
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232372e302f32342d3234203d3e203138313138.roa
File: 3132302e34372e3232372e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: m/KBPjwNcjIwu56k9h61wT1p34SagqR8yVB8BHTYgvQ=
Subject key identifier: AC:47:C0:92:0D:D8:55:B8:A7:96:0C:8D:EB:A9:0E:74:27:93:02:2E
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 45BB29115D6F3E5CD3E547E0E410959F429E28B1
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232372e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:09:53 +0000
ROA not before: Fri 26 Jun 2026 04:04:53 +0000
ROA not after: Fri 25 Jun 2027 04:09:53 +0000
asID: 18118
IP address blocks: 120.47.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:bb:29:11:5d:6f:3e:5c:d3:e5:47:e0:e4:10:95:9f:42:9e:28:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:04:53 2026 GMT
Not After : Jun 25 04:09:53 2027 GMT
Subject: CN=AC47C0920DD855B8A7960C8DEBA90E742793022E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:2e:ac:e2:52:a8:6a:a1:27:46:37:41:bd:
73:22:b2:4f:51:60:2c:22:db:aa:4d:8a:fa:d1:f0:
a6:1f:49:fc:7a:0d:c9:82:56:b8:31:a8:c0:c7:13:
bb:ae:03:a9:fd:a3:85:fb:1e:2a:19:b0:c1:ac:27:
82:7c:bd:88:27:0a:b1:2e:7e:30:b8:aa:3c:1b:8e:
88:61:fb:51:ba:b1:e7:18:2c:45:99:9f:68:ca:d4:
0d:8f:bd:85:13:88:44:b7:86:07:76:89:3b:68:f5:
ff:e0:a2:c9:09:56:52:2c:3d:58:4f:42:9f:5b:18:
48:c6:a8:da:fd:04:84:e9:13:f5:06:91:18:10:17:
5e:d3:a2:93:98:56:19:97:3c:54:ef:d0:7b:03:4a:
db:b8:11:7e:17:24:12:b1:ec:6d:87:41:de:26:e4:
32:e6:90:2c:be:60:97:c4:e0:ae:f1:0e:d1:45:f9:
d4:78:d0:23:56:ac:17:84:7e:be:d5:ca:5f:3d:1c:
e3:25:af:aa:e5:1b:3f:cb:73:a3:10:1c:58:8d:43:
f1:9d:0f:a7:31:e7:fe:ca:2e:2d:66:40:43:c1:c9:
2c:12:69:52:f9:b8:e2:b6:0c:6c:37:f9:d7:46:54:
25:57:1c:d2:b8:b2:15:3b:54:e7:79:76:b3:dc:7c:
3d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:47:C0:92:0D:D8:55:B8:A7:96:0C:8D:EB:A9:0E:74:27:93:02:2E
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232372e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.227.0/24
Signature Algorithm: sha256WithRSAEncryption
70:50:74:c8:ee:ab:74:07:22:57:26:ee:d9:d2:86:34:b9:c8:
f3:8e:6e:93:e3:ed:73:3a:db:83:7d:f5:2f:98:b5:93:c8:1a:
46:87:14:ea:2a:eb:c2:63:6c:86:24:4d:47:db:32:e1:90:92:
97:dc:ca:ab:c1:71:ad:e5:d8:1f:59:7a:00:44:c8:9a:99:54:
5a:57:6b:d6:c9:2a:1f:c0:71:21:d8:24:5e:b1:89:fc:20:fa:
02:2f:98:25:e2:22:b3:48:5f:f6:c7:93:fb:e3:e6:72:4e:7e:
17:f1:d9:5c:85:58:82:22:53:34:c5:f0:8f:e7:49:13:06:71:
36:f2:fd:aa:e6:77:a9:fa:27:c0:9c:a5:bd:65:f6:44:9f:e3:
57:0d:4d:6b:46:b2:40:ee:66:fc:dd:b9:ff:ee:c1:e4:12:93:
28:26:4e:fa:d3:5c:ca:64:37:41:68:62:b8:f8:64:48:ff:20:
03:f9:17:fd:96:da:51:5a:ad:2c:ef:1d:8b:ed:39:4e:a0:70:
52:12:91:ab:e0:76:6a:7f:48:e3:08:93:b6:36:f7:83:31:4a:
81:82:87:eb:87:15:44:5a:ad:db:6d:e8:47:07:a8:13:ed:2e:
fa:03:a0:09:34:4b:bc:69:61:92:e3:ea:57:94:70:02:53:be:
d7:d9:5e:6e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:16 2026 by rpki-client