
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e36342e302f31392d3139203d3e203138313138.roa
File: 3132302e34372e36342e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier: siz9P/lzCJYR/AnFwvyFnl1LcIQ0L4b0j1tqKbn0Fos=
Subject key identifier: 65:B6:9F:FF:69:38:D3:95:D9:B7:FF:9E:6E:3F:50:13:62:88:02:8E
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 7753F6EB77AB7EC1CEFD12061A5BFA6FCCDE145B
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e36342e302f31392d3139203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:43:11 +0000
ROA not before: Fri 26 Jun 2026 04:38:11 +0000
ROA not after: Fri 25 Jun 2027 04:43:11 +0000
asID: 18118
IP address blocks: 120.47.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:53:f6:eb:77:ab:7e:c1:ce:fd:12:06:1a:5b:fa:6f:cc:de:14:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:38:11 2026 GMT
Not After : Jun 25 04:43:11 2027 GMT
Subject: CN=65B69FFF6938D395D9B7FF9E6E3F50136288028E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:67:51:d7:db:38:52:f9:84:b8:23:77:b1:fc:
be:7b:1b:55:4b:9e:e2:69:a5:b2:10:09:4e:0d:f1:
36:0f:46:2c:32:0f:3a:fd:56:01:c5:b5:a6:71:9f:
bc:09:8e:a4:04:b7:a4:56:49:5a:20:63:26:87:7f:
95:9b:6a:7a:fa:59:8e:f7:c0:db:95:5f:84:64:94:
ae:fb:d7:da:92:bf:e6:a4:f1:fc:3f:bd:87:e6:54:
54:9e:80:bc:61:57:2c:29:e4:2e:56:44:62:4f:54:
a2:83:5a:76:ef:df:11:9b:bf:40:0f:2f:e1:96:c1:
04:d7:5d:a6:6e:30:e7:0c:fa:ff:91:76:8b:1e:16:
5a:99:27:01:41:2a:e2:2d:0c:44:d9:80:08:97:dc:
61:46:58:e0:ca:4c:fa:bc:ad:87:7a:53:a8:a3:04:
67:d1:d5:56:18:00:58:a4:e0:92:4f:cb:5e:48:12:
1a:e0:75:41:26:06:a1:3f:71:4c:71:02:5b:06:68:
5e:a4:5f:6c:ef:78:31:cc:83:13:08:2c:0a:05:3f:
a4:d7:8b:a1:c9:03:3b:1f:c8:99:8c:94:d0:40:61:
10:ea:6f:35:54:a6:e3:d3:cf:0d:52:dd:b2:ad:56:
6a:83:7e:12:88:bf:4e:ec:35:3e:31:1f:1c:66:48:
55:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:B6:9F:FF:69:38:D3:95:D9:B7:FF:9E:6E:3F:50:13:62:88:02:8E
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e36342e302f31392d3139203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.64.0/19
Signature Algorithm: sha256WithRSAEncryption
6d:f8:06:33:16:a8:c2:86:1a:1e:65:11:ec:6c:b8:22:04:2f:
0e:69:ce:78:0e:3e:54:a9:9a:90:57:39:91:e4:bc:47:6a:6f:
c6:6c:5d:fd:8c:0b:83:bf:fb:c1:02:66:bb:08:66:30:8b:c1:
b9:2b:27:f0:af:29:0f:f2:75:32:ea:31:50:8b:ea:20:3a:77:
21:37:2b:44:cb:4b:c5:f2:c4:a3:b8:35:c4:c7:b3:ef:22:47:
3f:51:e2:ec:17:65:cb:1d:55:0e:93:b8:50:55:e0:25:b6:65:
67:ef:06:22:be:0d:ff:ad:f9:b7:8a:93:05:0c:e5:fd:a9:61:
05:80:85:c5:53:01:3b:f5:f8:57:ed:44:2f:65:6b:4e:3b:bf:
0c:b4:73:e4:32:99:c4:a0:b8:39:92:f4:a1:93:36:72:15:0a:
2e:08:89:9c:5c:28:62:f9:1d:7d:f3:9c:d8:8f:cb:f5:e9:79:
af:cf:16:ae:36:65:82:5f:79:64:f4:82:49:7a:b5:e7:6e:af:
af:8a:03:fd:4d:3e:4b:f3:e9:54:14:59:f1:9a:ba:01:29:60:
15:6e:e4:ab:e2:95:28:51:3e:d7:b6:75:56:82:58:7a:18:ff:
e7:42:d0:66:9c:c5:a5:57:f6:ca:5e:19:71:14:9d:41:ee:67:
f6:6d:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:02 2026 by rpki-client