
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e31362e302f32322d3232203d3e203435303833.roa
File: 312e34352e31362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: gi/AJuVRucg8mTO/1DAhpF9tbR+IZ31lK89xvqIUeJc=
Subject key identifier: 20:3F:62:DB:67:71:1C:63:13:65:E7:A5:99:A4:21:5D:6A:D6:94:58
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 3A313681B2BAA78CC55FE17E038AEF699E23473C
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e31362e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:02:55 +0000
ROA not before: Tue 16 Jun 2026 02:57:55 +0000
ROA not after: Tue 15 Jun 2027 03:02:55 +0000
asID: 45083
IP address blocks: 1.45.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:31:36:81:b2:ba:a7:8c:c5:5f:e1:7e:03:8a:ef:69:9e:23:47:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 02:57:55 2026 GMT
Not After : Jun 15 03:02:55 2027 GMT
Subject: CN=203F62DB67711C631365E7A599A4215D6AD69458
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bd:01:36:5f:2f:39:8c:13:1a:ca:f1:9b:80:
9c:ad:f8:97:2d:17:20:23:5c:be:32:0a:6c:52:d7:
98:2b:c5:ad:b2:10:d3:e1:52:d6:85:0e:b6:03:13:
7e:c4:2d:b1:c8:0f:53:69:8c:d3:9d:4a:95:6c:db:
4e:29:d2:a4:ed:99:03:7a:4a:d0:35:c8:04:93:08:
3c:4f:21:ad:23:81:25:64:76:76:ef:6e:b0:06:cd:
c0:94:1d:6a:21:8d:fd:36:98:38:fb:cb:6d:2e:83:
24:01:1d:0f:eb:cb:38:eb:e1:1f:3b:5d:c2:d0:5c:
77:30:3d:6d:4d:cf:13:9e:07:fb:80:24:e6:30:ec:
2b:17:12:2e:e7:74:58:d4:ae:08:9a:fb:08:d0:ab:
a7:17:06:51:48:c8:9a:53:ad:44:d8:77:33:80:a9:
b8:10:d5:2a:9e:ac:8c:19:61:51:ca:16:c4:7a:1c:
cb:b9:83:8a:f5:67:24:59:b5:47:9d:4e:0e:7a:fa:
c7:f8:5b:86:03:bb:55:0e:fb:94:64:3c:24:66:56:
d5:45:0b:71:08:39:57:79:b6:9d:44:2d:72:c4:be:
0e:bb:ba:dc:33:5b:77:8c:8f:9a:47:17:fc:07:c7:
63:b2:20:ad:12:5a:2d:1b:79:87:fa:a5:0f:d2:60:
5c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:3F:62:DB:67:71:1C:63:13:65:E7:A5:99:A4:21:5D:6A:D6:94:58
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e31362e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.16.0/22
Signature Algorithm: sha256WithRSAEncryption
64:af:5c:61:74:4b:39:86:c1:0c:3d:5f:8c:36:55:cd:96:50:
85:0a:06:32:16:97:e5:8f:df:48:44:99:2c:1e:35:41:a6:d0:
a2:41:c2:38:a9:c7:3f:78:e3:20:4e:27:55:5a:70:80:a0:35:
73:30:59:c5:73:39:d4:a5:c2:dd:cd:cf:33:4f:26:1f:57:c4:
4d:c4:62:f1:b7:ce:d4:4f:45:c4:53:95:00:fb:13:94:28:80:
5c:30:2c:ef:29:37:35:cc:65:80:18:57:69:06:27:61:8e:4e:
d3:e3:35:0f:c6:9d:5a:20:0e:0c:f8:01:27:b6:11:0f:3c:25:
74:0d:0c:d1:65:53:7a:3b:95:fb:91:a2:c6:84:63:f7:e3:81:
64:9b:00:6e:71:b5:24:72:49:d7:7a:a9:f4:0a:e3:b1:d6:df:
1a:2a:e8:61:72:99:fd:3d:91:dd:c2:43:a1:e4:b1:f8:0b:95:
3f:2b:50:a6:95:d0:9f:d0:7c:83:64:d1:b7:82:ee:35:0a:ed:
30:be:43:07:a3:ec:1c:52:b2:34:43:97:d4:a2:a6:a8:3d:6c:
6d:63:87:d9:e4:52:f0:d2:be:51:c9:14:df:04:c8:6e:84:65:
9b:05:48:4e:ba:e1:76:6d:0c:a1:1a:70:6f:3e:f9:90:57:b7:
fc:0c:26:31
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUOjE2gbK6p4zFX+F+A4rvaZ4jRzwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMjU3NTVaFw0yNzA2MTUwMzAyNTVaMDMxMTAvBgNV
BAMTKDIwM0Y2MkRCNjc3MTFDNjMxMzY1RTdBNTk5QTQyMTVENkFENjk0NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCvQE2Xy85jBMayvGbgJyt+Jct
FyAjXL4yCmxS15grxa2yENPhUtaFDrYDE37ELbHID1NpjNOdSpVs204p0qTtmQN6
StA1yASTCDxPIa0jgSVkdnbvbrAGzcCUHWohjf02mDj7y20ugyQBHQ/ryzjr4R87
XcLQXHcwPW1NzxOeB/uAJOYw7CsXEi7ndFjUrgia+wjQq6cXBlFIyJpTrUTYdzOA
qbgQ1SqerIwZYVHKFsR6HMu5g4r1ZyRZtUedTg56+sf4W4YDu1UO+5RkPCRmVtVF
C3EIOVd5tp1ELXLEvg67utwzW3eMj5pHF/wHx2OyIK0SWi0beYf6pQ/SYFwzAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUID9i22dxHGMTZeelmaQhXWrWlFgwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTMx
MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
AS0QMA0GCSqGSIb3DQEBCwUAA4IBAQBkr1xhdEs5hsEMPV+MNlXNllCFCgYyFpfl
j99IRJksHjVBptCiQcI4qcc/eOMgTidVWnCAoDVzMFnFcznUpcLdzc8zTyYfV8RN
xGLxt87UT0XEU5UA+xOUKIBcMCzvKTc1zGWAGFdpBidhjk7T4zUPxp1aIA4M+AEn
thEPPCV0DQzRZVN6O5X7kaLGhGP344FkmwBucbUkcknXeqn0CuOx1t8aKuhhcpn9
PZHdwkOh5LH4C5U/K1CmldCf0HyDZNG3gu41Cu0wvkMHo+wcUrI0Q5fUoqaoPWxt
Y4fZ5FLw0r5RyRTfBMhuhGWbBUhOuuF2bQyhGnBvPvmQV7f8DCYx
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:05 2026 by rpki-client