
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e203138313138.roa
File: 3132302e34372e39362e302f31392d3139203d3e203138313138.roa (raw, json)
Hash identifier: PN9RoPaPB5o3c5cXb33JZWXH4e3xX7U9Nglz69qQPQ4=
Subject key identifier: 8F:D3:39:A2:BC:92:A8:DD:C0:65:37:F2:DA:46:91:2E:D6:B7:8C:88
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 17260F6A409B7B9227846B0C5C80C6D3054DCA63
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:43:11 +0000
ROA not before: Fri 26 Jun 2026 04:38:11 +0000
ROA not after: Fri 25 Jun 2027 04:43:11 +0000
asID: 18118
IP address blocks: 120.47.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 15:40:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:26:0f:6a:40:9b:7b:92:27:84:6b:0c:5c:80:c6:d3:05:4d:ca:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:38:11 2026 GMT
Not After : Jun 25 04:43:11 2027 GMT
Subject: CN=8FD339A2BC92A8DDC06537F2DA46912ED6B78C88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:15:75:40:a0:6f:8e:2d:58:25:ba:c6:52:c6:
25:63:1a:df:45:b0:25:7d:26:a6:23:e8:d0:26:77:
01:52:92:0f:a4:a1:9b:13:ab:ea:e6:d7:bd:76:8f:
4d:cf:fe:f6:aa:3f:fe:b0:75:2f:d9:ae:50:56:b4:
c2:3b:45:18:6e:1f:52:69:56:42:8e:ae:79:20:b7:
c9:4c:75:fb:64:90:52:f7:1f:c7:2a:7e:a0:79:3f:
62:10:ed:f2:b0:09:f8:06:48:54:05:11:25:31:1c:
2d:28:99:8b:63:94:de:63:99:5f:eb:90:b7:70:9b:
d5:12:af:27:e1:0d:63:8a:20:46:77:ba:e7:d0:fa:
69:55:07:06:44:76:09:c7:f8:c8:f0:2e:77:cd:7e:
30:3c:cc:e5:fe:70:2a:27:5c:e5:13:5d:f3:1a:28:
cd:6f:33:90:b8:23:b7:c2:4a:04:e6:b6:34:c3:80:
55:b4:14:c0:84:4c:22:61:10:ce:b6:0a:82:b8:42:
41:09:25:5b:a5:6e:73:ba:06:5f:c7:bb:c1:a6:0e:
e0:e4:76:8e:88:cd:1f:6b:fd:f2:9c:37:68:78:8e:
70:86:ae:d3:ff:28:76:3a:a5:1e:1a:b5:96:a6:22:
93:30:92:77:d6:94:22:a4:a8:51:2e:64:b1:80:4d:
cd:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D3:39:A2:BC:92:A8:DD:C0:65:37:F2:DA:46:91:2E:D6:B7:8C:88
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e39362e302f31392d3139203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.96.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:f2:b5:9a:69:06:b4:3b:13:32:5a:cd:f0:2e:24:1e:f9:85:
a2:f9:45:74:ec:3f:80:66:d9:8a:26:b7:69:b8:61:a6:a0:42:
c1:c1:0a:37:ee:99:9f:74:c8:de:c1:10:91:ff:03:09:04:4f:
78:c7:f1:0d:7c:5d:68:dc:2d:f6:e1:fa:cc:3f:00:3f:fb:ef:
a5:b5:ff:2e:d6:4e:72:79:c2:e0:5e:18:5b:aa:1e:93:46:44:
7b:0b:c5:df:6a:67:00:04:c0:81:71:0b:13:d4:a7:ef:12:5f:
b6:03:e7:bb:5d:9c:01:7e:1f:11:bc:f1:7f:62:54:9a:a7:14:
9c:d0:f9:c5:c7:38:52:ef:61:0e:26:85:e1:fa:03:c7:da:43:
b8:ab:f5:61:d0:24:79:6c:4f:47:af:8e:a8:a0:c2:e2:ee:44:
02:66:40:ee:ef:17:03:cf:0f:34:6c:a1:a6:15:b7:e3:e8:a0:
63:e8:f7:e9:90:b8:ec:08:fd:33:6a:c0:8c:60:0f:2b:44:dd:
dc:bc:4e:fc:3c:74:25:1f:e8:e9:10:9a:72:d5:94:11:1f:cf:
be:05:72:d4:5f:9b:46:af:2f:39:66:ac:7e:88:fe:6e:4b:96:
40:31:e5:cd:18:e5:14:a1:b8:c9:e6:3d:1d:3c:5e:ea:95:fc:
ac:57:69:c9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUFyYPakCbe5InhGsMXIDG0wVNymMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDM4MTFaFw0yNzA2MjUwNDQzMTFaMDMxMTAvBgNV
BAMTKDhGRDMzOUEyQkM5MkE4RERDMDY1MzdGMkRBNDY5MTJFRDZCNzhDODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFXVAoG+OLVglusZSxiVjGt9F
sCV9JqYj6NAmdwFSkg+koZsTq+rm1712j03P/vaqP/6wdS/ZrlBWtMI7RRhuH1Jp
VkKOrnkgt8lMdftkkFL3H8cqfqB5P2IQ7fKwCfgGSFQFESUxHC0omYtjlN5jmV/r
kLdwm9USryfhDWOKIEZ3uufQ+mlVBwZEdgnH+MjwLnfNfjA8zOX+cConXOUTXfMa
KM1vM5C4I7fCSgTmtjTDgFW0FMCETCJhEM62CoK4QkEJJVulbnO6Bl/Hu8GmDuDk
do6IzR9r/fKcN2h4jnCGrtP/KHY6pR4atZamIpMwknfWlCKkqFEuZLGATc05AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUj9M5orySqN3AZTfy2kaRLta3jIgwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM3
MmUzOTM2MmUzMDJmMzEzOTJkMzEzOTIwM2QzZTIwMzEzODMxMzEzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBXgvYDANBgkqhkiG9w0BAQsFAAOCAQEAwfK1mmkGtDsTMlrN8C4kHvmFovlF
dOw/gGbZiia3abhhpqBCwcEKN+6Zn3TI3sEQkf8DCQRPeMfxDXxdaNwt9uH6zD8A
P/vvpbX/LtZOcnnC4F4YW6oek0ZEewvF32pnAATAgXELE9Sn7xJftgPnu12cAX4f
Ebzxf2JUmqcUnND5xcc4Uu9hDiaF4foDx9pDuKv1YdAkeWxPR6+OqKDC4u5EAmZA
7u8XA88PNGyhphW34+igY+j36ZC47Aj9M2rAjGAPK0Td3LxO/Dx0JR/o6RCactWU
ER/PvgVy1F+bRq8vOWasfoj+bkuWQDHlzRjlFKG4yeY9HTxe6pX8rFdpyQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:46 2026 by rpki-client