
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235322e302f32342d3234203d3e203138313138.roa
File: 3231392e37322e3235322e302f32342d3234203d3e203138313138.roa (raw, json)
Hash identifier: W/v++C40i06gWiK7DotYdi6pxDoX4+t9Eg88Ojl4EEw=
Subject key identifier: 7A:AE:B4:EE:D4:E9:CF:B9:98:26:0E:D1:6B:96:57:44:3E:02:43:41
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 2FADC4BBD10E0A9547DC4CEE2E31070B91812B63
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235322e302f32342d3234203d3e203138313138.roa
Signing time: Fri 26 Jun 2026 04:17:30 +0000
ROA not before: Fri 26 Jun 2026 04:12:30 +0000
ROA not after: Fri 25 Jun 2027 04:17:30 +0000
asID: 18118
IP address blocks: 219.72.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ad:c4:bb:d1:0e:0a:95:47:dc:4c:ee:2e:31:07:0b:91:81:2b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 26 04:12:30 2026 GMT
Not After : Jun 25 04:17:30 2027 GMT
Subject: CN=7AAEB4EED4E9CFB998260ED16B9657443E024341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:07:0d:86:22:14:b0:a0:e1:51:11:68:4e:df:
59:0b:b6:dc:b8:76:3f:1a:37:61:c8:64:bb:55:5a:
20:78:c7:f9:cf:09:bc:20:8c:7f:da:08:8a:72:2f:
66:3c:46:17:c7:5e:d3:2a:e5:93:03:13:6d:9e:35:
08:64:e2:a4:0c:4b:92:b1:6b:de:45:c6:ae:e2:4a:
f1:9f:ec:bc:9f:43:9b:cb:e0:24:f8:35:62:21:e0:
29:ea:00:1e:00:24:2e:f1:0d:c8:54:6c:a2:72:20:
ca:df:4a:e9:b0:10:63:85:39:36:81:21:d0:d7:5a:
9d:ed:f2:fc:be:23:80:2a:08:a2:1b:48:9f:12:c0:
ba:db:80:6f:f9:21:9c:71:38:87:ab:80:16:96:13:
38:e5:c7:c1:b0:ab:e4:2b:3d:0e:5d:4f:88:88:0f:
28:fc:aa:48:24:8e:9a:7c:de:4a:fd:9c:b5:6f:c4:
4d:c3:1a:69:d7:fc:77:9b:aa:16:ec:79:d9:3a:b5:
47:79:de:ba:9d:d1:d9:bf:70:26:db:5c:ab:e0:ab:
af:62:93:ae:09:81:9c:fb:49:a1:8c:32:d2:91:b3:
39:c8:4a:bd:fd:e8:d0:66:01:a9:98:43:c6:5f:98:
20:b3:5f:24:b9:15:2f:bb:d6:6f:84:0c:cd:d9:7f:
ce:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:AE:B4:EE:D4:E9:CF:B9:98:26:0E:D1:6B:96:57:44:3E:02:43:41
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235322e302f32342d3234203d3e203138313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.252.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f5:33:a6:44:de:39:fa:31:d2:bf:a9:34:ff:a6:79:df:ef:
73:0a:eb:9f:85:57:36:34:4b:c2:c2:e1:ad:83:cd:ee:4c:3e:
67:8e:1d:e2:bb:5e:e9:d7:9a:00:e3:5d:63:90:39:f1:d5:22:
9b:d5:ae:5a:81:29:67:4d:03:44:2f:b7:2e:0c:50:2a:95:38:
aa:e7:37:7e:5a:94:39:77:05:ae:91:63:cd:08:99:16:52:58:
44:a0:a0:2f:d3:3a:b1:83:c4:e5:0c:ac:16:ed:51:e8:0c:87:
0e:d1:c0:1e:73:14:b9:94:37:2a:c0:a4:ee:3e:ce:e8:b6:37:
32:ce:27:1b:07:da:9a:42:6c:39:ea:8f:4c:06:f7:65:27:71:
4c:19:22:92:99:85:87:61:9e:1b:1b:1e:c9:bf:3f:b2:e0:dd:
e9:d2:49:78:e3:d8:8c:9d:64:cc:db:c5:42:bc:93:da:10:b8:
86:42:60:c3:2f:ab:66:27:0b:04:b4:01:b9:ac:6f:f9:18:35:
ed:81:44:6f:1e:0f:d5:36:b2:72:8c:e8:b2:fd:93:eb:c5:fb:
37:b5:d8:95:74:0e:d3:8c:7f:a2:d6:97:a3:29:86:ad:7d:55:
05:16:d6:b1:b3:57:0f:09:b4:27:5f:04:a7:b3:e1:cd:e6:e5:
ce:28:c3:6a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUL63Eu9EOCpVH3EzuLjEHC5GBK2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MjYwNDEyMzBaFw0yNzA2MjUwNDE3MzBaMDMxMTAvBgNV
BAMTKDdBQUVCNEVFRDRFOUNGQjk5ODI2MEVEMTZCOTY1NzQ0M0UwMjQzNDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZBw2GIhSwoOFREWhO31kLtty4
dj8aN2HIZLtVWiB4x/nPCbwgjH/aCIpyL2Y8RhfHXtMq5ZMDE22eNQhk4qQMS5Kx
a95Fxq7iSvGf7LyfQ5vL4CT4NWIh4CnqAB4AJC7xDchUbKJyIMrfSumwEGOFOTaB
IdDXWp3t8vy+I4AqCKIbSJ8SwLrbgG/5IZxxOIergBaWEzjlx8Gwq+QrPQ5dT4iI
Dyj8qkgkjpp83kr9nLVvxE3DGmnX/Hebqhbsedk6tUd53rqd0dm/cCbbXKvgq69i
k64JgZz7SaGMMtKRsznISr396NBmAamYQ8ZfmCCzXyS5FS+71m+EDM3Zf85ZAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUeq607tTpz7mYJg7Ra5ZXRD4CQ0EwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz
MjJlMzIzNTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzODMxMzEzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEANtI/DANBgkqhkiG9w0BAQsFAAOCAQEARPUzpkTeOfox0r+pNP+med/v
cwrrn4VXNjRLwsLhrYPN7kw+Z44d4rte6deaAONdY5A58dUim9WuWoEpZ00DRC+3
LgxQKpU4quc3flqUOXcFrpFjzQiZFlJYRKCgL9M6sYPE5QysFu1R6AyHDtHAHnMU
uZQ3KsCk7j7O6LY3Ms4nGwfamkJsOeqPTAb3ZSdxTBkikpmFh2GeGxseyb8/suDd
6dJJeOPYjJ1kzNvFQryT2hC4hkJgwy+rZicLBLQBuaxv+Rg17YFEbx4P1Taycozo
sv2T68X7N7XYlXQO04x/otaXoymGrX1VBRbWsbNXDwm0J18Ep7PhzeblzijDag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:31 2026 by rpki-client