
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203234313338.roa
File: 3231392e37322e3230302e302f32322d3232203d3e203234313338.roa (raw, json)
Hash identifier: ROVi99aWr2hQ/NEnxTFaTdvH3hJhEcm3NU5pTV1fp5Q=
Subject key identifier: 4E:FF:BE:83:9D:32:4C:4F:DF:66:00:58:32:9B:09:01:90:CB:56:90
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 2DA34F19846B5A875F68D8A72AC6989011DE63D3
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203234313338.roa
Signing time: Fri 05 Jun 2026 06:23:49 +0000
ROA not before: Fri 05 Jun 2026 06:18:49 +0000
ROA not after: Fri 04 Jun 2027 06:23:49 +0000
asID: 24138
IP address blocks: 219.72.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:a3:4f:19:84:6b:5a:87:5f:68:d8:a7:2a:c6:98:90:11:de:63:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:18:49 2026 GMT
Not After : Jun 4 06:23:49 2027 GMT
Subject: CN=4EFFBE839D324C4FDF660058329B090190CB5690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:65:fe:85:ef:a0:63:61:6f:d9:6d:11:ca:3f:
ec:38:36:6e:28:1a:74:4b:43:52:d5:9a:81:b7:5a:
0c:bc:e4:94:ec:42:2d:19:f5:31:0a:66:09:32:d7:
94:41:10:82:e4:30:d1:b9:05:33:e9:4e:19:47:0c:
8f:bc:7d:19:e9:5c:64:ee:a9:58:be:c8:dd:d4:20:
ef:30:9e:f9:59:46:67:3b:76:67:17:17:b9:9e:f7:
d3:23:47:b3:11:ed:6d:f3:4b:1e:c7:8f:0d:18:4c:
6e:eb:dc:d0:08:50:50:6d:4c:19:d8:58:9a:2c:e2:
b4:57:68:c9:67:38:7a:a1:2d:c0:fe:05:67:18:53:
84:f4:24:e2:82:e9:a0:77:14:b0:a8:b6:31:f5:74:
2c:48:cd:2f:18:6d:22:53:8f:b3:11:49:46:24:21:
c0:d4:bf:08:36:fd:d8:2c:73:46:92:62:81:53:7c:
aa:d7:21:8e:8e:05:a1:8e:35:e9:28:78:d8:31:3c:
a0:a1:d8:ea:c6:cb:9d:41:1b:02:cd:4e:bb:75:13:
47:28:6f:ba:ed:5c:6c:71:bc:01:47:90:6d:4f:fd:
b9:f7:df:6e:e3:a1:dd:2a:5b:9e:b7:db:eb:32:a4:
98:c6:d5:ec:9c:5d:45:3b:72:b6:91:ac:41:30:ff:
79:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FF:BE:83:9D:32:4C:4F:DF:66:00:58:32:9B:09:01:90:CB:56:90
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3230302e302f32322d3232203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.200.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:dc:d3:f8:1a:10:42:78:a8:71:eb:8d:6b:7f:ad:39:08:7d:
c6:26:cd:ff:b9:48:fc:e5:98:06:14:0b:09:f7:13:ea:1f:61:
45:30:dd:79:e6:f5:fd:17:ff:0a:0e:53:c9:b7:32:04:a3:5b:
3e:cf:96:aa:6b:89:63:66:62:6e:77:f3:2f:4a:28:bb:56:b1:
d4:7d:25:16:d9:42:1d:86:a4:a8:e2:55:0b:46:06:42:d5:4f:
79:9f:10:13:f0:79:20:b9:eb:7d:07:1c:c1:e6:bf:54:19:ef:
05:76:c8:f1:aa:06:ab:48:9c:8d:78:59:4e:68:91:52:c6:75:
bb:81:dd:8e:79:4f:8d:5a:03:d5:df:41:b2:d1:63:9b:c0:b8:
0f:bf:e9:e7:37:86:fc:fd:28:d6:8f:87:28:59:78:46:1d:f6:
88:c0:60:c0:d9:86:94:c6:dc:19:4b:35:6c:2a:fa:b6:4d:9f:
d5:bd:a7:18:88:e5:fc:f0:3d:8e:57:e6:bf:7b:33:10:d5:55:
3d:f8:f9:40:cb:d2:da:13:b5:a0:d9:f6:be:9c:dc:b0:86:de:
4b:52:8f:58:8b:d6:09:58:54:92:6e:f9:a1:2e:85:1b:7c:68:
1b:4d:b5:06:c4:da:80:48:11:15:5e:1f:e1:4c:3f:8f:8e:fa:
4a:a9:c0:df
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIULaNPGYRrWodfaNinKsaYkBHeY9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MDUwNjE4NDlaFw0yNzA2MDQwNjIzNDlaMDMxMTAvBgNV
BAMTKDRFRkZCRTgzOUQzMjRDNEZERjY2MDA1ODMyOUIwOTAxOTBDQjU2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZf6F76BjYW/ZbRHKP+w4Nm4o
GnRLQ1LVmoG3Wgy85JTsQi0Z9TEKZgky15RBEILkMNG5BTPpThlHDI+8fRnpXGTu
qVi+yN3UIO8wnvlZRmc7dmcXF7me99MjR7MR7W3zSx7Hjw0YTG7r3NAIUFBtTBnY
WJos4rRXaMlnOHqhLcD+BWcYU4T0JOKC6aB3FLCotjH1dCxIzS8YbSJTj7MRSUYk
IcDUvwg2/dgsc0aSYoFTfKrXIY6OBaGONekoeNgxPKCh2OrGy51BGwLNTrt1E0co
b7rtXGxxvAFHkG1P/bn3327jod0qW5632+sypJjG1eycXUU7craRrEEw/3nzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUTv++g50yTE/fZgBYMpsJAZDLVpAwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzIwOTcyOS8wLzMyMzEzOTJlMzcz
MjJlMzIzMDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDMxMzMzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAttIyDANBgkqhkiG9w0BAQsFAAOCAQEAsdzT+BoQQnioceuNa3+tOQh9
xibN/7lI/OWYBhQLCfcT6h9hRTDdeeb1/Rf/Cg5TybcyBKNbPs+WqmuJY2Zibnfz
L0oou1ax1H0lFtlCHYakqOJVC0YGQtVPeZ8QE/B5ILnrfQccwea/VBnvBXbI8aoG
q0icjXhZTmiRUsZ1u4HdjnlPjVoD1d9BstFjm8C4D7/p5zeG/P0o1o+HKFl4Rh32
iMBgwNmGlMbcGUs1bCr6tk2f1b2nGIjl/PA9jlfmv3szENVVPfj5QMvS2hO1oNn2
vpzcsIbeS1KPWIvWCVhUkm75oS6FG3xoG021BsTagEgRFV4f4Uw/j476SqnA3w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:29 2026 by rpki-client