
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f31372d3137203d3e203435303833.roa
File: 312e34352e3132382e302f31372d3137203d3e203435303833.roa (raw, json)
Hash identifier: d+EkuGPOkhJmwGWVL9ZRh5bUHMlxmSJeuDqkGvpQf9I=
Subject key identifier: 0E:BA:33:B4:71:B4:C0:C7:E9:0B:64:97:62:F7:1C:EF:97:77:AD:5C
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 396305487F3CF1F6B3F92B0A1BCB1F36E8E437B8
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f31372d3137203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:14:57 +0000
ROA not before: Tue 16 Jun 2026 03:09:57 +0000
ROA not after: Tue 15 Jun 2027 03:14:57 +0000
asID: 45083
IP address blocks: 1.45.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:63:05:48:7f:3c:f1:f6:b3:f9:2b:0a:1b:cb:1f:36:e8:e4:37:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 03:09:57 2026 GMT
Not After : Jun 15 03:14:57 2027 GMT
Subject: CN=0EBA33B471B4C0C7E90B649762F71CEF9777AD5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:81:62:0c:59:76:d5:d7:90:a2:55:0a:20:
5f:8c:b7:72:1a:28:a7:d4:3b:7d:f5:1a:7f:12:72:
c8:b6:11:8a:57:83:0d:68:71:8d:13:fc:13:cd:0e:
1a:62:c1:39:0f:f5:50:41:b2:4e:ed:4a:74:85:0c:
49:ac:cf:c1:c5:92:8c:7f:91:39:76:cc:c7:03:3b:
4f:5b:58:00:62:94:8c:9c:0d:30:8a:40:a1:05:21:
78:4c:d5:24:87:c5:e3:ba:7c:03:ba:ef:54:9a:b0:
8f:ed:f9:23:8d:54:0e:ba:0d:db:f7:70:be:c3:bf:
b5:69:09:aa:59:37:fc:e2:83:17:71:f3:a6:9d:ba:
0b:fb:da:5d:42:23:c2:f9:bf:ca:cf:14:c4:0d:1d:
84:a0:0c:6d:4d:2c:ad:9d:9d:31:54:3a:fa:41:d1:
e4:f4:cf:3e:03:c9:38:2f:95:fb:bc:7f:a7:1f:84:
44:7c:c5:3a:ad:d6:c3:20:6e:05:67:83:11:3d:bf:
86:dc:43:4b:a9:8d:d1:d9:9f:19:f0:eb:f7:89:eb:
9c:45:96:45:e1:cc:f3:e2:70:28:8a:1c:8f:58:8d:
8e:92:1b:6c:e5:e5:ef:2d:21:a6:bf:4f:20:bb:e7:
ae:a3:2e:35:3d:b5:fc:41:24:af:9d:5c:e1:96:0c:
b8:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BA:33:B4:71:B4:C0:C7:E9:0B:64:97:62:F7:1C:EF:97:77:AD:5C
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3132382e302f31372d3137203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.128.0/17
Signature Algorithm: sha256WithRSAEncryption
97:53:29:5b:f3:d7:36:3b:9a:27:20:aa:24:81:ed:be:a3:5a:
08:14:69:36:57:7a:80:52:c8:71:70:4a:36:90:fc:79:3f:dc:
5c:80:69:2f:35:81:2d:ce:98:c1:5e:82:71:91:d3:ac:8d:09:
32:5c:77:94:d8:00:4e:cc:e4:16:2c:bd:71:95:64:7a:60:53:
8e:3a:62:0d:1a:4a:ac:59:ca:5a:8b:06:cc:84:d7:9c:ce:92:
61:c9:74:44:08:76:f7:30:92:a9:a9:22:30:0e:a6:16:24:fe:
bc:61:27:09:b1:17:c4:c6:5c:ee:36:ce:03:f6:0a:48:36:97:
bf:38:cb:1d:51:37:c9:6f:cc:aa:e8:a3:12:49:be:5b:95:d6:
7b:86:7a:c9:d4:84:02:07:bf:9e:0b:d9:1e:5c:c8:2d:b3:74:
78:44:79:a0:b5:82:0e:8b:5b:29:20:84:75:29:0c:21:40:b9:
97:88:8c:24:1f:fa:72:f9:53:06:33:51:ce:d0:d4:b3:b3:03:
80:fc:d1:1b:27:4c:cb:58:de:64:78:bb:48:bb:f9:20:af:65:
84:d4:1a:87:46:52:69:68:7b:63:e2:20:45:71:92:74:e1:cd:
67:02:55:4d:99:2f:c6:c1:73:94:00:b7:97:3b:61:10:31:47:
aa:89:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:57:54 2026 by rpki-client