
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132302e302f32322d3232203d3e203435303833.roa
File: 312e34352e3132302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: Hmd2MjUHi4Mtfb+MUtr4raMDkFE/bk6OVR+ch9KCAwE=
Subject key identifier: 5D:F6:3F:D0:A6:C9:74:B5:38:41:DB:E8:6C:FF:B9:B4:A7:4A:D4:5A
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 18B727206B0A19156C061EED95C5E04B9C3CD64D
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132302e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:04:03 +0000
ROA not before: Tue 16 Jun 2026 02:59:03 +0000
ROA not after: Tue 15 Jun 2027 03:04:03 +0000
asID: 45083
IP address blocks: 1.45.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:b7:27:20:6b:0a:19:15:6c:06:1e:ed:95:c5:e0:4b:9c:3c:d6:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 02:59:03 2026 GMT
Not After : Jun 15 03:04:03 2027 GMT
Subject: CN=5DF63FD0A6C974B53841DBE86CFFB9B4A74AD45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ff:a7:a5:9f:26:33:44:27:74:ef:8e:75:dd:
da:fa:aa:83:d3:93:75:f1:e2:17:d3:26:14:4f:2b:
57:1f:03:94:19:19:2d:43:b7:91:df:21:26:8b:06:
0c:fa:5a:79:9c:57:a3:37:bb:f6:98:df:71:70:38:
59:52:3a:29:5a:ca:23:48:c3:2c:f8:6f:77:60:41:
51:5b:86:30:8d:1a:ba:30:c7:0e:f9:53:01:64:d8:
65:64:ec:2c:82:89:71:a8:77:66:4c:7a:23:4b:c8:
e8:fc:5f:75:4d:cb:34:e7:0e:0c:ee:d0:30:6b:83:
cd:5e:03:aa:97:ac:3a:fe:95:25:dd:47:b5:63:b4:
97:72:34:d0:64:22:ad:a8:58:1a:5d:9d:16:37:53:
93:19:d9:be:cf:39:9c:43:7d:11:d2:c9:34:b8:99:
a9:b9:cc:c2:ba:e9:03:7c:38:33:24:9b:51:f2:2e:
f2:20:9f:61:f5:4e:75:eb:a2:ec:9c:fb:97:8a:9d:
29:19:62:30:16:2a:2d:b1:72:67:0d:a1:5d:8d:36:
d5:2c:1c:58:df:53:a8:25:f2:4c:d3:a2:79:97:40:
4d:d0:7f:9c:76:82:29:6f:ad:07:e4:29:03:d2:cf:
66:ed:b0:fc:c9:96:be:ba:43:13:28:eb:ba:2d:43:
1f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F6:3F:D0:A6:C9:74:B5:38:41:DB:E8:6C:FF:B9:B4:A7:4A:D4:5A
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132302e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.120.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:79:b8:76:b2:1b:e7:d1:48:43:7a:10:09:fc:dc:74:fd:c7:
85:bf:9d:fe:f5:31:0b:97:d7:6c:0a:5e:67:30:a0:dc:ae:bd:
eb:47:4f:4c:0f:ad:5d:60:e0:46:41:6b:b3:47:2c:54:f3:dc:
0a:d9:51:b7:2d:35:c0:5f:1d:5c:fe:72:28:28:4d:69:07:52:
44:b4:b5:8f:d4:04:95:12:30:9b:d0:e0:22:f7:00:3a:4b:14:
1c:05:09:93:9b:01:d7:f0:bb:60:71:1d:eb:16:75:16:f0:b9:
46:d8:3a:cf:62:32:c7:8c:b0:c8:5e:a9:7a:cb:46:8f:f9:9d:
d3:26:55:64:02:d5:66:bb:27:7c:ba:3e:3a:5f:bb:cc:95:21:
29:4c:99:1b:70:2b:f4:1e:5c:23:00:7b:96:12:32:69:de:89:
e9:b5:93:e6:b4:aa:0d:8e:87:fa:d2:11:fd:d7:9b:d5:cd:b9:
86:53:25:6e:39:d9:4d:22:c4:2c:94:6b:c3:25:20:65:86:c2:
66:70:65:e6:41:23:0c:a2:01:21:ea:8b:7a:e2:a8:c5:d8:33:
0f:da:7a:2e:fd:d5:e2:8e:6f:47:3a:f8:f0:ef:ff:3b:bd:e4:
0a:c2:39:cf:7d:8d:23:4d:4f:54:a8:c8:2c:75:90:80:a6:e1:
e9:07:24:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:04 2026 by rpki-client