
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e302e302f31362d3136203d3e203138313138.roa
File: 3231392e37322e302e302f31362d3136203d3e203138313138.roa (raw, json)
Hash identifier: 1xdiEwHaWkmQ8Nqb8ra913LtFBm6gsBdAEOlQHxbAQ0=
Subject key identifier: DC:94:9A:D9:80:8E:B0:43:C8:F6:AF:FE:42:A7:88:97:54:33:5D:E5
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 11FE229966D9F16BB6F47D226C2D831F9119D6EA
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e302e302f31362d3136203d3e203138313138.roa
Signing time: Mon 29 Jun 2026 09:35:58 +0000
ROA not before: Mon 29 Jun 2026 09:30:58 +0000
ROA not after: Mon 28 Jun 2027 09:35:58 +0000
asID: 18118
IP address blocks: 219.72.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:fe:22:99:66:d9:f1:6b:b6:f4:7d:22:6c:2d:83:1f:91:19:d6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 29 09:30:58 2026 GMT
Not After : Jun 28 09:35:58 2027 GMT
Subject: CN=DC949AD9808EB043C8F6AFFE42A7889754335DE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:c1:61:a9:e1:fc:57:36:20:51:48:fa:d9:64:
b6:7b:e5:26:92:e5:27:55:6f:10:c3:0b:26:f7:fb:
62:94:3d:40:ae:79:05:0e:a9:55:4b:42:23:ef:3b:
bd:cb:38:0c:e5:15:7a:53:22:d6:37:a3:be:7b:3d:
37:35:b8:34:62:6b:b8:c3:09:1a:58:df:0d:ed:f6:
05:f3:47:8f:cb:2b:b1:f9:79:46:70:67:bf:ed:89:
54:bb:37:9f:a7:7c:1d:31:f5:4a:36:72:37:2f:2e:
73:82:e5:eb:62:70:82:61:75:bd:5a:46:f8:47:7a:
b4:16:1f:62:15:83:35:dd:02:56:e0:f4:d3:86:b8:
6f:6a:e6:d5:ca:b8:99:e4:19:60:67:1a:23:7a:7b:
bf:24:2d:5a:5a:da:9c:d2:39:3e:75:d3:ab:5a:0d:
d8:67:1e:51:6b:b6:24:28:cb:7b:89:19:2a:e8:c0:
69:fb:7e:ac:26:5c:6c:f5:79:e5:58:c8:0f:9c:e0:
81:de:e1:78:b6:f7:bc:c7:a4:4e:96:bf:13:e8:2e:
38:f6:43:74:d6:52:4d:0a:c5:47:26:d1:be:d3:b9:
7b:bb:5a:30:da:3b:1a:a2:3a:49:73:c6:4c:f1:db:
60:4a:f2:83:07:3a:40:15:20:fd:bf:0f:08:fb:13:
2a:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:94:9A:D9:80:8E:B0:43:C8:F6:AF:FE:42:A7:88:97:54:33:5D:E5
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e302e302f31362d3136203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a4:cc:5e:1d:b6:a2:4e:b0:00:5f:91:58:f6:d7:bf:92:e4:96:
d3:ea:53:42:77:a9:0d:3e:d5:7c:12:70:47:95:14:c9:26:ed:
8b:de:43:8d:07:08:ec:79:00:a3:30:c9:d8:d1:70:7c:84:68:
ca:0e:0c:5a:4b:48:7f:83:0f:8f:ee:78:b6:0f:f0:26:fc:b5:
f2:1a:49:d0:23:f7:42:b0:a7:8a:fa:71:41:81:83:0c:23:ac:
6f:7f:66:1e:ad:43:d2:a6:53:d8:40:ae:04:79:96:a9:47:e6:
ce:0c:77:75:52:7c:4c:d5:24:ad:cb:2e:ed:d1:91:2b:66:c1:
c5:d6:7a:f8:09:f3:81:8f:e9:d8:3f:c0:07:b7:b5:8f:4d:c9:
e6:ac:a2:3d:54:7b:a6:69:48:c6:19:7b:ce:01:25:dc:25:c9:
bc:5c:a8:d7:19:c3:92:c0:ce:3e:f1:b1:20:31:c4:c8:35:fd:
51:27:7a:cb:2e:98:a3:5e:e3:04:59:c4:43:4a:ac:b0:84:43:
ac:b4:97:1f:6c:3b:d8:bc:c8:3b:1b:94:0c:79:b9:96:2e:81:
d6:28:a8:0f:a7:1a:41:ca:0f:ce:a3:d4:f3:0e:29:aa:ce:e3:
65:92:b5:8f:79:81:fb:39:14:64:60:9c:d4:fa:50:82:39:6d:
64:64:d2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:26:22 2026 by rpki-client