
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e302e302f31362d3136203d3e203435303833.roa
File: 312e34352e302e302f31362d3136203d3e203435303833.roa (raw, json)
Hash identifier: S799eigIvbk3Ymc9ckPWOrTDkEky88E1QuEBeGfIWOo=
Subject key identifier: B1:30:A9:D0:3B:FA:DC:1F:BE:FB:63:52:3A:36:2C:A8:28:72:8C:AC
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 7AFBB74453609DD74320AF433348BE0237492264
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e302e302f31362d3136203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:15:23 +0000
ROA not before: Tue 16 Jun 2026 03:10:23 +0000
ROA not after: Tue 15 Jun 2027 03:15:23 +0000
asID: 45083
IP address blocks: 1.45.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:fb:b7:44:53:60:9d:d7:43:20:af:43:33:48:be:02:37:49:22:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 03:10:23 2026 GMT
Not After : Jun 15 03:15:23 2027 GMT
Subject: CN=B130A9D03BFADC1FBEFB63523A362CA828728CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:38:8e:8f:9d:d3:a4:58:07:7f:48:e9:1f:28:
0f:56:f0:e5:95:12:60:2f:ee:d2:75:68:7e:6d:f8:
b5:94:6f:94:1b:51:67:af:9f:c4:6c:6b:b2:99:a5:
26:27:eb:8a:4f:a3:31:94:d4:fe:52:44:9a:fd:3a:
05:3b:ba:f9:80:39:6f:fd:bd:dc:bd:72:83:cf:62:
77:3b:ef:0b:42:09:71:9c:a8:f1:c0:eb:77:2d:2b:
d7:54:00:83:f6:08:68:31:00:7f:8f:5a:64:ff:d5:
11:a9:66:22:13:1b:7a:01:aa:3f:3d:22:19:56:5a:
6e:38:3e:36:a4:d3:67:1c:cc:ae:ba:c2:cb:ad:51:
36:08:24:13:b1:ee:87:22:1e:bb:8c:c4:2e:75:82:
5b:9c:d7:1c:35:8f:e9:48:10:0a:0d:10:f0:ab:17:
c6:61:0c:8a:c1:37:4b:26:75:49:b0:99:6a:27:ad:
0a:ee:95:b6:36:65:0d:70:7c:fd:bc:c3:76:e1:65:
6d:ac:fe:9a:1e:c6:3a:ad:f5:f5:24:07:21:40:b0:
14:04:f4:d9:4b:a2:d4:07:e2:1d:56:fc:de:4e:5c:
37:3e:c2:db:84:81:c0:c1:4e:0a:01:91:58:5d:78:
25:1f:37:3b:18:25:b6:f8:38:14:6b:65:70:ef:49:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:30:A9:D0:3B:FA:DC:1F:BE:FB:63:52:3A:36:2C:A8:28:72:8C:AC
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e302e302f31362d3136203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2e:96:21:50:b6:ad:67:cb:3b:cf:46:a8:53:d3:2c:24:2b:92:
1a:f8:c2:97:45:33:0a:f9:13:4c:f5:27:ab:45:30:4f:d3:67:
58:b5:5f:ca:4c:5b:47:30:dd:aa:5d:aa:f1:47:dc:8e:96:fe:
b6:2c:c7:17:91:2d:62:0d:70:25:c6:c8:15:4e:40:71:28:6c:
8e:91:20:db:74:d8:11:fd:04:7d:7f:39:c8:ea:31:f6:5e:bc:
89:93:8e:a5:f1:e2:c3:3a:76:60:16:aa:cf:cb:d3:51:27:fd:
79:b3:37:cb:91:12:81:df:ff:44:f5:16:ed:44:f6:b5:b5:a3:
10:85:49:19:2a:03:3c:8c:4a:52:2d:b3:6b:3b:fb:14:e6:6b:
55:ef:43:96:48:98:c8:60:e2:44:6a:f8:6b:a5:14:6f:8e:d7:
09:19:06:40:c2:46:00:86:71:9b:ad:7e:f9:67:cb:9a:b3:4e:
71:2e:29:d5:ed:bd:0f:28:58:60:42:18:13:83:67:95:52:51:
f6:aa:1c:95:f6:96:89:a1:6b:01:43:1f:0c:ca:a8:df:87:50:
9e:77:9d:03:f3:27:48:e9:8e:05:e0:43:45:51:bb:f4:bb:16:
41:89:aa:cf:59:90:99:32:16:32:47:d8:49:4a:03:21:09:f6:
09:7f:4e:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:54:30 2026 by rpki-client