
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e34382e302f32302d3230203d3e2034383437.roa
File: 3132302e34352e34382e302f32302d3230203d3e2034383437.roa (raw, json)
Hash identifier: gBiDxG+ruko6mNvqwShDI+wsgruJmVQYq9a/p6V+lq0=
Subject key identifier: ED:0C:73:93:E4:47:52:A3:4C:98:15:8E:CD:C6:A2:2B:DB:3E:61:1F
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 73EA5C77682A0E2C957C256D63E2EEC491439E8F
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e34382e302f32302d3230203d3e2034383437.roa
Signing time: Fri 05 Jun 2026 06:23:48 +0000
ROA not before: Fri 05 Jun 2026 06:18:48 +0000
ROA not after: Fri 04 Jun 2027 06:23:48 +0000
asID: 4847
IP address blocks: 120.45.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ea:5c:77:68:2a:0e:2c:95:7c:25:6d:63:e2:ee:c4:91:43:9e:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:18:48 2026 GMT
Not After : Jun 4 06:23:48 2027 GMT
Subject: CN=ED0C7393E44752A34C98158ECDC6A22BDB3E611F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3d:7c:e7:49:c3:87:ee:a9:1a:0d:8e:a1:9b:
db:44:61:db:5f:cd:b0:ad:c7:d9:ed:f8:f8:0a:27:
e3:81:21:7c:07:e8:b7:ef:30:1e:87:0e:c3:fc:8d:
36:ec:98:e0:78:4b:aa:9c:c8:47:63:e2:2a:4c:86:
ce:8b:b4:36:cb:fa:9d:50:35:ba:2b:d5:ce:06:e5:
97:93:42:30:44:d7:8e:a2:74:33:62:93:0c:7e:1f:
67:e6:35:8e:17:53:a0:ce:fc:5c:2c:a0:16:8d:55:
71:60:2d:7e:6e:41:d6:09:9c:6b:43:93:90:0b:e5:
39:91:6e:f9:20:4b:a1:ef:51:e0:5d:c5:d6:2d:12:
38:f4:7e:7d:0c:4a:b7:b7:66:28:47:e2:03:df:cd:
31:b9:24:a7:9f:a9:50:be:93:0a:e0:9e:9f:7f:9a:
37:e1:80:99:d4:43:42:77:07:fe:95:cf:33:4b:11:
11:72:7c:2d:90:ad:47:db:43:7f:63:f3:37:f1:0d:
23:f9:ca:5d:25:e6:ab:2d:44:a5:e8:49:8a:d1:6b:
63:e8:93:ac:63:38:6e:f1:13:c7:a0:9b:21:96:19:
dc:80:60:02:25:a2:16:e8:24:1e:d4:52:54:16:28:
9d:b3:db:95:19:18:5a:d2:dc:cf:08:89:b3:91:cc:
07:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0C:73:93:E4:47:52:A3:4C:98:15:8E:CD:C6:A2:2B:DB:3E:61:1F
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34352e34382e302f32302d3230203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.45.48.0/20
Signature Algorithm: sha256WithRSAEncryption
69:e3:9c:b5:2b:3f:86:5d:bb:ad:7f:6b:73:86:71:9b:7c:2d:
93:c8:8c:67:ef:4a:50:0e:43:10:6e:fa:33:ed:dd:e9:2f:37:
86:ed:cf:8d:4d:7b:19:7f:3a:64:d7:28:7f:52:5e:88:05:b5:
58:cb:cc:bd:45:c4:94:b9:6f:24:04:3e:b4:52:47:b5:ae:34:
92:c7:2a:b7:d2:97:10:2e:c0:2b:60:94:3d:0f:67:b2:7d:53:
17:94:d1:a2:9b:4f:c3:72:6f:2d:42:50:59:c3:6d:2e:b1:ed:
da:76:c1:64:36:df:8f:96:6c:a3:31:67:26:80:ed:d5:f2:17:
45:8f:d9:26:f7:be:de:0c:a4:21:3f:61:95:48:2a:1e:91:cb:
16:51:23:a3:48:93:5c:16:f6:12:59:5a:3c:ee:ac:ff:47:6a:
16:e1:f4:8b:85:d3:f7:e1:df:94:c3:a4:26:54:20:d0:c7:bb:
40:d5:74:2c:90:89:08:e7:30:84:a6:c5:3f:68:ff:1d:9a:7a:
49:52:89:2e:d3:eb:c5:50:a1:21:ed:63:72:a5:39:6d:73:6a:
20:e1:dc:56:9b:6c:56:c8:fa:a7:5d:ba:cd:85:f3:b6:02:65:
f5:c2:74:53:a4:a2:6d:fa:d4:cb:a0:e5:7a:8c:66:88:26:e4:
b6:e7:63:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:39 2026 by rpki-client