
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3137322e302f32322d3232203d3e203435303833.roa
File: 312e34352e3137322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: nV8JS2VLOECYND2nannY46OsT/i+C/sqCsfRI6H8js4=
Subject key identifier: 9A:50:05:D5:34:42:42:87:B4:F6:D8:7C:04:32:97:60:A6:09:34:80
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 173FAA478263360DD36478F13876C18661CDD16D
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3137322e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 02:57:31 +0000
ROA not before: Tue 16 Jun 2026 02:52:31 +0000
ROA not after: Tue 15 Jun 2027 02:57:31 +0000
asID: 45083
IP address blocks: 1.45.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:3f:aa:47:82:63:36:0d:d3:64:78:f1:38:76:c1:86:61:cd:d1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 02:52:31 2026 GMT
Not After : Jun 15 02:57:31 2027 GMT
Subject: CN=9A5005D534424287B4F6D87C04329760A6093480
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:6f:1c:fc:6a:f9:b1:e0:8d:6a:d3:00:aa:01:
fd:95:a5:94:7e:6f:32:9a:b0:67:89:7c:38:51:81:
15:fa:10:6d:ff:d4:7a:79:ac:ab:dc:2f:07:5e:59:
5a:3a:86:e1:ef:bc:fd:f2:77:a7:f0:ba:65:34:fa:
a9:93:c3:a5:ce:a5:fa:c0:cb:3a:1e:15:18:06:2f:
5f:fb:b6:24:be:40:c3:55:f7:d1:1e:ff:e4:3a:20:
13:c2:59:51:51:e7:9c:cb:dd:24:f7:bf:4d:e9:3c:
55:6d:d3:57:42:28:d4:75:81:f8:97:2c:d8:79:44:
cb:4b:ff:58:20:b2:ee:b0:2d:9f:9a:a0:a5:90:f9:
10:57:aa:24:9d:e1:01:29:90:f9:b9:5e:26:48:91:
1d:97:b0:93:f9:f8:aa:f4:2b:77:80:90:a7:6d:c4:
46:77:1c:38:14:b7:34:20:56:fa:90:6b:64:07:36:
4b:5b:a4:41:d4:dc:81:10:75:1b:15:10:f7:66:1f:
78:24:b8:48:28:c0:7b:e8:84:be:7a:6f:47:01:a4:
95:81:80:01:20:01:14:45:28:ba:69:cc:0e:6e:ec:
57:27:33:fd:d5:07:cd:3a:d3:2a:ee:af:b6:1f:95:
78:6b:71:73:4b:ba:6f:25:e8:26:50:44:19:03:d8:
48:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:50:05:D5:34:42:42:87:B4:F6:D8:7C:04:32:97:60:A6:09:34:80
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e3137322e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.172.0/22
Signature Algorithm: sha256WithRSAEncryption
29:af:27:28:a9:c6:a7:a8:54:88:36:db:11:0e:8d:91:b5:84:
ad:2f:9b:c9:c1:11:d9:b3:94:08:a2:83:ee:32:58:a2:83:ae:
06:c0:a4:ea:2b:65:89:a8:84:17:eb:21:86:65:8d:ea:8f:0f:
ed:59:a2:81:69:51:6d:7f:b8:58:49:a9:a9:ce:df:2c:a4:e0:
97:d6:09:a8:d5:76:6b:d3:09:c4:43:b2:ed:05:cb:ee:e4:9d:
fb:e8:35:eb:37:e0:d5:1e:b6:2c:09:83:40:0a:f1:fe:89:06:
73:a8:87:d8:b9:0f:ac:22:cc:b1:fe:a0:e8:a0:13:d0:94:2f:
ce:01:33:c4:d4:c8:ff:aa:b6:2b:1f:0d:29:74:ff:98:ee:8a:
85:03:7a:42:39:ba:93:e5:40:8c:5d:f2:05:8e:c6:c7:88:8d:
9e:4c:14:ab:c2:bc:8b:d5:e6:81:03:a3:3a:9e:d4:4d:68:37:
f5:c3:6b:de:c0:8e:1c:6a:80:58:26:b8:68:ca:c9:d2:85:b8:
34:0f:dc:8c:de:7a:0f:7b:d4:fc:17:65:83:ab:a2:b7:70:0a:
11:ba:ec:f6:b9:42:cb:cc:4f:87:60:07:63:8f:82:49:54:eb:
85:9b:21:d2:f6:e4:78:10:04:b6:4b:d6:e3:7f:dc:1f:3b:38:
d8:64:42:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:00 2026 by rpki-client