
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3132352e36322e34392e302f32342d3234203d3e20313436373838.roa
File: 3132352e36322e34392e302f32342d3234203d3e20313436373838.roa (raw, json)
Hash identifier: LNEhmHCp10qCUFCDAGMIVGvXtcIDgvLqYw5r6nwi1B0=
Subject key identifier: 32:E4:A8:89:5A:6E:7D:28:8D:96:F0:46:DF:94:31:A3:E8:33:C2:F3
Certificate issuer: /CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Certificate serial: 414A37825D98ECD1D15CE70055533CE02473CE9B
Authority key identifier: 57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3132352e36322e34392e302f32342d3234203d3e20313436373838.roa
Signing time: Mon 01 Jun 2026 02:07:57 +0000
ROA not before: Mon 01 Jun 2026 02:02:57 +0000
ROA not after: Mon 31 May 2027 02:07:57 +0000
asID: 146788
IP address blocks: 125.62.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:4a:37:82:5d:98:ec:d1:d1:5c:e7:00:55:53:3c:e0:24:73:ce:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57FBC602F8DD1AA06D45E7F3F1993968E7995AE0
Validity
Not Before: Jun 1 02:02:57 2026 GMT
Not After : May 31 02:07:57 2027 GMT
Subject: CN=32E4A8895A6E7D288D96F046DF9431A3E833C2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:6e:97:4c:9a:e9:8e:5a:5e:09:86:e9:23:
8a:19:af:58:10:f3:9c:15:8c:16:fd:5a:3c:1c:2f:
14:69:17:1c:23:fe:58:cf:7c:67:70:78:0e:54:3b:
3c:3a:20:c3:3c:57:12:ce:67:fe:1d:3e:aa:e8:52:
86:9e:38:0e:4c:41:d2:a5:8e:b3:98:3a:dc:ab:e6:
5e:21:01:ea:69:11:c4:8c:88:40:0e:f3:2e:5f:66:
83:25:4f:db:cf:45:92:53:1c:55:46:6f:2e:c7:4c:
2e:6a:45:1c:22:39:72:fd:14:33:56:5c:28:20:fb:
fb:35:7b:9d:58:2d:29:0d:63:20:50:83:72:be:37:
80:ff:54:6f:b8:4c:5d:e0:d3:7b:35:83:b1:ba:96:
74:6c:99:81:3d:1a:b0:1f:06:dd:91:e6:dc:a3:b0:
fd:2d:5e:c4:fc:88:ae:03:62:97:83:34:29:f1:bb:
c2:bb:65:d8:83:98:8e:04:cc:66:15:e0:e3:3b:49:
1a:08:02:f2:7d:1e:1a:64:bd:5c:f4:40:01:bc:7a:
02:01:61:86:06:42:5d:ea:cd:91:d9:ae:5e:04:32:
dc:3c:a9:53:06:d7:ba:2c:81:f7:a7:44:f1:2c:82:
c2:de:10:67:9d:c5:08:36:ab:7b:ed:44:42:51:a4:
2f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E4:A8:89:5A:6E:7D:28:8D:96:F0:46:DF:94:31:A3:E8:33:C2:F3
X509v3 Authority Key Identifier:
keyid:57:FB:C6:02:F8:DD:1A:A0:6D:45:E7:F3:F1:99:39:68:E7:99:5A:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/57FBC602F8DD1AA06D45E7F3F1993968E7995AE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199947878403/0/3132352e36322e34392e302f32342d3234203d3e20313436373838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
125.62.49.0/24
Signature Algorithm: sha256WithRSAEncryption
