
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203137343238.roa
File: 3231392e37322e33322e302f32302d3230203d3e203137343238.roa (raw, json)
Hash identifier: c0FVzlWCWzZVTEVJTSyAhF+fpKJlCgBr79QMaX/45zc=
Subject key identifier: D8:03:AF:F7:F9:44:9D:BA:B0:5E:D8:3F:95:24:52:B1:90:8F:71:F0
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 5AEF9B226047FC0F6C9C4A633EFB569A1C0330DB
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203137343238.roa
Signing time: Fri 05 Jun 2026 06:23:49 +0000
ROA not before: Fri 05 Jun 2026 06:18:49 +0000
ROA not after: Fri 04 Jun 2027 06:23:49 +0000
asID: 17428
IP address blocks: 219.72.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:ef:9b:22:60:47:fc:0f:6c:9c:4a:63:3e:fb:56:9a:1c:03:30:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:18:49 2026 GMT
Not After : Jun 4 06:23:49 2027 GMT
Subject: CN=D803AFF7F9449DBAB05ED83F952452B1908F71F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:91:be:85:79:86:c8:58:ed:b4:f4:59:83:
77:a0:73:3c:49:5a:78:3f:91:1e:83:19:4c:c2:41:
68:75:98:24:45:cd:8e:75:4b:81:4b:91:c0:1b:30:
0f:57:a5:4d:d8:50:8e:b1:ae:15:a5:11:2d:21:5a:
49:1b:61:5e:7f:3a:0c:6e:16:74:9c:e3:08:74:d5:
83:fd:3f:0e:b9:13:02:d5:df:61:38:3e:d6:04:af:
55:ea:e4:2b:73:f6:50:f2:fc:9e:93:ea:33:73:31:
63:ea:ba:19:79:ed:16:a1:d7:96:02:18:87:cd:86:
17:c1:35:38:79:88:db:62:c1:b5:34:d4:e1:d2:62:
6e:47:cb:22:39:c1:84:fa:d0:dd:09:b9:88:5f:a6:
5e:23:cb:9f:cf:2d:ef:3a:f4:08:f9:5d:0a:75:75:
98:17:cc:24:92:df:99:ec:24:fd:84:a9:f8:0e:05:
9c:d1:19:c3:3a:e7:6c:d1:52:b5:39:14:99:87:a7:
4f:f8:1b:aa:c7:89:80:04:f1:3c:9d:81:38:f6:9a:
17:9d:59:00:cd:80:0e:6c:f4:41:ab:33:99:d4:c6:
41:dc:e3:a3:6c:ee:eb:a8:1c:72:52:52:2d:6d:fb:
7c:1f:b1:8e:01:d1:13:2e:cc:30:42:36:9b:21:b4:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:03:AF:F7:F9:44:9D:BA:B0:5E:D8:3F:95:24:52:B1:90:8F:71:F0
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203137343238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.32.0/20
Signature Algorithm: sha256WithRSAEncryption
64:30:19:25:c9:fe:fb:f1:c9:36:df:1f:fa:d8:dc:5d:51:08:
c5:10:b9:30:4c:69:26:62:b5:ca:f6:5d:f8:f2:35:19:16:4e:
60:62:0f:f5:03:ac:e6:2a:9f:e6:80:e2:fe:d6:f9:c4:26:f1:
ca:28:69:b9:a4:f7:fa:22:37:87:2f:f7:24:21:b8:53:da:73:
55:d7:44:d5:70:c8:3a:3a:1d:d7:9e:d8:a9:e9:38:82:f9:01:
8c:4b:4b:1f:30:85:01:a5:07:f2:c4:97:27:ee:2a:13:e2:54:
45:9f:f9:01:68:82:45:8d:f4:c1:5d:01:64:e1:3b:35:37:48:
cc:98:31:d9:8d:79:86:12:fe:b0:d4:13:2d:a3:85:0e:4d:88:
e8:49:53:e7:f6:26:23:9c:aa:30:53:79:b1:96:22:ee:ff:20:
99:75:6f:3c:b6:83:da:06:41:6b:a8:6a:cd:49:3c:53:82:50:
11:88:d2:de:97:5c:fb:ca:6f:ef:3d:46:95:2d:f7:68:c4:d7:
6c:92:14:ce:9d:5e:ad:0d:06:d4:ab:0d:51:a8:f3:57:a3:0f:
72:a1:33:fb:f7:d0:27:9c:40:da:66:b4:60:a2:93:27:f4:08:
65:8a:d5:3b:dd:02:15:e6:89:90:3f:87:51:9a:14:af:6f:cc:
96:9d:2f:1c
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUWu+bImBH/A9snEpjPvtWmhwDMNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdE
MTQxRjVENTAeFw0yNjA2MDUwNjE4NDlaFw0yNzA2MDQwNjIzNDlaMDMxMTAvBgNV
BAMTKEQ4MDNBRkY3Rjk0NDlEQkFCMDVFRDgzRjk1MjQ1MkIxOTA4RjcxRjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDiJG+hXmGyFjttPRZg3egczxJ
Wng/kR6DGUzCQWh1mCRFzY51S4FLkcAbMA9XpU3YUI6xrhWlES0hWkkbYV5/Ogxu
FnSc4wh01YP9Pw65EwLV32E4PtYEr1Xq5Ctz9lDy/J6T6jNzMWPquhl57Rah15YC
GIfNhhfBNTh5iNtiwbU01OHSYm5HyyI5wYT60N0JuYhfpl4jy5/PLe869Aj5XQp1
dZgXzCSS35nsJP2EqfgOBZzRGcM652zRUrU5FJmHp0/4G6rHiYAE8TydgTj2mhed
WQDNgA5s9EGrM5nUxkHc46Ns7uuoHHJSUi1t+3wfsY4B0RMuzDBCNpshtLq3AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU2AOv9/lEnbqwXtg/lSRSsZCPcfAwHwYDVR0j
BBgwFoAUa1fq17ODGSaa6To+Jvs5Z9FB9dUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NzI0MTk0NzIwOTcyOS8wLzZCNTdFQUQ3QjM4MzE5MjY5QUU5M0EzRTI2RkIz
OTY3RDE0MUY1RDUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNkI1N0VBRDdCMzgzMTkyNjlBRTkzQTNFMjZGQjM5NjdEMTQxRjVENS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3MjA5NzI5LzAvMzIzMTM5MmUzNzMy
MmUzMzMyMmUzMDJmMzIzMDJkMzIzMDIwM2QzZTIwMzEzNzM0MzIzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNtIIDANBgkqhkiG9w0BAQsFAAOCAQEAZDAZJcn++/HJNt8f+tjcXVEIxRC5
MExpJmK1yvZd+PI1GRZOYGIP9QOs5iqf5oDi/tb5xCbxyihpuaT3+iI3hy/3JCG4
U9pzVddE1XDIOjod157Yqek4gvkBjEtLHzCFAaUH8sSXJ+4qE+JURZ/5AWiCRY30
wV0BZOE7NTdIzJgx2Y15hhL+sNQTLaOFDk2I6ElT5/YmI5yqMFN5sZYi7v8gmXVv
PLaD2gZBa6hqzUk8U4JQEYjS3pdc+8pv7z1GlS33aMTXbJIUzp1erQ0G1KsNUajz
V6MPcqEz+/fQJ5xA2ma0YKKTJ/QIZYrVO90CFeaJkD+HUZoUr2/Mlp0vHA==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client