
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203137343238.roa
File: 3231392e37322e3235302e302f32342d3234203d3e203137343238.roa (raw, json)
Hash identifier: N2wmTru3X+LwZ1bMrRDb+sAl4tFKk3A683GUs9VpXCE=
Subject key identifier: 7B:A6:CD:17:9B:13:33:BF:70:F7:A2:A3:FB:5B:95:A2:46:B0:90:B2
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 3B6FE90DA7B5E7BBDA1AA88C9984796420A199F3
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203137343238.roa
Signing time: Fri 05 Jun 2026 06:21:24 +0000
ROA not before: Fri 05 Jun 2026 06:16:24 +0000
ROA not after: Fri 04 Jun 2027 06:21:24 +0000
asID: 17428
IP address blocks: 219.72.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:6f:e9:0d:a7:b5:e7:bb:da:1a:a8:8c:99:84:79:64:20:a1:99:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:16:24 2026 GMT
Not After : Jun 4 06:21:24 2027 GMT
Subject: CN=7BA6CD179B1333BF70F7A2A3FB5B95A246B090B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:65:d3:f9:94:97:72:01:97:72:57:f0:a6:4e:
10:8d:b5:4f:87:8c:0a:d0:92:04:d4:40:67:ec:9c:
1d:05:a8:80:56:2e:87:5c:a6:86:98:32:9f:ea:ab:
f0:fa:20:85:3a:ff:51:73:30:5f:e3:8a:a8:cf:f7:
1d:8b:fc:25:fe:3e:24:71:5e:72:0f:96:d5:de:d2:
f5:11:68:db:87:de:24:6c:19:b8:e3:4e:4f:bf:df:
fa:a4:b4:55:66:6b:0f:3a:34:71:d4:9f:8a:23:78:
86:b1:7c:85:67:43:c5:ac:4b:97:45:f1:96:04:51:
51:21:f3:bb:66:03:73:0e:c8:1a:5e:a6:df:ab:50:
22:09:7f:43:7a:ef:7a:53:ed:5b:79:30:8b:51:0c:
e3:49:22:5f:7d:d9:dd:b7:54:68:8e:ad:e5:2d:b3:
cd:9c:26:0f:36:19:82:da:40:bb:ce:5c:49:85:6c:
10:45:f8:f1:8f:28:d8:66:f6:13:12:54:65:2d:08:
37:7e:6f:bf:40:e7:28:78:dc:38:b4:76:ad:4e:c4:
7c:ac:a0:3b:55:d7:5a:06:3f:f4:47:49:e0:9d:68:
02:a1:cc:7a:d3:42:59:60:61:42:bb:3f:60:92:a5:
92:e9:b7:7b:d7:26:fc:dc:bc:0b:77:e9:04:84:d8:
a3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:CD:17:9B:13:33:BF:70:F7:A2:A3:FB:5B:95:A2:46:B0:90:B2
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203137343238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.250.0/24
Signature Algorithm: sha256WithRSAEncryption
37:61:6d:57:83:3a:09:4e:26:8c:92:06:96:94:e3:c1:a2:eb:
4d:88:35:2e:fd:bf:1f:1f:ab:8c:fc:91:ce:3d:b4:4f:21:87:
51:1a:3d:c3:db:16:3e:7b:fe:1e:6b:3a:ee:f1:4f:5e:14:1b:
a3:2e:57:46:60:b6:3d:da:3e:ed:81:7d:b9:a2:2a:64:b3:77:
98:3f:9b:4c:17:91:57:b2:e4:82:1d:24:ec:b9:50:7e:fc:75:
04:81:4a:d7:1d:b6:52:7f:89:da:b4:b6:3a:8d:5c:41:ef:b5:
a6:b4:f6:f0:49:5c:dc:81:e5:20:17:9d:30:ca:16:22:f4:c5:
1e:21:d2:8d:e0:84:11:b5:89:e5:26:37:d5:e1:60:71:13:03:
44:23:b4:7e:e6:13:9e:40:8e:51:55:29:99:46:a8:d0:2e:2f:
58:75:1a:13:63:c9:59:e7:09:3c:f8:04:c2:99:2b:8a:7e:60:
33:7b:26:c3:0c:93:45:c2:55:16:a6:93:a6:23:5e:18:d8:be:
47:bf:e7:90:60:ca:7c:a1:25:61:b2:4d:c8:38:fb:be:d2:75:
87:eb:a6:45:c4:be:f1:9d:75:dd:bf:29:d9:f8:20:aa:d7:03:
d2:f2:95:30:5f:e9:d1:4c:07:e0:06:49:dd:97:75:ad:54:be:
fc:39:86:af
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:34 2026 by rpki-client