
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e2034383437.roa
File: 3132302e34372e33322e302f31392d3139203d3e2034383437.roa (raw, json)
Hash identifier: qid0XpgIAWQ5vt+Fx77CtldA6bP1wEpT+H8b63Y5a4o=
Subject key identifier: 8E:A3:3F:E8:2B:3B:6A:F2:CD:47:1F:EA:40:13:A3:09:AF:73:55:BC
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 18667A5FF0CD23E2B94DAA78064C227E540B08E6
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e2034383437.roa
Signing time: Fri 05 Jun 2026 06:24:57 +0000
ROA not before: Fri 05 Jun 2026 06:19:57 +0000
ROA not after: Fri 04 Jun 2027 06:24:57 +0000
asID: 4847
IP address blocks: 120.47.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:66:7a:5f:f0:cd:23:e2:b9:4d:aa:78:06:4c:22:7e:54:0b:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:19:57 2026 GMT
Not After : Jun 4 06:24:57 2027 GMT
Subject: CN=8EA33FE82B3B6AF2CD471FEA4013A309AF7355BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ae:7c:be:ec:ce:95:9f:cc:6c:6e:5a:73:df:
6f:47:89:79:bc:02:ef:93:88:fb:a1:a4:06:f5:d0:
0a:91:1a:f7:a8:21:ec:b3:bc:0f:a4:b2:cc:39:bf:
3b:f2:a5:88:2b:65:a9:10:8b:66:70:49:1f:41:59:
5b:c7:7a:44:a8:35:cf:48:6c:38:da:08:50:1b:73:
6f:60:a3:41:21:3b:f2:59:e1:6c:2f:54:f8:d2:2d:
32:b0:f2:5d:d1:a0:7b:21:92:a5:e5:5d:fd:ea:82:
a8:83:aa:97:23:a1:f8:7a:6b:a6:1d:29:1c:84:c2:
49:3a:3e:bd:d9:94:e9:6e:6a:60:a8:80:7a:4a:26:
92:8b:03:6d:5b:9d:b1:8a:82:a9:cd:f0:40:51:24:
c8:9d:9e:ec:7f:23:1f:bf:39:8f:d4:f6:0a:5b:fa:
35:b4:43:29:30:9a:73:26:8f:f3:f6:6f:f2:c9:e5:
27:d1:9b:43:cf:79:43:87:91:4c:27:12:c6:1c:ec:
c2:12:cc:a6:b1:c4:89:05:c4:97:51:6f:fb:35:eb:
f1:a9:7d:4a:8e:5e:00:34:48:43:10:16:ce:81:b2:
5b:b0:44:d8:1e:78:5e:e8:3d:bf:26:f4:19:5b:bb:
05:6e:b1:51:ac:20:bc:f8:fd:f2:83:b2:c4:dd:98:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A3:3F:E8:2B:3B:6A:F2:CD:47:1F:EA:40:13:A3:09:AF:73:55:BC
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3132302e34372e33322e302f31392d3139203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
120.47.32.0/19
Signature Algorithm: sha256WithRSAEncryption
b5:a4:b2:2b:50:ec:2c:34:59:2d:3a:1e:b2:36:58:13:25:44:
af:cf:98:eb:44:c4:84:b3:57:54:c7:6c:1b:a8:97:01:23:c8:
f3:fc:f6:b5:64:88:32:83:28:e6:d7:82:83:6a:a0:53:d7:cd:
4b:24:f0:97:af:e2:f5:31:e2:50:8a:08:b8:4d:9f:41:08:95:
19:f1:3a:ea:07:b3:e8:69:8d:59:bb:db:6d:a0:9c:a7:96:cd:
2b:82:fd:b3:f2:87:56:9a:51:98:73:d8:3a:a8:cf:ed:00:10:
1e:00:eb:7f:be:72:79:78:8d:5a:ce:08:38:40:39:0d:98:aa:
94:1e:bc:3c:76:5c:b0:54:3a:65:e2:af:d5:aa:df:59:34:a7:
53:c3:8a:c9:5f:92:4d:15:43:75:ec:24:db:5d:74:31:8f:b7:
e5:3f:56:a6:3f:0e:8d:96:ea:8c:17:34:86:25:2b:93:f6:53:
3d:5f:6b:69:c4:25:8f:7a:8a:c4:f3:e1:14:6c:3b:59:31:41:
f3:66:f6:a1:59:64:7b:74:55:8e:8d:30:69:80:6c:19:42:d9:
42:dd:a8:c4:53:8d:f4:98:a4:b1:95:de:3a:50:5d:62:9d:7f:
c3:04:c2:12:d9:10:78:11:0d:32:5b:3f:20:31:fc:63:f8:98:
09:77:12:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:53 2026 by rpki-client