
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33322e302f32322d3232203d3e203435303833.roa
File: 312e34352e33322e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: 0rE1fQoGNX7P1La0h/k7T55efssELYzHZ/X5Inn2nkU=
Subject key identifier: 27:66:B2:78:77:C6:E7:E3:FB:49:C1:44:70:2D:7F:40:D9:53:7F:D9
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 3096AF9DE287E83CE19127A63B2DFC0C2253F22D
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33322e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:02:35 +0000
ROA not before: Tue 16 Jun 2026 02:57:35 +0000
ROA not after: Tue 15 Jun 2027 03:02:35 +0000
asID: 45083
IP address blocks: 1.45.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:96:af:9d:e2:87:e8:3c:e1:91:27:a6:3b:2d:fc:0c:22:53:f2:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 02:57:35 2026 GMT
Not After : Jun 15 03:02:35 2027 GMT
Subject: CN=2766B27877C6E7E3FB49C144702D7F40D9537FD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:e7:2c:52:fa:1a:8a:4b:35:ce:7a:bd:0a:
69:66:fd:a9:a6:1b:3a:34:34:06:9c:35:e2:a7:36:
4a:70:3e:49:05:35:cd:a2:b0:37:cf:e1:db:e5:58:
01:ef:ab:4a:06:d6:8f:68:ae:cf:48:41:e3:99:62:
ac:4d:b3:28:1a:28:9e:b2:f2:6f:7f:29:ba:64:c5:
06:8f:c1:ce:3c:67:8f:ef:92:f5:7c:2e:27:cd:9d:
e6:70:0d:25:e2:3e:ba:db:5a:f9:07:17:99:c4:e4:
ee:1c:02:08:3f:0c:b9:d0:c3:a2:d9:06:d4:d2:52:
20:4b:2d:8d:22:66:7b:f5:b2:bc:58:ff:24:ef:3b:
03:7f:39:2f:a1:6a:aa:ae:a9:aa:7b:da:16:da:bb:
fd:c2:77:46:79:79:af:7f:a5:72:7f:8b:7a:ae:dc:
63:40:f0:0d:82:80:05:27:c0:16:ce:ef:2f:e7:1c:
67:b0:3b:54:41:c8:e6:e0:df:27:ba:af:1d:ae:a5:
cd:72:5b:06:9d:b0:ec:90:ef:a2:50:12:11:1c:68:
cb:19:98:e4:06:0f:20:c9:93:11:b7:c7:da:ea:4d:
fe:88:42:27:4f:4b:b4:6e:c2:fa:9a:10:90:c0:c6:
c5:1b:9e:4e:bd:d6:fc:94:1a:19:e7:58:0b:13:b9:
4d:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:B2:78:77:C6:E7:E3:FB:49:C1:44:70:2D:7F:40:D9:53:7F:D9
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e33322e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:21:c4:c6:38:79:d9:67:b6:a1:95:6a:12:82:00:92:7e:39:
76:84:18:3d:85:a0:74:61:15:db:42:30:b4:0e:99:7a:95:aa:
cd:6b:0d:0e:d7:11:32:d0:35:86:82:eb:69:65:c9:91:42:c4:
3b:1b:57:e5:2b:51:e8:94:ad:07:f2:84:1c:b4:4c:d7:c5:e7:
2a:d1:3a:16:63:03:e4:24:f1:be:23:59:5e:04:58:6e:1b:bb:
6b:6f:36:8e:8f:d6:83:d4:7c:32:fc:ae:7b:8c:bf:28:c9:af:
fe:7c:d5:8d:52:2b:7e:72:6f:8f:bd:10:88:84:e0:82:64:fd:
46:06:f7:ec:04:11:28:1d:7f:bc:6f:45:9a:59:76:d2:34:2a:
6a:d1:da:a6:f0:01:17:0a:16:03:46:b9:a3:49:65:b8:4d:9d:
15:93:cf:c6:71:37:b8:cb:75:41:af:35:7a:0a:f7:e0:29:50:
c7:d0:09:4b:9c:b8:07:b9:1e:bb:cb:31:b1:1b:33:8f:eb:09:
17:ce:15:d7:e5:db:75:ff:c9:7b:23:05:5f:be:e1:a5:ac:7f:
01:22:50:97:05:7e:16:22:58:6c:b1:44:f1:2b:1a:d5:fd:52:
07:13:42:ef:b8:7e:a3:97:8e:87:79:01:a0:7c:1d:0d:d2:b7:
c9:fc:8f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:02 2026 by rpki-client