
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134342e302f32322d3232203d3e203435303833.roa
File: 312e34352e3134342e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: PUKFUHMdODgociBJcdop6bvv5JSr6MpKOYZPDEEcz0Q=
Subject key identifier: 13:06:79:7C:96:9B:2B:DD:BA:67:A5:49:7F:7A:3C:F0:2F:55:8C:D9
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 45FBB534876A9CC27837DB4287B90F4F8801BA25
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134342e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:13:38 +0000
ROA not before: Tue 16 Jun 2026 03:08:38 +0000
ROA not after: Tue 15 Jun 2027 03:13:38 +0000
asID: 45083
IP address blocks: 1.45.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:fb:b5:34:87:6a:9c:c2:78:37:db:42:87:b9:0f:4f:88:01:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 03:08:38 2026 GMT
Not After : Jun 15 03:13:38 2027 GMT
Subject: CN=1306797C969B2BDDBA67A5497F7A3CF02F558CD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:79:08:b7:1a:e5:24:24:2a:e0:6b:0a:20:3e:
7a:9d:fb:01:02:0c:7f:92:a4:f5:0b:56:d2:57:8e:
1b:19:02:85:38:f5:52:3b:24:d4:a1:09:63:63:17:
be:49:b4:b8:f9:b6:ad:38:59:b9:c4:3a:c6:f0:b9:
f6:58:64:f9:fd:81:1b:de:0f:7d:9b:e2:8e:65:fe:
8e:6b:96:a8:94:0b:9f:06:73:2e:36:ac:05:9c:14:
78:35:6d:13:71:51:b7:02:0e:31:f3:02:a0:f0:5d:
73:1f:5e:50:86:86:1e:0b:29:86:45:66:1a:19:9b:
65:11:6e:2f:4d:e7:a4:c3:c0:64:27:b5:81:4a:26:
f3:4a:4e:4d:63:a2:0e:91:e0:3a:ac:8b:8d:09:b4:
5b:65:7d:9a:3e:14:3a:c1:6b:8a:fe:1c:b5:57:f4:
42:b1:ec:ff:e4:ed:bd:c8:47:7f:6c:51:a3:38:f5:
f9:e0:99:28:50:e2:4f:7a:1d:de:63:6f:b0:81:d1:
ba:e4:34:97:32:75:e1:f5:56:9b:11:46:45:25:1d:
c4:fe:69:9c:fa:12:77:ba:80:ce:f8:5f:ae:27:d1:
20:5f:23:55:df:ad:d7:84:26:2a:94:d1:14:31:b7:
c8:3a:1b:8d:ac:7c:ab:71:09:39:1e:cd:78:88:b0:
ff:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:06:79:7C:96:9B:2B:DD:BA:67:A5:49:7F:7A:3C:F0:2F:55:8C:D9
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3134342e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.144.0/22
Signature Algorithm: sha256WithRSAEncryption
49:bd:a7:33:70:53:57:63:a9:71:ac:e7:1e:02:54:37:f1:1d:
6a:d8:59:1f:00:08:5f:62:0b:e2:ca:46:34:ab:06:84:d1:23:
84:01:25:92:c7:3f:70:a4:a0:c6:04:b8:8d:dc:f8:e9:d0:14:
2c:e1:a4:fb:cc:3d:50:63:ee:57:ef:e8:d0:86:49:c2:31:54:
4f:f5:ba:02:1e:fb:4e:2c:20:9b:43:c2:34:e6:40:a3:27:e0:
f4:e9:09:aa:52:19:da:af:4f:04:17:9d:ad:0d:4f:56:96:b1:
df:4c:68:22:1b:4b:64:93:0b:6a:83:93:1e:3d:ee:32:2a:c3:
07:82:97:ed:32:e1:f1:0f:5b:ed:b8:dd:12:56:8b:ad:d2:c2:
88:26:ba:dc:d6:eb:4c:6c:8e:ba:d2:1b:9a:fa:82:06:2d:63:
62:a0:b3:0d:fc:27:33:2e:c4:1e:3f:fc:5b:7a:3e:90:cc:58:
5d:5b:46:d3:75:35:a9:3c:27:9f:42:35:2f:87:37:ec:fb:d2:
70:97:36:30:52:a2:e9:bd:ce:fc:cb:5b:cb:d7:a0:76:cc:2e:
5c:30:ea:75:8c:65:50:16:67:4f:e8:36:63:cc:48:8e:8a:2e:
b3:47:d2:9a:10:d4:02:0e:9a:98:aa:93:d9:0f:53:53:92:31:
f0:ea:73:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:28 2026 by rpki-client