
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203535393930.roa
File: 3231392e37322e33322e302f32302d3230203d3e203535393930.roa (raw, json)
Hash identifier: CPAv7zVUyDznEWe0Q7/6rrkgvF+Gy8HaSBuArHwi58U=
Subject key identifier: A2:0B:06:69:21:3B:6A:0C:0B:7B:7C:39:36:03:48:F4:B2:64:25:79
Certificate issuer: /CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Certificate serial: 3CE8F844322B95444F318535163AE73FFCE260F2
Authority key identifier: 6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203535393930.roa
Signing time: Fri 05 Jun 2026 06:23:48 +0000
ROA not before: Fri 05 Jun 2026 06:18:48 +0000
ROA not after: Fri 04 Jun 2027 06:23:48 +0000
asID: 55990
IP address blocks: 219.72.32.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 12:15:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:e8:f8:44:32:2b:95:44:4f:31:85:35:16:3a:e7:3f:fc:e2:60:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6B57EAD7B38319269AE93A3E26FB3967D141F5D5
Validity
Not Before: Jun 5 06:18:48 2026 GMT
Not After : Jun 4 06:23:48 2027 GMT
Subject: CN=A20B0669213B6A0C0B7B7C39360348F4B2642579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:23:16:77:57:97:46:e1:03:61:cb:33:a5:dc:
cf:2b:da:39:28:91:40:c3:b0:15:41:88:92:8c:7e:
42:67:e0:ca:d3:40:15:3f:d4:72:f7:a9:52:66:e3:
e9:59:07:01:3b:a5:c6:6a:f3:2f:cf:69:2b:44:7f:
2a:af:09:05:cd:76:b3:8e:08:25:55:45:38:32:b0:
27:c8:56:3b:3c:2f:91:4c:2d:8e:ca:2e:81:95:b1:
dd:af:a6:71:87:0e:eb:85:93:d1:e7:de:57:e6:de:
b3:79:46:5a:a2:ed:ac:32:b4:33:d4:14:2b:68:0f:
3e:5b:d1:6a:28:4d:05:a1:5d:00:eb:64:bc:a6:59:
14:f0:9a:7c:36:ce:18:5c:32:2d:8c:c9:a4:15:5d:
87:16:aa:18:ea:6a:97:83:dd:79:25:86:22:e1:9e:
e8:d8:bf:9a:4b:55:b6:32:f0:d9:7e:dd:b3:fd:2e:
93:9b:cc:06:94:2b:be:ed:bb:ed:96:ba:ff:19:9d:
10:fa:1b:07:b6:ff:6a:58:56:23:77:a7:0e:a8:7c:
1c:1b:2d:6a:da:f6:09:a3:a7:4e:3d:16:98:62:e2:
39:95:5f:c1:e7:f4:e8:b8:00:ca:43:8e:ac:86:c3:
54:10:d3:ee:57:56:8f:d0:a3:05:d5:b0:8f:0b:a9:
6c:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:0B:06:69:21:3B:6A:0C:0B:7B:7C:39:36:03:48:F4:B2:64:25:79
X509v3 Authority Key Identifier:
keyid:6B:57:EA:D7:B3:83:19:26:9A:E9:3A:3E:26:FB:39:67:D1:41:F5:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6B57EAD7B38319269AE93A3E26FB3967D141F5D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947209729/0/3231392e37322e33322e302f32302d3230203d3e203535393930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.72.32.0/20
Signature Algorithm: sha256WithRSAEncryption
cf:1a:3e:48:c3:94:2f:65:57:20:df:d8:3d:ae:47:68:1a:66:
69:c7:6e:4a:38:3c:fa:e6:12:6b:e4:1b:a8:ce:79:96:02:7d:
af:53:dd:a3:6f:88:af:6a:3d:a0:5b:26:b5:54:7f:b9:06:d9:
68:9b:49:ed:1a:f7:34:8d:04:0e:5f:2e:27:93:bb:5d:d0:7e:
7f:a7:23:4a:3c:96:c9:f0:c6:b1:2e:29:9d:83:fd:1f:5f:2b:
96:a9:55:25:50:91:e1:e6:e2:80:41:62:7f:69:d3:21:e0:3c:
b2:3c:77:eb:07:8c:ff:f6:64:76:83:d7:4d:c6:1f:ef:cf:29:
19:2e:77:e3:1f:fc:dc:f8:e6:e1:a7:dd:37:06:a1:14:84:a9:
dd:b4:f9:d9:ad:f9:07:6b:e5:60:19:45:e1:a4:9a:bf:43:58:
ac:de:3f:da:c1:05:bf:f8:5e:d3:c4:16:fe:f3:45:4e:a8:b1:
52:4e:37:9e:df:46:03:ba:c7:d5:f6:a7:10:81:f4:db:ae:13:
43:81:87:3f:43:c3:0b:90:67:fc:33:39:75:b1:a3:b1:9c:ea:
d2:82:f8:48:57:9d:72:f0:26:64:3c:5a:bc:09:e8:15:a1:97:
01:bb:c1:ca:73:c0:8c:89:76:71:13:10:34:c6:04:3c:14:1d:
c8:37:b3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:48:30 2026 by rpki-client