
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203234313338.roa
File: 3231392e37322e3234312e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier: Z/+rZKtNc8HIf9vkHh37k8N7jY9ZzfogQxOUrY+ZJxY=
Subject key identifier: 54:9D:51:42:B6:3F:DE:71:97:51:9C:81:20:08:1F:88:76:35:67:87
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 1EA6487E47F63FF7455F34FDC697831F76182543
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203234313338.roa
Signing time: Fri 05 Jun 2026 06:21:24 +0000
ROA not before: Fri 05 Jun 2026 06:16:24 +0000
ROA not after: Fri 04 Jun 2027 06:21:24 +0000
asID: 24138
IP address blocks: 219.72.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a6:48:7e:47:f6:3f:f7:45:5f:34:fd:c6:97:83:1f:76:18:25:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:16:24 2026 GMT
Not After : Jun 4 06:21:24 2027 GMT
Subject: CN=549D5142B63FDE7197519C8120081F8876356787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:44:af:30:78:24:a9:0b:c4:4d:29:71:39:
5b:12:f7:2a:51:c1:85:b5:d6:07:f1:78:8b:fe:57:
56:85:17:f3:75:6d:5d:3e:dc:e0:f2:fd:b6:b3:ac:
45:61:a1:ee:1a:cd:3c:cb:5b:a7:ef:83:8f:e7:3f:
dd:0f:8f:8e:c5:21:91:a6:2e:e9:f0:10:9d:16:92:
02:d8:98:c0:dd:29:de:9d:2d:07:97:51:15:82:b0:
d5:69:b4:60:9a:19:0d:49:f8:0b:06:2e:d7:09:3d:
9c:67:ca:a6:d9:65:c6:b2:ba:76:d5:13:d8:bb:ea:
0a:31:61:13:73:d1:b5:ae:f5:bf:7d:4e:60:27:27:
25:6d:12:e0:34:d5:25:bf:df:cc:de:de:b2:33:cf:
e1:88:23:23:ac:49:2f:41:f6:26:4a:6e:f6:07:6a:
0c:36:21:63:0e:58:84:34:07:70:6e:13:7a:c2:7e:
47:bb:0c:8f:1f:ca:81:be:b3:5f:d5:ff:a1:0b:32:
61:d3:23:cb:61:5d:75:81:d5:96:03:1d:6f:25:c2:
8f:e4:7e:c3:47:d6:38:dc:6e:fe:5d:06:c6:96:27:
72:9a:5a:ce:85:e2:ff:89:f5:84:02:d9:c1:98:bc:
dd:0e:59:05:c6:03:bc:0a:2b:8e:40:70:e5:6d:4f:
2c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:9D:51:42:B6:3F:DE:71:97:51:9C:81:20:08:1F:88:76:35:67:87
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3234312e302f32342d3234203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.241.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c3:e3:aa:3a:ad:9a:b8:35:9d:b8:75:93:9c:8a:f6:58:73:
cd:a7:97:78:9d:31:7b:bc:e1:9c:7e:82:55:b8:ee:ea:6f:8a:
b8:ca:b6:74:61:5c:72:af:2d:2c:20:f6:8c:c0:9f:59:57:db:
58:3a:a5:71:54:f0:aa:59:70:ef:ed:49:2b:00:da:fe:d3:69:
3d:8d:87:2b:f0:54:29:db:de:16:54:46:c8:cd:30:81:15:80:
8a:dc:b1:29:52:92:b9:16:56:31:c1:e5:c9:6d:11:1e:ef:1f:
f3:91:9a:14:5f:10:a8:da:d4:8f:e6:1a:73:dd:a3:1b:c7:c3:
98:6b:4f:f9:0c:6b:a4:0a:21:16:b6:18:7b:03:de:cb:d9:42:
45:a3:1b:0e:e5:8c:8f:30:24:54:ed:db:92:25:41:fb:f3:96:
0a:b9:d7:8d:05:15:f2:4a:cb:b3:62:a9:22:9e:08:c1:49:b6:
44:da:bd:95:b0:b9:d6:1a:b7:b9:a6:79:aa:0d:6a:be:c7:a1:
11:42:0d:9d:1b:41:49:5d:af:c8:63:20:7a:c2:25:79:ec:62:
c1:1a:6f:97:ed:e3:cb:78:0a:ed:82:7e:3e:a5:8a:db:7d:7b:
87:61:a1:96:55:37:e0:f5:fb:52:84:98:93:58:18:62:30:07:
45:19:8c:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:29 2026 by rpki-client