
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134302e302f32322d3232203d3e203435303833.roa
File: 312e34352e3134302e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: vh9Es4a3vEwtqFNrHFbZRzNwK0ZcLZcNu3LtTDAhzDY=
Subject key identifier: 89:36:69:81:D8:77:EE:D0:3B:3F:F0:30:B8:7D:66:DA:75:4C:20:AA
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 29CCFA08EA5859E1309E29AF1391C4C59AFDD799
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134302e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:06:52 +0000
ROA not before: Tue 16 Jun 2026 03:01:52 +0000
ROA not after: Tue 15 Jun 2027 03:06:52 +0000
asID: 45083
IP address blocks: 1.45.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:cc:fa:08:ea:58:59:e1:30:9e:29:af:13:91:c4:c5:9a:fd:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 03:01:52 2026 GMT
Not After : Jun 15 03:06:52 2027 GMT
Subject: CN=89366981D877EED03B3FF030B87D66DA754C20AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:32:30:57:93:88:d6:4d:e7:f3:e8:a3:3d:20:
b8:f0:54:a4:b2:d9:43:69:6d:c3:d8:1a:4b:de:53:
6e:e8:9e:8c:60:8f:26:2d:25:a5:b1:5c:bc:10:da:
3b:2b:73:ef:43:27:97:8e:36:db:b8:53:c1:df:a5:
36:63:46:6d:24:66:d4:c1:b1:8c:6b:ef:1f:6e:0a:
6b:e7:b3:99:28:a0:ba:a5:01:9e:a9:19:d7:35:0d:
5d:11:50:f6:1c:4f:cf:ff:aa:25:82:ca:be:14:7b:
fc:80:86:01:5e:db:e3:3f:29:88:8f:c9:b1:59:ea:
ed:95:5f:01:3d:89:d2:e9:84:ba:6c:21:0b:6e:ba:
3a:2c:9f:a7:6f:da:cd:6a:e0:65:21:64:aa:65:37:
b1:ea:f8:d6:84:2b:1f:60:53:a3:f0:e8:1f:ac:a4:
44:6d:25:fd:dd:30:78:25:6d:72:2c:98:24:7e:ce:
68:8d:63:18:22:5f:45:fd:4a:82:19:44:b0:53:25:
5c:1b:c7:5c:74:fc:b8:bc:d9:c8:f3:0f:3e:da:23:
ba:fa:c8:28:6e:6b:bf:ac:3d:16:5d:c0:3c:c0:4a:
ab:45:10:0c:00:7a:aa:59:ba:0f:12:04:71:4a:0d:
b6:ad:11:eb:80:31:d9:16:66:48:b1:d1:ef:27:b1:
27:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:36:69:81:D8:77:EE:D0:3B:3F:F0:30:B8:7D:66:DA:75:4C:20:AA
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134302e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.140.0/22
Signature Algorithm: sha256WithRSAEncryption
61:26:8f:10:35:c9:7a:6b:c8:bd:65:0b:8b:19:29:e7:4f:9f:
ab:ec:db:ba:54:1e:c8:0d:1e:c0:1d:4a:44:62:ae:03:84:4e:
e2:39:06:83:c1:13:1b:6d:2f:a6:17:49:4c:70:56:29:8b:99:
f2:50:b3:e1:45:d7:0b:ff:1c:bf:0d:ba:67:05:d6:65:6a:ab:
8d:68:c1:f9:42:01:bd:be:28:76:0d:09:64:e5:cc:88:fd:65:
44:ac:56:6d:7b:31:de:80:57:ea:a8:3f:11:3f:0c:6b:72:9f:
f3:cf:29:74:86:cf:88:6b:45:67:88:58:7e:5f:aa:b3:9d:26:
70:66:e8:0b:d1:92:b6:4c:da:fc:98:33:07:57:9c:14:f6:bb:
60:a3:f1:c1:3f:e3:11:2b:d9:37:06:4b:c6:4d:fe:9b:cc:96:
df:5a:7b:85:b8:8e:1a:79:2e:a6:4a:10:74:07:eb:a5:47:7e:
f7:08:93:dd:d6:69:8c:87:b7:34:ea:47:6b:a0:ec:09:7c:80:
c4:08:ac:17:d6:56:ab:c1:23:8b:33:08:f8:31:80:0f:91:70:
b4:01:7b:80:90:5e:2e:91:b6:85:15:f4:4f:7a:1a:4a:5e:57:
ad:a1:4a:3f:63:d4:27:4a:8c:d1:9c:06:9e:f2:9d:b4:a0:bd:
78:06:71:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:29 2026 by rpki-client