
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32342d3234203d3e203138313138.roa
File: 3231392e37322e3135322e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: l8Y3W0AGgFJzO3UokDmZofP8PqteXFVyr2ynYlbHJdc=
Subject key identifier: BE:E4:A5:BD:1A:CF:52:6C:56:BE:89:39:AB:8D:63:D2:5B:78:00:5A
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 19C558D36E067EF75DD2CE17FE2103BD673AB6B4
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:12:41 +0000
ROA not before: Fri 26 Jun 2026 04:07:41 +0000
ROA not after: Fri 25 Jun 2027 04:12:41 +0000
asID: 18118
IP address blocks: 219.72.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:c5:58:d3:6e:06:7e:f7:5d:d2:ce:17:fe:21:03:bd:67:3a:b6:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:07:41 2026 GMT
Not After : Jun 25 04:12:41 2027 GMT
Subject: CN=BEE4A5BD1ACF526C56BE8939AB8D63D25B78005A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:36:58:ad:7c:49:99:16:31:66:7c:18:d9:6e:
ba:34:c8:46:ee:b9:0a:a2:3f:c9:d9:c3:05:df:32:
3c:7e:a7:47:a7:ca:e0:49:bd:fd:70:16:1e:ef:62:
5a:29:e8:20:59:3c:79:a2:a4:26:e0:3a:50:0c:1e:
04:6f:00:7a:4d:b1:29:61:05:2b:59:ed:12:40:68:
18:fd:31:32:44:13:93:58:94:ea:05:2a:b7:64:a7:
ea:41:6e:b7:6e:45:e6:b5:43:88:48:6c:56:8a:a9:
ab:b7:8b:58:72:07:1a:b9:44:f8:fe:7f:8e:a6:e0:
88:6d:12:fe:a8:91:ac:b9:a7:48:fe:b6:92:be:e9:
0c:7a:7a:32:76:80:70:cc:73:9f:e0:0b:b2:73:05:
c7:bd:87:8d:82:e8:bc:f4:17:3a:d2:0b:10:4d:47:
95:39:b6:c0:1a:19:c3:3b:90:4d:11:59:8d:b5:3a:
ed:0d:71:cd:fa:56:2d:19:66:ac:7b:2d:48:f8:13:
71:f3:19:cb:3a:18:0f:45:7d:05:bd:a3:bc:60:6a:
9b:e0:74:bb:99:7b:eb:75:26:40:2c:75:a7:08:f4:
8e:74:aa:0b:99:89:7a:76:d2:0c:80:f9:4a:96:28:
bd:70:d5:cb:f1:28:56:42:fb:37:78:ea:d8:f9:37:
39:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:E4:A5:BD:1A:CF:52:6C:56:BE:89:39:AB:8D:63:D2:5B:78:00:5A
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135322e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.152.0/24
Signature Algorithm: sha256WithRSAEncryption
33:82:1f:d5:c3:da:86:25:93:60:83:9d:e4:5a:11:4e:fd:3e:
e5:ca:c2:a6:3a:94:49:16:f9:b2:b2:b8:4d:f1:8d:db:9d:b6:
0d:dc:91:dd:8e:68:ae:e9:4d:db:c0:2e:94:d0:e7:3a:e1:99:
e1:b8:06:61:45:7d:97:4e:55:61:a9:99:b5:82:a4:41:07:38:
ff:5d:6e:e1:99:7b:62:15:a2:1d:bf:91:e4:15:28:61:74:d7:
48:d5:17:23:38:63:04:4d:45:d8:91:34:bf:b2:bc:79:32:59:
8f:49:21:8a:cd:37:c0:16:bf:53:e3:fe:49:c2:f3:b1:ee:09:
7d:3f:62:b0:d1:9f:59:21:7a:0e:3f:93:7d:6a:96:20:da:fe:
30:34:89:35:74:95:13:ce:81:d9:0e:50:d1:78:96:f4:3e:1b:
03:21:aa:85:b6:e4:41:d4:c2:15:aa:c7:6d:6c:f3:3b:58:48:
f5:3d:ed:7a:72:61:c4:73:7d:70:25:0a:81:59:41:0c:be:5a:
f4:95:a8:1f:bd:4a:ed:42:d0:b1:bb:4e:ea:83:11:88:51:d9:
03:c5:43:90:d9:0d:bb:34:99:27:ab:ef:f3:1b:10:a6:d0:cf:
45:82:97:52:e5:cb:65:df:30:c1:0f:ba:bd:ee:bc:cf:62:1e:
d3:10:16:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:33 2026 by rpki-client