIJ6c6T4new4/qIC3g==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:32 2026 by rpki-client