
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31382e302f32342d3234203d3e2034383038.roa
File: 3231312e3134342e31382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: gycHbqHY2JP212SxAJ65R437zBqc0vxcFW9hzopFGUA=
Subject key identifier: 47:A8:19:15:5E:49:E6:5E:1A:D3:8E:8E:88:E3:6C:A4:2C:AB:29:0C
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 38A35E947E60A50920E972FD5A237BD929B88B63
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31382e302f32342d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 11:22:23 +0000
ROA not before: Thu 04 Jun 2026 11:17:23 +0000
ROA not after: Thu 03 Jun 2027 11:22:23 +0000
asID: 4808
IP address blocks: 211.144.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:a3:5e:94:7e:60:a5:09:20:e9:72:fd:5a:23:7b:d9:29:b8:8b:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 11:17:23 2026 GMT
Not After : Jun 3 11:22:23 2027 GMT
Subject: CN=47A819155E49E65E1AD38E8E88E36CA42CAB290C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f7:c4:4a:b2:db:a5:11:99:2f:07:f1:18:f7:
82:04:7b:af:2d:5c:2a:96:15:6a:41:e0:e6:e6:69:
b7:27:a7:50:4e:7e:c6:4c:ff:d9:99:68:3a:62:d6:
89:4a:ec:2c:bc:85:48:b8:d2:58:45:7a:2e:59:9c:
6c:7c:98:24:e0:f1:88:62:fe:d2:fc:32:4f:4e:2b:
c9:31:17:c0:ad:0e:70:8f:b8:f4:09:96:24:6e:0a:
bf:4d:ec:5d:cc:f7:4f:1e:f8:e1:63:b9:ec:85:9e:
92:1b:b0:17:66:c9:d4:02:b9:d9:8f:7e:e5:df:76:
0e:99:2a:79:b4:3d:dd:f1:4f:e5:70:87:92:ef:af:
da:35:4d:25:00:f5:7b:91:99:6a:72:4e:ab:db:5f:
a0:fc:bf:ab:3f:a9:b9:e4:20:07:2d:ba:d1:b0:3b:
cc:97:98:02:e1:3f:ff:65:7c:f7:9d:53:7b:15:1f:
b4:ed:ea:91:39:c5:21:8f:f0:57:92:32:3a:f0:9d:
57:1d:30:be:4d:7f:e7:df:c6:bc:7c:3c:e1:a6:b2:
14:65:8a:f0:86:5f:2f:73:c7:73:fa:72:b2:b7:ef:
8d:f5:cb:28:f1:96:82:f6:da:86:09:fe:ce:4f:84:
7c:c8:be:24:c8:ab:ff:bd:5c:70:1f:bf:f1:69:4b:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A8:19:15:5E:49:E6:5E:1A:D3:8E:8E:88:E3:6C:A4:2C:AB:29:0C
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31382e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.18.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:67:db:a9:4a:32:6c:fc:d8:ec:a2:26:eb:be:83:a9:4b:b5:
b5:d0:9c:96:12:9e:24:a9:bc:37:d6:5f:16:32:af:fd:5d:35:
48:a9:0e:98:a8:07:0c:b7:97:dd:9c:ae:d6:1b:5a:f0:63:4c:
54:e2:d8:8a:7f:5c:61:8b:9a:c5:e0:8e:9e:10:1f:64:24:aa:
b0:b6:37:10:e6:ac:6f:35:e3:09:ec:f0:81:c8:7f:55:77:ab:
2a:33:5e:dd:d3:7e:22:ce:18:65:fe:da:7b:fc:cc:ca:68:75:
07:d0:f0:85:70:ed:1c:7e:74:b9:39:a2:97:8d:0c:75:eb:2e:
d8:c3:f1:40:af:8c:2b:6d:19:e8:03:91:8b:48:1c:31:4b:2c:
bb:c1:87:4a:84:41:4c:f1:15:43:3c:51:0d:4c:00:56:20:a0:
f1:06:0c:78:9e:58:ef:30:58:17:a4:e4:9d:4f:92:0f:e7:9c:
84:5b:b0:ff:d9:d2:33:e8:46:61:e9:a6:42:44:40:f5:71:b9:
c4:40:58:ad:8d:e5:07:2e:be:fa:6b:f4:b4:62:2c:20:43:f5:
2c:19:fa:42:d8:03:7f:2e:7d:18:e1:d7:0b:b1:00:67:ff:61:
0f:47:9b:bb:17:22:54:f8:21:2d:0e:cc:59:cb:20:9c:17:e3:
46:72:a9:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:48 2026 by rpki-client