
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e2032343134.roa
File: 3231392e37322e3235302e302f32342d3234203d3e2032343134.roa (raw, json)
Hash identifier: UmMhKZ7/xUVnJVyntlZ0XOzLaLksuCxU09mOGINDw94=
Subject key identifier: F9:6C:20:F2:59:6A:DC:A9:5B:39:DB:7E:ED:22:37:82:1F:F3:F9:87
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 538EDAB84109D942765BA2F40059BB001F9A2D73
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e2032343134.roa
Signing time: Fri 05 Jun 2026 06:21:24 +0000
ROA not before: Fri 05 Jun 2026 06:16:24 +0000
ROA not after: Fri 04 Jun 2027 06:21:24 +0000
asID: 2414
IP address blocks: 219.72.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:8e:da:b8:41:09:d9:42:76:5b:a2:f4:00:59:bb:00:1f:9a:2d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:16:24 2026 GMT
Not After : Jun 4 06:21:24 2027 GMT
Subject: CN=F96C20F2596ADCA95B39DB7EED2237821FF3F987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:cf:5b:eb:bb:92:48:44:61:20:37:bc:20:
94:1f:52:2f:c2:0d:d9:23:fa:a6:7c:d3:ac:76:99:
e3:2b:7a:f2:5f:35:8f:8f:7f:4a:81:f5:2b:3c:fb:
cf:c3:c0:71:73:b8:06:de:80:7c:6b:6b:f9:04:73:
cf:c0:f6:ba:a9:fc:dd:52:38:f6:22:8c:e1:ef:a9:
86:0e:a3:99:48:f0:b0:c3:22:cb:56:84:11:18:76:
25:ed:97:71:d2:ca:03:ef:37:3b:95:96:e8:11:8b:
62:83:b8:1f:73:1d:c0:38:30:f9:2a:9f:48:b2:da:
fe:18:6a:88:d6:de:11:30:d1:32:33:c6:47:9a:1b:
c6:f7:87:7f:94:3c:99:c5:86:57:04:d9:d1:a8:35:
b7:77:7c:ad:7f:d6:70:ab:03:df:c6:45:cf:8b:00:
92:96:32:e0:ad:8b:03:43:f7:a9:6c:c8:c2:d6:89:
36:1d:bc:c9:96:0a:95:59:3b:f0:ca:3d:7b:ab:c0:
a4:72:e3:59:ba:13:be:8f:de:6c:33:c7:5b:e7:82:
6d:3b:de:e8:78:99:52:a7:d6:8e:1e:05:0f:3d:23:
6f:d3:87:ae:ea:a3:5a:ce:d5:4c:43:b5:a8:86:45:
9b:5c:ce:9f:95:13:19:c9:87:39:87:66:7f:ee:fd:
ed:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:6C:20:F2:59:6A:DC:A9:5B:39:DB:7E:ED:22:37:82:1F:F3:F9:87
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e3235302e302f32342d3234203d3e2032343134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.250.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:88:dc:ba:07:78:80:e9:58:e0:db:ed:c1:b8:c4:32:32:93:
62:d5:8c:1c:b6:ba:a6:e8:6a:56:3e:33:6a:00:4a:3c:8b:03:
5c:06:d3:49:b4:e7:d2:a7:00:67:bd:6d:f3:37:c5:3a:a7:af:
e5:9a:15:a5:a9:0f:78:03:39:c8:79:c7:6b:72:48:65:4d:8d:
ad:1c:31:89:7a:06:d6:4e:9a:d4:d6:73:d1:dc:54:8b:fe:6b:
d5:b8:5c:16:3a:3b:bf:b8:ec:5d:33:6c:b7:4c:32:fd:09:28:
85:53:a0:2e:ca:e7:9d:d8:de:81:77:f0:da:98:7b:89:33:1d:
7e:0f:1e:71:03:b2:18:08:3e:71:35:70:ee:41:96:8f:b7:90:
46:24:05:8d:2a:68:e6:57:fd:46:c3:66:24:b1:6f:eb:f2:3c:
ea:50:8d:75:a9:00:a8:34:3c:f8:42:52:54:07:07:0f:d8:23:
27:75:b8:64:36:db:ca:c5:7d:e7:ca:6e:7d:8f:e3:0b:bb:15:
03:86:c7:46:c7:2b:8d:88:a2:04:3d:c8:f8:6e:9a:da:13:e7:
91:dd:02:24:b7:51:d7:4a:9b:90:c4:3c:5c:cb:c2:41:52:0a:
7e:e8:60:f5:14:d4:15:fc:1b:22:6f:1a:31:33:2b:48:a0:3a:
f7:81:60:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client