27:a7:ee:c4:44:da:1c:63:e2:10:9c:46:41:88:56:e1:16:9c:
8a:4e:f8:1f:79:52:fd:d9:c6:3d:ba:8d:d1:8a:c4:1e:38:46:
d9:8e:46:10:ba:bf:64:85:99:6c:23:8e:f4:5b:30:de:dd:b9:
6a:a2:3d:66:fc:1f:a6:82:5b:17:79:db:f5:05:4d:df:b8:82:
67:82:0d:10:e6:27:bd:5e:ac:73:e1:c5:9f:8e:11:7b:8d:69:
71:97:9a:75:7b:01:61:6f:9e:bd:27:c7:7a:88:79:dd:79:a7:
ed:f6:ee:ad:98:5a:1c:7a:53:96:82:15:bb:a7:98:db:87:3f:
0b:ef:74:da:e2:e6:1f:4d:ad:d6:e8:de:52:29:92:e2:4d:66:
13:12:86:5f:e8:bc:d2:55:18:03:dc:69:8d:9a:95:61:cc:42:
74:c9:43:b8:f7:36:f2:53:0e:03:4a:ba:e6:ab:74:d9:f9:e7:
14:74:9b:32:ea:43:3d:82:e2:77:a5:42:5e:10:3c:45:9b:f4:
ed:3c:2f:ae:6e:95:2a:10:ab:ce:e3:f2:46:8f:da:33:8f:3a:
a0:15:11:0c:82:fb:07:b8:35:0e:29:4d:10:33:c2:b4:08:83:
8d:34:1a:b0:73:63:6e:2e:b3:d1:fe:b0:a2:9d:7e:92:ae:c1:
d9:0c:26:32
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUQUo3gl2Y7NHRXOcAVVM84CRzzpswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhF
Nzk5NUFFMDAeFw0yNjA2MDEwMjAyNTdaFw0yNzA1MzEwMjA3NTdaMDMxMTAvBgNV
BAMTKDMyRTRBODg5NUE2RTdEMjg4RDk2RjA0NkRGOTQzMUEzRTgzM0MyRjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2G6XTJrpjlpeCYbpI4oZr1gQ
85wVjBb9WjwcLxRpFxwj/ljPfGdweA5UOzw6IMM8VxLOZ/4dPqroUoaeOA5MQdKl
jrOYOtyr5l4hAeppEcSMiEAO8y5fZoMlT9vPRZJTHFVGby7HTC5qRRwiOXL9FDNW
XCgg+/s1e51YLSkNYyBQg3K+N4D/VG+4TF3g03s1g7G6lnRsmYE9GrAfBt2R5tyj
sP0tXsT8iK4DYpeDNCnxu8K7ZdiDmI4EzGYV4OM7SRoIAvJ9HhpkvVz0QAG8egIB
YYYGQl3qzZHZrl4EMtw8qVMG17osgfenRPEsgsLeEGedxQg2q3vtREJRpC8NAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUMuSoiVpufSiNlvBG35Qxo+gzwvMwHwYDVR0j
BBgwFoAUV/vGAvjdGqBtRefz8Zk5aOeZWuAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0Nzg3ODQwMy8wLzU3RkJDNjAyRjhERDFBQTA2RDQ1RTdGM0YxOTkz
OTY4RTc5OTVBRTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTdGQkM2MDJGOEREMUFBMDZENDVFN0YzRjE5OTM5NjhFNzk5NUFFMC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3NjE5OTk0Nzg3ODQwMy8wLzMxMzIzNTJlMzYz
MjJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM3MzgzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAH0+MTANBgkqhkiG9w0BAQsFAAOCAQEAJ6fuxETaHGPiEJxGQYhW4Rac
ik74H3lS/dnGPbqN0YrEHjhG2Y5GELq/ZIWZbCOO9Fsw3t25aqI9ZvwfpoJbF3nb
9QVN37iCZ4INEOYnvV6sc+HFn44Re41pcZeadXsBYW+evSfHeoh53Xmn7fburZha
HHpTloIVu6eY24c/C+902uLmH02t1ujeUimS4k1mExKGX+i80lUYA9xpjZqVYcxC
dMlDuPc28lMOA0q65qt02fnnFHSbMupDPYLid6VCXhA8RZv07Twvrm6VKhCrzuPy
Ro/aM486oBURDIL7B7g1DilNEDPCtAiDjTQasHNjbi6z0f6wop1+kq7B2QwmMg==
-----END CERTIFICATE-----
Generated at Sun Jun 14 08:33:01 2026 by rpki-client