
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32322e302f32342d3234203d3e2034383038.roa
File: 3231312e3134342e32322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: bl1nkp1ASc67yNOTAi1O6BCZ0Kw04Q2p3Vw/ikE717A=
Subject key identifier: 16:AD:AC:ED:60:5C:D3:9B:3E:F6:A3:A2:AE:B9:B0:53:08:9C:F8:D4
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 6252659880399FE5E3585055A07002F7CEBF86A5
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32322e302f32342d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 11:24:13 +0000
ROA not before: Thu 04 Jun 2026 11:19:13 +0000
ROA not after: Thu 03 Jun 2027 11:24:13 +0000
asID: 4808
IP address blocks: 211.144.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:52:65:98:80:39:9f:e5:e3:58:50:55:a0:70:02:f7:ce:bf:86:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 11:19:13 2026 GMT
Not After : Jun 3 11:24:13 2027 GMT
Subject: CN=16ADACED605CD39B3EF6A3A2AEB9B053089CF8D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:86:17:fd:80:e0:99:cd:c1:af:4c:3e:91:0a:
c8:24:ec:e8:5b:dc:64:a3:78:ed:ae:54:d9:00:3e:
47:b6:62:8e:fb:43:27:8f:1b:91:2c:ad:b4:06:72:
32:70:ca:38:d8:ef:21:95:87:3e:df:8c:23:2d:24:
5c:5c:a4:e9:57:84:13:52:dd:98:bc:68:38:cc:5a:
9e:c8:40:9f:cf:99:7a:db:11:2d:01:f8:e3:4c:b3:
7f:c3:32:8c:ff:ab:6f:57:e9:dc:bf:ce:da:58:1a:
64:42:77:59:85:29:3d:16:42:f1:d7:0a:54:54:96:
38:62:54:ae:84:4b:72:25:7c:a4:d3:a3:98:64:36:
91:f9:73:44:ba:90:4e:89:a3:d7:ce:c6:79:09:c0:
c4:61:7f:bc:7f:37:25:a5:da:4d:9b:f9:86:fe:4f:
68:38:ca:24:4a:bc:cc:0c:59:e7:49:dc:45:4c:db:
fd:26:86:b5:d4:28:57:ce:4d:44:89:fa:e1:58:0b:
6a:54:5a:57:f1:b0:c9:07:47:33:3d:ff:69:89:2f:
ab:d3:82:e5:5a:b4:11:9b:e5:8d:65:ac:cc:2f:c5:
fa:11:6f:81:23:07:49:05:e9:12:5e:89:53:ab:4d:
21:01:b0:cd:e9:4c:d4:a7:a7:e6:fc:62:92:8f:39:
db:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:AC:ED:60:5C:D3:9B:3E:F6:A3:A2:AE:B9:B0:53:08:9C:F8:D4
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.22.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b1:e8:65:24:c3:cd:ff:0a:25:3d:47:3d:a4:3f:02:3c:ca:
00:90:c8:12:58:4f:42:67:5b:c4:de:ef:47:bb:35:42:bc:0b:
0f:4e:19:94:51:67:d1:c0:fa:25:c5:cd:2b:b9:4d:e3:b9:13:
48:fa:9a:57:68:a8:c4:9f:9c:e9:c9:06:4e:82:c1:c8:38:16:
b8:c8:d6:02:14:97:64:e1:e9:79:6b:75:f0:5b:e0:4f:b6:3a:
df:11:b4:87:77:42:48:a0:97:34:72:ac:25:1a:6f:e9:d9:a3:
80:59:01:8f:d9:4e:a2:93:bc:39:1c:44:fa:3a:44:5e:0c:df:
54:b6:cf:9b:c0:78:18:2a:e9:a5:25:29:fd:27:8c:36:6e:8c:
05:ef:c3:2c:05:8d:b7:91:ab:0d:25:5c:a9:96:ea:6f:2f:77:
0a:39:c7:0b:85:9f:5a:20:f0:7e:a8:8c:fa:48:d4:23:5e:0a:
f2:9d:61:26:21:4b:50:12:69:2f:a1:a2:13:55:2c:f9:52:1b:
ae:76:96:58:a9:86:2a:b3:df:6f:85:25:48:0c:bc:34:11:8e:
3b:45:21:5a:8d:49:b2:6c:2a:1c:66:29:ba:c4:7a:1a:19:03:
49:dc:7d:a5:47:c6:fd:bd:26:92:24:99:3f:90:7c:1e:50:0b:
bf:0b:bc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:15 2026 by rpki-client