
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39362e302f32322d3232203d3e203435303833.roa
File: 312e34352e39362e302f32322d3232203d3e203435303833.roa (raw, json)
Hash identifier: QCci1l8Ncy7p7ZF1x1fI/FRt87AVsEihGELlIlvA+C4=
Subject key identifier: 31:8D:47:BF:60:93:E9:0B:DE:3E:DD:D1:D2:8C:6D:55:03:0A:43:AC
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 65DCDC2055C589C425C44935CF302A78D0C6223F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39362e302f32322d3232203d3e203435303833.roa
Signing time: Tue 16 Jun 2026 03:10:03 +0000
ROA not before: Tue 16 Jun 2026 03:05:03 +0000
ROA not after: Tue 15 Jun 2027 03:10:03 +0000
asID: 45083
IP address blocks: 1.45.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 07:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:dc:dc:20:55:c5:89:c4:25:c4:49:35:cf:30:2a:78:d0:c6:22:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 16 03:05:03 2026 GMT
Not After : Jun 15 03:10:03 2027 GMT
Subject: CN=318D47BF6093E90BDE3EDDD1D28C6D55030A43AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c4:91:0e:07:a1:32:1d:e0:aa:91:54:64:26:
97:21:1c:4b:b5:68:0b:47:71:f0:fb:49:8f:0c:e7:
03:77:53:05:ec:db:de:df:bb:47:5b:c8:49:72:57:
3c:f7:e6:9f:c8:6f:ec:fc:79:94:40:e3:d2:e0:1f:
17:1f:7e:6d:28:22:6f:1a:00:39:d7:7d:bf:ff:ca:
a0:43:6c:fc:47:f4:ea:5b:7c:be:ef:c8:70:c5:28:
c4:60:d5:d2:27:f3:d3:5f:0b:fd:c4:c0:84:36:bf:
0b:f0:c2:4f:58:1d:98:f9:47:3c:2a:5a:88:83:ba:
2c:ca:b7:36:ce:ff:5c:a8:f9:e6:2d:60:bd:ab:a3:
0f:ae:bd:b7:5f:47:b4:29:a5:c8:6d:d8:be:66:31:
21:b0:0f:f1:67:2f:3f:6b:00:1e:57:97:7f:ac:3b:
b0:e3:e8:fc:1f:80:13:c6:47:9c:93:95:7c:05:e9:
9f:3a:6a:25:e2:0e:9b:31:01:3d:12:87:e3:b1:61:
a4:9c:a8:1e:81:41:73:ee:14:16:11:d9:7d:b7:f8:
5d:48:b8:6a:6f:cc:74:84:51:b5:d1:fb:b9:5a:19:
a1:2a:d5:90:33:28:15:42:63:73:94:ed:6e:11:54:
b2:8f:aa:25:a1:c5:5e:dc:bd:41:16:bc:6d:f8:74:
4f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:8D:47:BF:60:93:E9:0B:DE:3E:DD:D1:D2:8C:6D:55:03:0A:43:AC
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/312e34352e39362e302f32322d3232203d3e203435303833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
1.45.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:a4:9d:eb:2b:4c:61:9c:eb:54:f1:6c:ec:5c:d3:92:44:3c:
8c:fa:df:ff:2c:99:e1:ae:96:46:1c:de:6f:6f:e4:aa:c3:29:
90:3d:88:f1:61:a0:d6:9f:94:d4:41:72:d3:e4:51:2c:ef:27:
2c:35:a0:1e:8e:28:9d:cf:2f:d5:a7:48:e3:4a:65:3d:d1:43:
f7:d9:65:b3:93:45:e6:77:ce:c0:cf:01:29:11:32:82:b5:3c:
c3:b6:64:56:32:f7:fa:1c:8e:e4:bc:91:b3:0a:98:73:ee:5e:
ff:c6:4b:e4:4c:32:d6:aa:e4:ae:f1:c2:8c:f2:bc:62:ac:74:
bc:bb:cc:f9:58:e4:19:77:32:39:87:4c:56:84:88:92:65:74:
7d:9f:00:89:c1:e0:e5:59:b8:b7:9b:08:41:2a:1d:24:40:32:
97:1b:42:ff:dc:cc:f9:8d:b3:a5:b0:3c:60:47:35:cb:cc:63:
64:14:1b:c0:75:a6:2d:11:d4:52:a1:6c:23:96:db:a0:16:fd:
e8:68:87:f6:0e:d4:10:7f:c4:a9:d9:e5:f7:7c:a3:92:58:65:
c7:80:41:89:d2:08:26:19:3c:f1:cb:ca:de:f8:80:0c:ad:21:
a2:e6:41:ba:65:c2:48:2b:61:48:09:b6:19:d6:1b:77:14:1e:
dd:bb:91:f7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUZdzcIFXFicQlxEk1zzAqeNDGIj8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5
RjkzRjZGODAeFw0yNjA2MTYwMzA1MDNaFw0yNzA2MTUwMzEwMDNaMDMxMTAvBgNV
BAMTKDMxOEQ0N0JGNjA5M0U5MEJERTNFREREMUQyOEM2RDU1MDMwQTQzQUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxJEOB6EyHeCqkVRkJpchHEu1
aAtHcfD7SY8M5wN3UwXs297fu0dbyElyVzz35p/Ib+z8eZRA49LgHxcffm0oIm8a
ADnXfb//yqBDbPxH9OpbfL7vyHDFKMRg1dIn89NfC/3EwIQ2vwvwwk9YHZj5Rzwq
WoiDuizKtzbO/1yo+eYtYL2row+uvbdfR7Qppcht2L5mMSGwD/FnLz9rAB5Xl3+s
O7Dj6PwfgBPGR5yTlXwF6Z86aiXiDpsxAT0Sh+OxYaScqB6BQXPuFBYR2X23+F1I
uGpvzHSEUbXR+7laGaEq1ZAzKBVCY3OU7W4RVLKPqiWhxV7cvUEWvG34dE8nAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUMY1Hv2CT6QvePt3R0oxtVQMKQ6wwHwYDVR0j
BBgwFoAUpgmQqcpYkWQFBDK9BUc9z5+T9vgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
NzU3NTQzNzUzMTI4MzQ3Ny8wL0E2MDk5MEE5Q0E1ODkxNjQwNTA0MzJCRDA1NDcz
RENGOUY5M0Y2RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQTYwOTkwQTlDQTU4OTE2NDA1MDQzMkJEMDU0NzNEQ0Y5RjkzRjZGOC5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA3NTc1NDM3NTMxMjgzNDc3LzAvMzEyZTM0MzUyZTM5
MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM1MzAzODMzLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC
AS1gMA0GCSqGSIb3DQEBCwUAA4IBAQA7pJ3rK0xhnOtU8WzsXNOSRDyM+t//LJnh
rpZGHN5vb+SqwymQPYjxYaDWn5TUQXLT5FEs7ycsNaAejiidzy/Vp0jjSmU90UP3
2WWzk0Xmd87AzwEpETKCtTzDtmRWMvf6HI7kvJGzCphz7l7/xkvkTDLWquSu8cKM
8rxirHS8u8z5WOQZdzI5h0xWhIiSZXR9nwCJweDlWbi3mwhBKh0kQDKXG0L/3Mz5
jbOlsDxgRzXLzGNkFBvAdaYtEdRSoWwjltugFv3oaIf2DtQQf8Sp2eX3fKOSWGXH
gEGJ0ggmGTzxy8re+IAMrSGi5kG6ZcJIK2FICbYZ1ht3FB7du5H3
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:04 2026 by rpki-client