
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3130342e302f32312d3231203d3e203138313138.roa
File: 3231392e37322e3130342e302f32312d3231203d3e203138313138.roa (raw, json)
Hash identifier: eSHa0AbFkwa5C35Sm0vg9uELh08APBwCcONxb38UBHc=
Subject key identifier: 63:FD:AC:4F:2C:29:DC:46:CA:59:75:65:20:60:32:6F:87:F4:1A:73
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 41C3E51FA4D4DEECD207A606EFCCB1503EF8C6EF
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3130342e302f32312d3231203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:43:10 +0000
ROA not before: Fri 26 Jun 2026 04:38:10 +0000
ROA not after: Fri 25 Jun 2027 04:43:10 +0000
asID: 18118
IP address blocks: 219.72.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:c3:e5:1f:a4:d4:de:ec:d2:07:a6:06:ef:cc:b1:50:3e:f8:c6:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:38:10 2026 GMT
Not After : Jun 25 04:43:10 2027 GMT
Subject: CN=63FDAC4F2C29DC46CA5975652060326F87F41A73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:24:dd:d2:d5:07:cf:5e:74:ab:72:05:6b:9d:
a2:81:49:5e:ca:71:5b:6b:11:c8:98:bf:fa:2a:0f:
26:88:50:92:7c:c4:ba:be:27:41:3d:bd:71:2c:8e:
5c:6d:44:4a:18:45:e0:d7:a7:40:2f:51:8b:1c:b6:
34:e8:16:60:c8:52:88:19:1e:1b:82:2a:f1:61:e3:
73:ca:75:11:68:46:da:42:b4:23:b1:f7:1a:fa:8d:
e7:b3:ef:e0:85:ac:48:cf:f2:05:51:6c:04:3a:6f:
07:88:04:2b:1a:f5:d9:33:ff:37:12:a3:b9:7f:3c:
35:23:0a:13:e5:74:b8:aa:e4:2b:03:64:9c:af:89:
d6:5e:47:5e:6a:61:e5:68:54:1e:19:30:8f:ab:02:
95:3b:26:ef:92:77:42:0b:14:b7:ca:62:a3:fc:db:
04:1a:22:c0:a2:e7:83:04:dc:54:cf:e4:c1:66:e2:
51:7c:85:bb:08:40:c6:28:11:c5:23:9e:01:93:ed:
f8:97:c3:e9:11:bc:9f:3d:30:96:f4:91:17:76:3f:
86:a8:f9:ac:d2:01:28:95:8e:b5:2d:fb:95:90:b1:
24:23:57:78:d5:42:f4:ca:fa:5c:84:e3:4e:95:6c:
6a:0f:cd:46:01:49:79:a8:b0:17:70:e7:c9:20:21:
95:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FD:AC:4F:2C:29:DC:46:CA:59:75:65:20:60:32:6F:87:F4:1A:73
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3130342e302f32312d3231203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.104.0/21
Signature Algorithm: sha256WithRSAEncryption
2b:ce:76:64:8a:5d:29:5e:18:d2:ea:6b:39:c8:3b:4f:41:7f:
f9:ee:ab:a6:70:6f:3a:37:1e:4d:83:7b:61:7c:af:ca:27:bc:
5d:33:2a:b1:86:42:55:ed:20:c9:92:6f:17:08:d7:4d:37:06:
bd:86:56:6a:60:3d:06:93:b1:40:8c:90:b0:c0:3b:75:28:38:
fa:31:0f:f3:f1:86:35:61:e3:21:08:31:b5:01:88:3d:19:05:
d1:b7:1e:e1:e1:cd:c2:33:70:7f:74:28:0e:6d:9b:57:62:9f:
21:45:8f:e4:14:4b:d8:74:af:08:87:f8:7d:7a:82:99:ce:58:
c4:c5:3c:b0:14:c3:83:f1:ae:5a:d9:d2:a2:ef:71:46:b3:a0:
7e:be:b1:da:90:db:79:f9:95:98:d7:2d:84:a7:a4:38:2c:2b:
78:8d:df:1e:2e:bc:da:6c:ef:ca:d4:be:07:a0:53:3f:23:35:
34:1c:2d:5b:32:21:d6:e8:b4:f7:f5:82:74:3b:20:e4:fd:4b:
2a:d0:73:ea:87:0e:1f:0a:e3:b5:b2:82:b4:22:c4:8b:cc:81:
d4:9e:14:10:fd:39:3a:59:78:b9:4e:d8:65:48:0f:67:db:93:
62:b6:e9:2b:8e:65:d8:da:b7:ec:3e:52:e4:b5:31:03:02:a4:
1e:a0:63:f7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:19:33 2026 by rpki-client