
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203138323435.roa
File: 3231392e37322e3235302e302f32342d3234203d3e203138323435.roa (raw, json)
Hash identifier: woIYaeREKMGQfFkF4YhLKtOuRR8TWT92N8SbdUhQIw4=
Subject key identifier: 18:AC:4D:FD:61:D9:E9:03:68:D3:04:77:93:07:B5:E5:60:71:FE:83
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 41761B60E4AC20AC12593D3990EF8134EE069AF0
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203138323435.roa
Signing time: Fri 05 Jun 2026 06:21:24 +0000
ROA not before: Fri 05 Jun 2026 06:16:24 +0000
ROA not after: Fri 04 Jun 2027 06:21:24 +0000
asID: 18245
IP address blocks: 219.72.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:76:1b:60:e4:ac:20:ac:12:59:3d:39:90:ef:81:34:ee:06:9a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:16:24 2026 GMT
Not After : Jun 4 06:21:24 2027 GMT
Subject: CN=18AC4DFD61D9E90368D304779307B5E56071FE83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:07:e5:eb:92:7b:31:5f:7f:f8:fd:0b:8e:97:
10:a6:d1:e2:f5:26:f1:e7:12:d0:35:62:0b:81:c8:
c6:37:ea:5f:06:ae:a6:42:eb:93:44:2c:48:fb:9a:
ca:c4:1a:ea:f5:2d:65:3d:90:d0:c6:d2:0f:ea:7c:
fd:12:ff:dd:61:89:4c:54:e7:35:f0:00:fa:e6:2e:
48:0a:22:04:36:8a:99:50:9c:55:38:14:2e:d0:8d:
db:64:d3:e6:62:e5:05:85:67:36:c5:cc:4e:d8:a1:
20:8c:cc:c6:38:81:87:1f:29:ec:93:73:28:8a:e9:
d2:c6:1c:46:f9:b6:11:dc:b2:a8:57:94:de:3e:30:
e3:cd:63:df:a1:9e:46:67:0d:a5:a2:38:c1:63:27:
7d:16:23:bd:b6:5a:86:a7:0e:30:0a:30:b4:ca:74:
01:ca:1b:cb:fe:ec:47:31:13:5f:8e:7e:da:fa:b2:
3d:ed:34:6a:c2:02:5f:06:d3:4d:4b:7a:d3:23:ce:
4d:9a:6c:6d:f9:74:18:65:13:50:99:34:4d:6e:a8:
5a:5d:f7:63:c4:7f:66:dd:4c:dd:5a:e8:e9:01:be:
c1:36:07:26:26:87:5d:76:b9:61:c1:16:bf:30:2b:
e9:6d:ab:1a:ef:68:81:85:b7:55:2c:35:66:07:fb:
1e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:AC:4D:FD:61:D9:E9:03:68:D3:04:77:93:07:B5:E5:60:71:FE:83
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e203138323435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:bb:5c:64:2f:33:0a:66:a9:f6:60:65:18:31:f1:62:a8:2c:
6c:9d:9a:1f:50:de:30:98:6b:18:a9:76:84:18:4d:5e:a9:9e:
a7:69:b5:b7:a4:a7:f2:a0:30:e0:86:21:de:41:1e:1e:4d:5b:
c6:cd:c6:96:15:e2:93:63:be:71:e7:c8:9d:2c:b6:3f:e1:50:
90:97:b0:87:0f:af:cb:0e:e9:39:73:b3:8b:56:93:37:b2:42:
97:9c:5f:dd:0d:27:5e:1f:4d:c5:75:7b:c0:d6:8c:90:51:8a:
92:ab:cd:24:9b:a1:28:2a:c7:51:52:77:7c:44:e1:98:98:44:
3d:60:b5:ea:3a:72:66:e7:a6:a9:7c:9d:a1:ff:7a:9b:95:57:
31:4f:c1:e5:96:b7:09:f8:88:9a:ba:0c:c1:be:bf:f7:be:a0:
e1:27:17:ee:e2:f1:39:4c:db:9b:f3:3e:10:a8:f7:e0:06:11:
2e:24:bb:06:86:be:7a:ec:22:f0:33:b2:e7:20:b8:1a:6c:97:
09:2d:82:69:15:ea:5e:c2:36:1f:56:26:dd:aa:6f:cf:11:3a:
7b:fa:f5:f3:26:63:49:f5:0a:25:45:08:5e:64:8f:78:a5:77:
c5:18:80:e5:f4:32:76:73:a1:6c:29:b7:41:71:8c:7f:6c:fd:
b2:23:b2:c8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:35 2026 by rpki-client