
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3131322e302f32302d3230203d3e2034383437.roa
File: 3132302e34352e3131322e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: gtzdJok2+30Cugv/e8tmI68TnYbjnQW4vjVF4BgOQOA=
Subject key identifier: C3:CB:0A:BC:F9:E1:24:CD:BF:74:B7:6F:1C:45:F0:07:86:23:72:8A
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 77A32EB7930FA078490F32EF7C7E04FB8F188DAE
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3131322e302f32302d3230203d3e2034383437.roa
Signing time: Fri 05 Jun 2026 06:23:49 +0000
ROA not before: Fri 05 Jun 2026 06:18:49 +0000
ROA not after: Fri 04 Jun 2027 06:23:49 +0000
asID: 4847
IP address blocks: 120.45.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a3:2e:b7:93:0f:a0:78:49:0f:32:ef:7c:7e:04:fb:8f:18:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:18:49 2026 GMT
Not After : Jun 4 06:23:49 2027 GMT
Subject: CN=C3CB0ABCF9E124CDBF74B76F1C45F0078623728A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:d0:21:62:9a:8b:af:4b:32:9e:bd:b3:11:
d2:3a:87:61:6a:41:12:e6:d0:d7:e7:f9:d3:f8:62:
22:a1:d2:0d:2c:a3:d0:b9:21:36:74:f2:dd:57:df:
05:ea:a9:cb:ec:c5:eb:75:60:8b:7a:26:20:36:6b:
2f:35:fb:5f:16:ce:28:db:3a:5b:55:d4:3e:52:40:
50:27:32:72:ec:0f:74:ae:48:74:99:a1:07:d4:3d:
27:44:2d:6f:a7:40:b3:05:99:75:a2:03:2b:36:c4:
4d:98:2f:dc:5c:c2:d8:5e:69:73:12:78:b5:b0:c0:
5b:43:3f:d9:b2:c7:cf:c4:0f:cb:aa:99:9b:08:ad:
da:53:da:69:25:1b:23:b3:8f:e7:e4:c6:27:ad:29:
ac:77:2b:6c:e0:e5:34:f4:88:de:b7:0c:da:a8:7b:
7c:5d:2e:6b:4e:79:4a:69:89:76:10:8e:a5:43:37:
4f:df:2c:bf:96:69:f9:58:65:0c:03:5b:82:4c:a1:
de:fd:ef:0b:4f:2d:74:e4:0f:b5:19:c5:fc:a7:a4:
9c:74:07:d8:43:22:c9:a8:03:e0:42:d2:3a:de:4b:
6a:98:ac:4c:34:8f:91:85:0b:f8:1b:19:ff:5c:d7:
7a:99:51:91:56:a6:07:3e:96:16:59:fc:d6:2e:51:
8e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:CB:0A:BC:F9:E1:24:CD:BF:74:B7:6F:1C:45:F0:07:86:23:72:8A
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e3131322e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.45.112.0/20
Signature Algorithm: sha256WithRSAEncryption
5e:5a:42:79:69:6f:5b:34:b6:ba:a1:f0:34:e0:be:30:66:a9:
d9:23:0e:6d:2a:dc:95:48:cb:53:52:fe:13:a4:6b:6c:3f:25:
33:43:76:a1:e2:6c:98:32:e7:21:74:6e:50:98:9a:43:2a:34:
60:6d:74:cf:18:0a:00:df:4e:4b:67:4b:6b:0b:04:5c:fb:fe:
57:ae:a3:c2:3a:0b:e0:48:1c:12:c0:d7:32:52:96:6b:05:61:
3f:6e:59:b2:c0:36:47:2f:d8:40:af:b4:71:8f:70:11:fa:ba:
89:80:09:fd:18:23:67:56:80:9c:52:cd:44:f3:2b:ff:a5:28:
9b:5c:c8:9e:23:5f:a5:d2:e4:ac:d7:c7:f5:4a:17:b6:44:7f:
bc:32:c5:ee:49:b0:3e:51:af:3c:93:1c:dd:20:01:ef:32:51:
b1:8e:17:c1:90:d8:81:bd:73:94:10:df:bd:60:96:95:e5:bd:
72:2d:c5:76:65:93:c3:63:d1:c2:d2:59:ea:84:28:5a:64:32:
00:58:b2:e2:2c:14:c8:1e:88:f1:3c:77:03:4d:46:d6:9f:31:
95:37:35:76:e3:0a:70:5d:97:7a:0c:6d:8c:39:11:a2:5c:49:
a9:5b:4e:0d:43:53:94:bb:59:ce:d3:27:5c:28:2d:64:7e:2d:
ac:22:66:68
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUd6Mut5MPoHhJDzLvfH4E+48Yja4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MDUwNjE4NDlaFw0yNzA2MDQwNjIzNDlaMDMxMTAvBgNV
BAMTKEMzQ0IwQUJDRjlFMTI0Q0RCRjc0Qjc2RjFDNDVGMDA3ODYyMzcyOEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxV9AhYpqLr0synr2zEdI6h2Fq
QRLm0Nfn+dP4YiKh0g0so9C5ITZ08t1X3wXqqcvsxet1YIt6JiA2ay81+18Wzijb
OltV1D5SQFAnMnLsD3SuSHSZoQfUPSdELW+nQLMFmXWiAys2xE2YL9xcwtheaXMS
eLWwwFtDP9myx8/ED8uqmZsIrdpT2mklGyOzj+fkxietKax3K2zg5TT0iN63DNqo
e3xdLmtOeUppiXYQjqVDN0/fLL+WaflYZQwDW4JMod797wtPLXTkD7UZxfynpJx0
B9hDIsmoA+BC0jreS2qYrEw0j5GFC/gbGf9c13qZUZFWpgc+lhZZ/NYuUY4vAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUw8sKvPnhJM2/dLdvHEXwB4YjcoowHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzEzMjMwMmUzNDM1
MmUzMTMxMzIyZTMwMmYzMjMwMmQzMjMwMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBHgtcDANBgkqhkiG9w0BAQsFAAOCAQEAXlpCeWlvWzS2uqHwNOC+MGap2SMO
bSrclUjLU1L+E6RrbD8lM0N2oeJsmDLnIXRuUJiaQyo0YG10zxgKAN9OS2dLawsE
XPv+V66jwjoL4EgcEsDXMlKWawVhP25ZssA2Ry/YQK+0cY9wEfq6iYAJ/RgjZ1aA
nFLNRPMr/6Uom1zIniNfpdLkrNfH9UoXtkR/vDLF7kmwPlGvPJMc3SAB7zJRsY4X
wZDYgb1zlBDfvWCWleW9ci3FdmWTw2PRwtJZ6oQoWmQyAFiy4iwUyB6I8Tx3A01G
1p8xlTc1duMKcF2XegxtjDkRolxJqVtODUNTlLtZztMnXCgtZH4trCJmaA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:37 2026 by rpki-client