
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32322d3232203d3e203138313138.roa
File: 3231392e37322e3135362e302f32322d3232203d3e203138313138.roa (raw, json)
Hash identifier: lRGGkabU8qjGN7SONmGJAGKnx+jvureShoRJYJPwE9k=
Subject key identifier: EF:F3:51:0B:AE:1A:F7:F2:E3:34:0B:B6:B7:6B:01:80:A0:DC:23:F0
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 6B2167CC90C8CCC218D9E9D8508DE0BD431390F3
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32322d3232203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:43:11 +0000
ROA not before: Fri 26 Jun 2026 04:38:11 +0000
ROA not after: Fri 25 Jun 2027 04:43:11 +0000
asID: 18118
IP address blocks: 219.72.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:21:67:cc:90:c8:cc:c2:18:d9:e9:d8:50:8d:e0:bd:43:13:90:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:38:11 2026 GMT
Not After : Jun 25 04:43:11 2027 GMT
Subject: CN=EFF3510BAE1AF7F2E3340BB6B76B0180A0DC23F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3e:54:b6:d5:25:5a:b6:7f:b4:98:45:2d:55:
37:9f:7b:d4:05:b6:9a:34:77:ec:b1:f5:0d:f0:bb:
f5:15:e3:b6:6a:3e:f9:9a:24:4e:52:e3:23:d5:b5:
9e:5d:e7:86:17:9d:9a:41:68:7f:f1:81:20:4c:5f:
62:01:5c:3c:45:72:b6:f0:fd:02:8a:6d:86:5e:82:
84:ad:ae:51:4a:b2:ac:29:be:6d:78:fb:d5:1d:8b:
53:ce:2a:28:7f:be:d8:8d:05:9e:11:e5:ea:64:e6:
23:5e:ac:1c:24:44:b3:2e:e3:a8:9e:33:95:28:87:
37:5e:14:18:dd:a9:24:8b:02:c9:8b:b1:09:2c:d8:
19:54:f1:fa:df:81:99:80:75:25:0a:d4:ef:6b:12:
a9:b9:75:0c:19:79:3a:9c:f8:b9:ee:49:fd:a6:f0:
99:0a:e0:76:22:de:4d:29:d3:be:62:f1:64:e9:75:
8d:5f:22:07:db:6d:9b:0e:01:6a:55:f5:08:df:ae:
f9:62:05:ff:fb:52:08:26:a4:3e:cd:2d:58:34:51:
35:b8:6c:67:66:79:1a:2d:97:b5:e3:67:d0:72:fc:
b5:15:33:3c:30:eb:e0:66:b5:8d:27:6b:63:07:a0:
cc:29:b0:bf:a1:39:f0:c4:c1:af:56:70:d0:ad:b6:
cc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F3:51:0B:AE:1A:F7:F2:E3:34:0B:B6:B7:6B:01:80:A0:DC:23:F0
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3135362e302f32322d3232203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.156.0/22
Signature Algorithm: sha256WithRSAEncryption
d3:7b:bd:b7:dd:88:ee:01:c4:75:20:73:fd:4d:9f:81:cd:dc:
74:3b:94:28:e2:1d:bd:68:35:d2:ed:2e:3c:6f:a6:c8:c9:6e:
83:b9:bd:dd:cb:24:9a:f3:8b:71:fe:d5:8e:cd:ae:98:3b:2f:
40:13:ab:d0:7d:53:e8:39:cc:11:1c:5a:61:f6:9e:4a:20:db:
c0:f3:fb:71:4a:56:7b:37:98:4e:d5:ad:c8:78:5b:dc:f8:1c:
89:0b:8b:cb:6b:da:9a:65:b2:18:2f:32:27:ed:c0:36:09:0f:
4d:83:a8:49:61:e8:84:bf:59:b0:f5:c9:fc:4e:2b:01:14:b2:
e5:bd:fa:28:1e:c3:b9:90:ce:b8:87:bd:7b:2a:69:53:ad:7b:
fc:40:53:da:94:e2:b9:38:3d:3c:95:e8:aa:31:34:7c:ff:57:
b1:44:1a:b6:e8:cf:9f:a6:06:0b:f5:e2:36:d6:56:ea:d3:f7:
a7:0a:5f:87:b2:69:b7:64:86:c6:88:20:da:58:17:72:3a:ea:
b5:9b:92:59:38:d4:aa:92:95:27:f9:77:e9:c4:9f:4b:b6:6c:
fc:81:a0:55:b9:29:d4:38:00:2d:33:01:e6:cc:bf:56:60:c6:
4b:2d:8a:c4:6f:e7:b6:db:c1:1a:39:67:c5:99:ec:68:91:f3:
01:7b:f3:bd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:34 2026 by rpki-client