
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31392e302f32342d3234203d3e2034383038.roa
File: 3231312e3134342e31392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: sjuCHNF6t5wwtN7axJ37hTPWlzyRXRyLX6a5x5L5BRo=
Subject key identifier: 2A:B5:A4:95:84:AC:D4:6B:BB:F9:6D:75:7B:7F:A0:0B:3A:3E:28:8B
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 60C2147543D448359472C494F32199EF9A4D581F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31392e302f32342d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 11:30:53 +0000
ROA not before: Thu 04 Jun 2026 11:25:53 +0000
ROA not after: Thu 03 Jun 2027 11:30:53 +0000
asID: 4808
IP address blocks: 211.144.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:c2:14:75:43:d4:48:35:94:72:c4:94:f3:21:99:ef:9a:4d:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 11:25:53 2026 GMT
Not After : Jun 3 11:30:53 2027 GMT
Subject: CN=2AB5A49584ACD46BBBF96D757B7FA00B3A3E288B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:67:57:87:90:67:8d:71:14:d4:a2:35:c2:da:
38:1c:10:5a:01:bd:93:ba:61:5c:79:7c:44:6b:c5:
c8:02:51:b9:3f:5e:4e:15:8e:b3:52:7e:85:25:23:
c1:64:f6:6a:32:3a:21:1d:37:ea:86:60:7d:1a:1b:
88:c4:e9:48:f6:c3:27:da:f5:07:69:10:e8:f6:8c:
35:19:93:02:a1:d3:d1:ea:96:d5:8a:1d:31:a3:65:
20:e3:fb:ce:bd:ee:1e:80:97:b9:bc:be:49:cf:9a:
12:a8:80:43:13:de:6a:df:61:23:81:00:8a:47:d1:
54:7b:fe:71:d7:b3:bd:ec:40:a8:e5:2f:84:cf:4e:
9d:da:16:a4:cc:b5:9f:42:1a:2c:d5:57:f6:85:21:
28:ec:1e:07:eb:78:7a:12:c6:fa:99:c8:df:1f:e9:
66:aa:a1:8a:b0:f8:8f:0b:a6:d6:3b:4a:ff:3a:86:
5a:ae:06:59:7b:2b:9c:7c:c2:2a:31:76:c8:40:55:
2f:d9:4f:99:00:1c:18:0b:4b:50:23:e1:4e:b4:84:
72:52:5d:13:7d:73:3c:8d:e7:52:69:e8:5e:52:28:
7c:46:6e:30:f8:9b:7a:5e:cb:d7:7b:80:07:ab:6f:
9e:10:96:80:8a:05:4b:58:e0:36:e9:90:88:14:8d:
cf:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B5:A4:95:84:AC:D4:6B:BB:F9:6D:75:7B:7F:A0:0B:3A:3E:28:8B
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e31392e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.19.0/24
Signature Algorithm: sha256WithRSAEncryption
05:d5:74:1e:f3:f0:a5:70:48:dd:30:e9:50:69:82:7b:ba:21:
1e:24:f5:33:d6:65:9d:30:7b:ce:3b:6e:c0:95:36:19:bf:2f:
54:65:3d:b1:e9:98:28:a0:84:d5:01:c7:40:fc:91:5c:fe:24:
80:e9:c9:5a:09:ab:ad:bc:e7:11:7a:2b:64:33:e4:2a:db:51:
79:3e:d2:d5:bf:ad:61:9d:28:73:b6:a4:1e:3c:f5:c1:23:e6:
c6:9a:6f:90:a4:0f:d1:90:97:ec:44:88:cd:9c:33:bb:1b:81:
d3:a8:26:b8:95:de:fe:94:41:27:0e:60:73:86:65:cd:07:b0:
94:b9:f5:3b:35:fd:0c:19:78:2f:93:1d:0b:39:6b:c3:10:70:
48:d3:45:00:1e:04:7e:a8:5d:91:27:10:7d:3c:cf:19:28:06:
13:5c:04:a6:9e:86:fa:c8:89:da:4d:13:1d:17:50:e0:a0:13:
e3:25:d4:d0:24:0e:17:9d:34:8e:51:e3:2f:27:bf:a5:48:4f:
cf:67:c8:2e:54:c8:17:b0:e2:6e:9e:af:10:1d:98:64:e1:46:
83:cb:e4:ec:0f:ef:32:5b:ba:c2:22:89:02:71:89:e3:1e:02:
fd:c2:12:4b:f4:3a:bd:c0:0b:07:d3:03:eb:a5:76:4c:49:64:
93:53:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client