
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3134342e302f32312d3231203d3e203138313138.roa
File: 3231392e37322e3134342e302f32312d3231203d3e203138313138.roa (raw, json)
Hash identifier: 9XPM7zIWVsMoDENVWInOnUxQ/Tuuf2OnUAaLtztz3Jw=
Subject key identifier: D2:BE:F9:A1:EF:82:70:04:21:59:05:CD:19:47:F1:BC:4E:DF:27:37
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 5FEEA69EE0D13ECE751B2812AF81127EB1672057
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3134342e302f32312d3231203d3e203138313138.roa
Signing time: Mon 29 Jun 2026 09:36:56 +0000
ROA not before: Mon 29 Jun 2026 09:31:56 +0000
ROA not after: Mon 28 Jun 2027 09:36:56 +0000
asID: 18118
IP address blocks: 219.72.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ee:a6:9e:e0:d1:3e:ce:75:1b:28:12:af:81:12:7e:b1:67:20:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 29 09:31:56 2026 GMT
Not After : Jun 28 09:36:56 2027 GMT
Subject: CN=D2BEF9A1EF827004215905CD1947F1BC4EDF2737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:89:6f:3a:04:c8:ca:99:0e:46:96:e9:61:b1:
5c:69:58:1a:14:51:e4:a0:1f:31:5a:83:fa:60:ef:
a1:fd:37:22:ca:08:ec:e1:18:b4:1f:a2:b4:91:aa:
10:4e:5f:b6:13:b0:74:6d:f9:b7:79:88:ba:fb:27:
e2:25:48:1b:28:10:50:92:13:07:70:bd:b3:37:b3:
62:13:0d:10:2e:00:52:63:d8:dc:20:8d:28:d4:12:
74:33:6e:23:54:ec:e5:fc:98:59:b4:55:ec:31:fd:
37:2d:e5:b7:06:21:71:ac:61:b3:2c:5d:93:ef:3b:
bc:87:85:a7:81:6d:ec:20:bd:35:16:34:32:ed:8f:
0e:ef:5c:aa:e1:af:f2:38:de:c8:e6:83:fe:d4:1d:
ad:e2:4b:e5:1a:b1:b6:67:e0:7c:4b:d1:59:ed:36:
ed:48:86:13:b5:4d:03:0d:4d:6a:84:cd:fd:d5:da:
d7:d2:c6:24:ef:33:e3:16:95:ee:46:29:9e:de:cf:
5a:19:8c:e7:e0:f4:e5:28:ff:51:dd:88:2c:f2:96:
b8:d7:c9:25:5e:f0:14:83:b3:18:ca:67:43:04:c2:
5c:04:b9:43:99:2a:17:05:7e:b7:1e:ec:14:dc:62:
49:fb:86:c2:4c:a2:3e:09:fd:94:12:c6:47:fb:42:
70:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BE:F9:A1:EF:82:70:04:21:59:05:CD:19:47:F1:BC:4E:DF:27:37
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3134342e302f32312d3231203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.144.0/21
Signature Algorithm: sha256WithRSAEncryption
97:88:2a:3d:03:00:3e:9b:81:a3:19:24:9d:dd:12:5a:2b:a1:
16:39:35:b8:9f:a1:bd:9a:55:ec:13:79:af:3d:6a:28:e4:ba:
40:27:15:92:f7:1d:83:74:5d:7d:ec:3c:23:30:cf:97:d0:72:
1a:73:11:d7:56:ad:b3:c5:87:32:d3:3f:fd:90:dc:75:c2:96:
07:5c:af:bc:6a:af:1f:e7:1e:8f:d1:37:e2:78:18:b0:6b:4d:
08:f2:fb:aa:a2:4f:87:1c:45:45:74:1a:c2:8c:9d:60:b5:7c:
b1:90:54:29:56:dd:37:b7:0b:78:6b:6b:20:b6:fe:fc:82:b9:
d1:d7:7a:06:18:dd:a2:14:14:14:6a:b8:60:55:57:61:fc:53:
62:fe:6d:98:24:cd:c0:48:1d:cc:72:f5:e7:e9:39:9f:c5:99:
4b:6f:82:f9:28:58:0e:a6:1f:8d:a2:7a:7b:10:c3:0f:87:55:
b6:a1:54:25:d2:a2:95:92:cc:c8:0c:d4:49:c2:06:af:41:a1:
e2:c0:e9:eb:4a:19:3f:0a:e4:14:c1:44:5e:c2:af:5f:2d:cc:
67:0b:6e:95:83:a3:3a:fb:c4:13:58:dc:56:18:dd:56:ba:07:
a9:11:14:c6:cd:9f:51:48:6f:6b:70:1e:15:e1:03:f5:4a:7d:
22:55:80:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:39 2026 by rpki-client