
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3132382e302f31392d3139203d3e2034383437.roa
File: 3132302e34372e3132382e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier: /OE1de9aK/9MFXGsZB2N4X9Mgx29KPJ0rrxvFaucypE=
Subject key identifier: 3D:2F:18:10:C6:CF:EB:62:14:F3:B1:5C:A1:46:65:D2:5A:86:8C:14
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 3B65F471F0090F8EB104F48875EFB77D8D22CBD1
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3132382e302f31392d3139203d3e2034383437.roa
Signing time: Fri 05 Jun 2026 06:24:57 +0000
ROA not before: Fri 05 Jun 2026 06:19:57 +0000
ROA not after: Fri 04 Jun 2027 06:24:57 +0000
asID: 4847
IP address blocks: 120.47.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:65:f4:71:f0:09:0f:8e:b1:04:f4:88:75:ef:b7:7d:8d:22:cb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:19:57 2026 GMT
Not After : Jun 4 06:24:57 2027 GMT
Subject: CN=3D2F1810C6CFEB6214F3B15CA14665D25A868C14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f1:90:e4:cf:9d:42:31:87:e4:28:5d:ca:12:
d2:dc:73:bd:14:62:a2:e9:a0:43:2c:1b:3e:6b:76:
aa:04:10:e8:cd:01:fc:5e:e0:4f:c5:d4:84:c2:10:
46:fc:a4:c4:a7:dc:b4:37:03:1f:37:a6:c4:78:81:
2c:03:17:85:5c:37:eb:01:4e:c9:b1:54:a0:4b:61:
b9:19:f5:87:75:b3:52:fe:b5:02:36:59:fa:a9:46:
98:1a:89:d6:c1:cd:1d:cb:0b:28:8d:bf:86:e7:0b:
18:95:a8:12:cd:2a:bf:a7:bf:99:f8:fe:e6:b6:77:
af:22:e4:99:6c:2a:73:db:b6:3b:0d:f0:5e:1f:e9:
54:30:b5:e5:8f:ef:73:7c:3c:00:20:28:07:06:71:
0e:aa:9b:32:52:98:99:66:ac:02:5c:4e:89:ac:ef:
7b:46:51:53:cc:73:f4:5d:03:ef:23:f4:c6:71:e8:
d3:8c:b7:1b:7b:8d:5f:3d:89:76:49:3d:24:77:db:
1e:db:a7:ff:c9:7c:63:1e:f4:7b:e7:72:2f:27:f5:
28:17:c8:15:e5:da:e5:c3:3c:72:15:84:da:1c:3d:
7d:be:11:98:31:7b:b6:80:f9:ff:10:6d:b8:81:43:
20:54:72:47:4f:de:12:b5:4a:d2:25:3c:f0:9a:b3:
5c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:18:10:C6:CF:EB:62:14:F3:B1:5C:A1:46:65:D2:5A:86:8C:14
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3132382e302f31392d3139203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a6:3f:17:ef:eb:c2:d6:db:64:79:2f:1e:00:45:5f:09:c7:35:
42:c3:98:03:99:a8:ca:9b:e7:8e:5a:d0:25:84:ca:4e:64:6e:
5d:3d:92:77:48:c5:70:b3:64:ee:e7:4d:3a:50:31:21:2c:b9:
20:49:02:c6:b7:c3:fb:47:f0:a2:86:06:e2:41:5b:3e:ba:b2:
27:40:3f:1a:7c:84:37:ec:09:52:55:15:e5:8c:6c:d3:93:99:
1b:2c:b7:01:55:d4:1a:af:f2:2e:f7:68:d0:42:9b:54:9e:ca:
f3:1e:d0:65:af:34:9f:7b:28:af:9a:12:f2:6b:cd:58:e8:b0:
38:64:38:3d:fb:f8:8b:7d:0d:91:b6:24:93:95:63:63:57:73:
a7:87:02:37:99:15:9e:b5:2f:5e:74:d7:5d:f9:d1:f6:d9:15:
2a:c5:b0:87:ea:0c:46:d6:31:41:ff:7c:ff:e9:7e:b3:cc:6a:
58:53:e4:12:d0:15:82:b8:b6:d5:57:d7:1a:a1:ab:f9:0c:ac:
aa:07:38:4f:6e:94:21:4b:15:8a:37:f4:ad:51:ac:e7:57:8f:
78:96:e2:08:6d:d8:92:4d:b0:a1:3e:97:cc:d8:8a:f2:28:34:
77:99:86:21:d3:20:ae:f7:9a:45:f1:dd:bf:7c:e2:77:34:82:
bb:5f:22:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client