
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130342e302f32322d3232203d3e203435303833.roa
File: 312e34352e3130342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: hvCkClDoU4+TEEhMt274zBVqUkoafPb1XyLPL95p+F0=
Subject key identifier: 5D:81:E3:3F:CE:B4:8F:64:A5:02:BB:51:DB:64:72:AC:0C:12:78:2E
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 501B986689E41BC94E5FE0DEF24ED0991B7A7461
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130342e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:07:07 +0000
ROA not before: Tue 16 Jun 2026 03:02:07 +0000
ROA not after: Tue 15 Jun 2027 03:07:07 +0000
asID: 45083
IP address blocks: 1.45.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:1b:98:66:89:e4:1b:c9:4e:5f:e0:de:f2:4e:d0:99:1b:7a:74:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 03:02:07 2026 GMT
Not After : Jun 15 03:07:07 2027 GMT
Subject: CN=5D81E33FCEB48F64A502BB51DB6472AC0C12782E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:2d:4f:bf:8a:2b:1f:bd:b8:3a:64:10:22:
8c:6d:b7:33:77:aa:22:f1:cd:af:d6:77:32:4e:94:
5d:ba:3d:0f:69:f3:4a:d8:02:3e:a2:7d:62:7c:42:
81:49:c1:4e:29:3b:62:90:18:c4:9f:9a:6d:d1:ee:
7b:45:1d:5c:06:7a:ca:e8:7d:ea:e1:ac:6e:48:5f:
a6:33:ed:f9:05:b5:6a:a5:3a:c9:a8:7e:cc:0d:9b:
18:09:11:4c:2e:5e:df:03:29:4f:18:bd:9d:3c:8f:
ed:bc:d4:a6:2a:3e:af:d8:65:6c:6f:9e:0b:7f:da:
32:1b:15:df:32:59:b1:e0:cb:44:67:1f:cd:63:84:
0f:71:d0:f5:35:a4:1b:e5:9e:36:b4:7c:9f:9c:3c:
d6:8d:26:00:e5:d9:df:a2:dd:9c:22:27:f7:d2:cf:
72:f2:6e:10:b5:a9:32:d1:f8:bc:c1:a4:a3:60:e0:
06:d0:72:fa:2a:56:53:92:b4:42:32:4b:ae:dc:6f:
ab:59:50:88:25:d7:e1:96:9f:9a:69:3d:66:12:d1:
b1:d6:48:71:6c:93:2d:e9:38:19:56:e2:7f:5c:54:
cc:ea:19:b1:f6:f4:41:d7:0c:7e:61:fc:e5:b7:71:
6e:30:da:21:13:ac:87:c2:43:e7:8c:28:36:e8:18:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:81:E3:3F:CE:B4:8F:64:A5:02:BB:51:DB:64:72:AC:0C:12:78:2E
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3130342e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.104.0/22
Signature Algorithm: sha256WithRSAEncryption
46:01:ce:c7:f9:82:ab:62:17:c9:68:93:bb:d3:89:dc:8d:8b:
9b:69:8d:d9:52:59:63:fa:fa:de:03:b6:5a:13:99:ae:70:df:
f6:51:bf:a1:a2:d7:56:3e:4b:2f:d2:32:50:e4:24:ab:c4:e7:
57:74:fa:3a:39:37:55:52:2e:54:dc:bd:98:70:00:be:e6:9a:
fe:7e:7e:ee:ce:fb:21:3b:0b:9f:c0:92:4e:77:9d:01:ee:c5:
4e:6c:b3:66:a4:97:7d:84:dc:2c:5e:71:9b:9c:64:17:b5:8a:
78:63:8a:fd:26:76:3a:31:f0:a3:1b:0f:f8:f5:10:0b:f1:1a:
7f:fb:01:46:7b:69:70:bf:c8:53:a9:fa:b1:c9:2e:60:b6:64:
ca:d3:79:1c:e0:46:d7:1d:d8:63:c6:4e:94:20:e5:47:24:1a:
2b:29:95:45:ac:e8:01:68:d0:89:db:26:3d:8b:ce:80:85:0d:
23:ff:ee:b3:72:20:a3:f2:66:f3:69:4f:b7:34:0c:f5:4d:ec:
8b:39:3c:0b:c6:7c:f7:11:ed:1a:11:bb:bb:b5:3b:1b:05:e7:
17:8e:37:d7:19:25:d1:68:47:a5:49:89:c0:ac:03:37:e8:44:
3c:e1:e9:bf:81:85:b1:22:72:7d:8f:66:a7:4d:31:da:c2:96:
6e:d5:6d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:01 2026 by rpki-client