
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e3131312e302f32342d3234203d3e203138313138.roa
File: 3132322e34382e3131312e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: TKpl2UG67lvb8bpgcBB1U8FaNv/+3fTRGeVplKAuT5I=
Subject key identifier: 43:F3:D9:51:5B:98:CE:9C:58:53:46:60:5D:56:D0:62:44:4B:54:A7
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 3EA18630117E559055D150C7F70635933C8755C9
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e3131312e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:43:11 +0000
ROA not before: Fri 26 Jun 2026 04:38:11 +0000
ROA not after: Fri 25 Jun 2027 04:43:11 +0000
asID: 18118
IP address blocks: 122.48.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a1:86:30:11:7e:55:90:55:d1:50:c7:f7:06:35:93:3c:87:55:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:38:11 2026 GMT
Not After : Jun 25 04:43:11 2027 GMT
Subject: CN=43F3D9515B98CE9C585346605D56D062444B54A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:10:71:05:da:c1:e0:90:ae:9b:bc:bc:94:d9:
68:33:a0:81:29:7f:22:a2:53:7a:81:31:71:cb:04:
b3:39:41:f6:75:ea:18:be:a2:38:34:be:ba:21:99:
3f:c7:a6:47:89:2d:77:4a:e3:87:14:62:ac:7f:7a:
35:54:97:98:f7:0f:bc:cc:73:87:c8:e4:75:c5:bf:
e1:62:13:d8:44:c0:7d:e2:1e:4a:09:db:a2:8e:55:
cf:5b:c8:f0:09:cc:96:bd:da:27:8f:52:95:13:bf:
e3:bd:5b:45:8e:0e:ea:e3:4c:c1:49:91:7b:38:ae:
ba:fd:67:47:97:af:1d:11:5c:4c:9c:a8:07:a0:79:
95:8b:7b:b7:8f:5f:0d:e7:32:b1:0e:1f:be:61:93:
c5:7a:22:4f:6f:f6:6a:c5:95:f2:e6:23:06:af:2e:
de:96:c4:ee:da:55:38:1a:fc:45:af:47:b0:e9:5e:
13:a5:75:27:c4:58:9c:c0:36:3b:0b:7d:d8:be:9a:
20:8a:f2:f0:50:5b:f8:cf:39:4b:a0:49:51:22:d2:
3b:0d:8f:cf:da:e1:67:59:cf:f7:8d:ea:36:46:5c:
ac:59:fc:3a:91:bf:4f:ad:31:1e:a6:e5:2c:56:dc:
a5:c5:58:37:22:e3:7f:df:67:6a:de:dc:ea:60:fb:
de:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F3:D9:51:5B:98:CE:9C:58:53:46:60:5D:56:D0:62:44:4B:54:A7
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132322e34382e3131312e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.48.111.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:db:8e:05:a0:e0:21:55:48:bf:2f:be:65:e3:df:79:18:a4:
13:27:e6:5b:98:bd:e7:f8:3d:86:3f:b6:92:46:40:12:07:cc:
1f:8d:66:79:43:ec:30:61:8b:83:19:57:16:a2:70:68:83:0b:
2e:58:f7:87:43:4c:2b:3b:33:36:c3:48:a5:49:86:1d:5e:2d:
b8:95:e9:80:30:86:06:67:db:24:2b:80:07:b1:ca:e5:88:c5:
1a:00:96:c6:42:c2:d3:13:74:90:be:a0:32:77:4f:ba:9e:62:
79:28:06:89:d6:19:0e:f3:1b:50:6d:c8:67:d0:6d:f1:ef:f7:
5c:5d:48:05:5a:7a:80:37:7e:aa:22:f6:e2:bb:e7:06:56:1d:
55:4e:50:bc:7a:ed:e4:98:12:af:ca:2e:6c:5c:6e:f6:2d:87:
6e:8a:e4:0d:e7:46:fa:63:28:62:8c:24:5c:9b:06:1d:5f:60:
b8:37:e8:a4:81:db:6b:c7:ee:cf:dd:6b:37:65:33:f6:1d:a5:
02:9b:d6:08:2b:c7:69:62:b5:5b:ad:45:de:c6:ba:94:b9:5d:
d1:36:0a:ec:c0:3e:9f:80:72:38:3f:c2:e3:f9:5e:51:66:a8:
4a:d5:11:d2:e5:d1:71:dc:a4:10:d4:78:f2:04:8c:3a:64:16:
70:38:b8:8b
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUPqGGMBF+VZBV0VDH9wY1kzyHVckwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDM4MTFaFw0yNzA2MjUwNDQzMTFaMDMxMTAvBgNV
BAMTKDQzRjNEOTUxNUI5OENFOUM1ODUzNDY2MDVENTZEMDYyNDQ0QjU0QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EHEF2sHgkK6bvLyU2WgzoIEp
fyKiU3qBMXHLBLM5QfZ16hi+ojg0vrohmT/HpkeJLXdK44cUYqx/ejVUl5j3D7zM
c4fI5HXFv+FiE9hEwH3iHkoJ26KOVc9byPAJzJa92iePUpUTv+O9W0WODurjTMFJ
kXs4rrr9Z0eXrx0RXEycqAegeZWLe7ePXw3nMrEOH75hk8V6Ik9v9mrFlfLmIwav
Lt6WxO7aVTga/EWvR7DpXhOldSfEWJzANjsLfdi+miCK8vBQW/jPOUugSVEi0jsN
j8/a4WdZz/eN6jZGXKxZ/DqRv0+tMR6m5SxW3KXFWDci43/fZ2re3Opg+96lAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUQ/PZUVuYzpxYU0ZgXVbQYkRLVKcwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMxMzIzMjJlMzQz
ODJlMzEzMTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHowbzANBgkqhkiG9w0BAQsFAAOCAQEAxNuOBaDgIVVIvy++ZePfeRik
EyfmW5i95/g9hj+2kkZAEgfMH41meUPsMGGLgxlXFqJwaIMLLlj3h0NMKzszNsNI
pUmGHV4tuJXpgDCGBmfbJCuAB7HK5YjFGgCWxkLC0xN0kL6gMndPup5ieSgGidYZ
DvMbUG3IZ9Bt8e/3XF1IBVp6gDd+qiL24rvnBlYdVU5QvHrt5JgSr8oubFxu9i2H
borkDedG+mMoYowkXJsGHV9guDfopIHba8fuz91rN2Uz9h2lApvWCCvHaWK1W61F
3sa6lLld0TYK7MA+n4ByOD/C4/leUWaoStUR0uXRcdykENR48gSMOmQWcDi4iw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:45 2026 by rpki-client