
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3132382e302f32342d3234203d3e2034383437.roa
File: 3231392e37322e3132382e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: th9FWeYyH4V/SSE53P7+9z2SWeTfK64VjiWQtHCPOc8=
Subject key identifier: 56:EA:17:A6:8F:FD:64:5B:B0:75:77:4B:01:65:67:BB:85:C6:03:EB
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 69C50362940EDF433496695B18954FFA025C7C37
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3132382e302f32342d3234203d3e2034383437.roa
Signing time: Fri 05 Jun 2026 06:18:49 +0000
ROA not before: Fri 05 Jun 2026 06:13:49 +0000
ROA not after: Fri 04 Jun 2027 06:18:49 +0000
asID: 4847
IP address blocks: 219.72.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c5:03:62:94:0e:df:43:34:96:69:5b:18:95:4f:fa:02:5c:7c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:13:49 2026 GMT
Not After : Jun 4 06:18:49 2027 GMT
Subject: CN=56EA17A68FFD645BB075774B016567BB85C603EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:96:a4:1a:98:83:e5:3f:c0:23:af:1e:05:
ea:0a:61:d6:80:78:1a:9a:3a:2b:75:b9:a1:73:c6:
26:8e:38:d3:e3:6f:9e:d8:37:b0:85:a7:ed:91:13:
d9:a4:e2:15:52:1e:a6:e9:16:71:30:f0:72:0a:d7:
b4:23:00:65:f0:ed:c2:46:09:25:53:69:8b:8e:0a:
d4:40:61:b4:62:41:43:7d:a2:5f:d8:c1:6f:4c:fc:
e4:7f:e9:75:0c:b7:d2:78:22:12:8b:64:5c:5f:e4:
dc:b8:7b:6c:c6:96:e4:ea:00:99:00:11:86:94:e0:
fa:d2:b8:19:3a:92:eb:e0:d7:27:61:30:aa:a2:f5:
28:ce:0b:10:5c:22:f5:58:6f:99:7f:2c:ab:94:6b:
d6:24:62:dc:46:c1:8a:7f:8c:48:a8:8f:2a:c8:80:
5a:e8:ad:c7:3c:8b:eb:ce:5e:a5:54:fe:d2:5b:f7:
4c:27:c5:10:d4:49:3f:4f:39:8a:28:cb:d1:03:ca:
ad:2d:18:b3:fd:ba:82:83:33:cb:a2:8e:43:75:fa:
34:e5:ab:f3:84:22:f7:5b:21:09:2a:b1:53:c5:52:
ea:25:c5:1f:d6:3a:ba:a9:28:4f:60:f9:7a:2a:dd:
20:a9:7d:eb:ac:98:f8:31:e1:da:01:c8:81:cd:9e:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EA:17:A6:8F:FD:64:5B:B0:75:77:4B:01:65:67:BB:85:C6:03:EB
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3132382e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:0f:47:b3:3b:eb:9d:20:c4:64:9d:53:c9:5a:aa:7d:46:93:
f7:09:a4:b6:e3:24:d5:65:de:97:65:fe:b6:6c:62:c9:d8:11:
c7:65:81:33:2c:f8:eb:51:82:98:d6:b6:80:a2:35:f5:1d:c3:
59:b0:7e:64:f2:33:e3:f0:5a:61:d2:ba:c2:ae:ae:08:c7:73:
b9:e5:4a:6b:49:34:bd:5b:93:12:2e:3a:31:d1:82:0e:3a:74:
6c:b8:02:9d:4b:c2:f7:14:df:50:33:01:b0:9c:b3:37:05:8b:
75:50:c6:e7:34:20:2b:47:b7:7d:8e:5c:0a:02:d0:74:a8:66:
fe:cd:e9:91:d2:51:01:25:a1:6e:c3:45:76:7c:1d:59:50:27:
c4:8f:b9:db:65:49:83:ce:af:46:01:72:8b:5b:68:41:3a:52:
12:4e:cb:2c:b6:d2:19:7a:9e:ad:a8:60:d5:7a:d7:0f:0b:83:
8b:ab:2f:f6:0f:0e:a2:f9:2a:37:39:85:e8:8c:c6:03:9e:8c:
ef:23:2d:cf:b8:52:4a:6c:ac:ab:62:9b:7d:28:70:07:0f:bc:
49:eb:35:68:35:6f:73:79:70:e7:12:35:d3:48:2f:91:09:70:
1f:b2:6d:ee:b1:5b:66:ef:4d:88:25:22:63:5b:75:04:23:3c:
21:56:d2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:12 2026 by rpki-client