
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232352e302f32342d3234203d3e2034383437.roa
File: 3132302e34372e3232352e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: EseCGNxJsdxd5HjVSvSwxL8mktV9skWEZuGow/77fE4=
Subject key identifier: EB:25:13:5E:19:07:42:99:95:2E:D9:89:6A:FD:6D:75:FE:64:D6:D6
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 787EE1A05E525F90789FE34C27DF7BAB09B004B7
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232352e302f32342d3234203d3e2034383437.roa
Signing time: Fri 05 Jun 2026 06:18:49 +0000
ROA not before: Fri 05 Jun 2026 06:13:49 +0000
ROA not after: Fri 04 Jun 2027 06:18:49 +0000
asID: 4847
IP address blocks: 120.47.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:7e:e1:a0:5e:52:5f:90:78:9f:e3:4c:27:df:7b:ab:09:b0:04:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:13:49 2026 GMT
Not After : Jun 4 06:18:49 2027 GMT
Subject: CN=EB25135E19074299952ED9896AFD6D75FE64D6D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9b:cb:f2:cf:14:f5:95:31:11:c2:c7:3e:ab:
23:da:ec:b7:16:b9:fa:6e:90:c3:96:15:60:15:23:
60:8e:80:1d:72:ab:6d:c7:de:12:79:a8:c8:30:de:
f4:d2:62:74:82:38:02:5f:41:cb:eb:de:fd:fc:3e:
08:8e:27:fe:68:d0:8b:22:18:78:ff:93:f1:d1:eb:
9c:a1:ed:2f:71:78:0e:5d:df:e2:f5:91:c0:20:8a:
0f:80:dd:4b:b4:ec:1c:7e:fa:e6:fd:11:e9:3f:0a:
2e:7d:19:eb:a5:aa:89:20:c7:86:07:2d:30:b9:77:
2d:f2:02:9a:4c:0a:e7:7c:0e:ef:f1:86:6a:53:ce:
0a:77:cc:41:13:54:da:fb:84:d6:98:ee:0f:ff:ea:
b3:25:d6:fa:70:7b:93:86:a0:21:d7:60:d8:1a:35:
01:19:55:67:ba:05:42:bd:08:99:6e:2f:fc:8e:f8:
7f:f0:8b:10:2e:f8:69:cc:e9:fa:2a:8d:d5:65:d7:
5c:52:83:6c:78:bb:32:d1:57:cb:ff:aa:36:21:40:
ac:43:52:5a:a6:64:e0:66:a0:df:ae:33:59:29:49:
d7:73:b9:f5:b3:f2:8d:0e:bd:c4:35:31:c8:ac:a9:
50:8b:1c:e6:cf:dc:b2:b3:17:38:d6:5c:99:55:02:
cc:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:25:13:5E:19:07:42:99:95:2E:D9:89:6A:FD:6D:75:FE:64:D6:D6
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e3232352e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.225.0/24
Signature Algorithm: sha256WithRSAEncryption
90:39:ea:d5:96:38:5a:58:10:45:63:e3:28:71:e8:47:99:1d:
2a:57:11:83:3e:03:0d:1e:9c:0a:6c:e2:39:dd:68:e7:c0:01:
ef:c1:7a:be:74:bb:37:68:5e:1c:e3:1b:c2:76:25:90:b7:1f:
6a:e2:29:85:3e:a5:17:03:d5:65:4c:43:f0:b6:68:11:25:a6:
cd:f1:20:12:0b:5c:81:44:f6:18:aa:55:49:53:bd:d6:a4:bf:
1b:4b:af:90:40:e6:a9:9c:c0:17:16:76:e2:b7:b6:36:99:bb:
6a:b0:ab:35:06:b0:31:4f:28:01:99:bc:6e:28:10:79:82:9e:
c4:29:34:3a:b3:10:3b:b9:ae:5e:65:9a:49:3c:73:6b:c4:41:
26:74:7b:08:a1:2d:bb:76:74:ca:a7:d4:26:15:bd:78:7a:cc:
7d:22:8c:fd:a9:ea:ec:75:ba:62:34:f9:3c:58:13:1f:1e:fd:
9f:57:f2:f3:10:6b:df:f2:60:b7:57:81:ac:6e:e7:2b:6b:87:
b3:1f:b0:c4:74:bc:86:cb:f7:63:c8:d2:a4:b7:6c:1c:88:a7:
74:59:3d:0b:74:69:24:d2:fa:40:d4:ed:00:09:ce:63:8f:f8:
3e:de:a2:3f:f1:18:bb:6b:c8:b5:27:b9:b0:98:a9:84:0f:5e:
89:ef:0e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client