
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32342e302f32342d3234203d3e2034383038.roa
File: 3231312e3134342e32342e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: iWiSdeTvjjEr4QDrlcOqHsCKHxV/+OHp6VmD5hcLHuU=
Subject key identifier: 17:CE:D6:79:2B:D3:A0:E8:0D:F7:1A:33:5B:73:1F:7C:93:1C:6A:40
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 4BAD29B6DE9C99950F87FD8FB1A2189E572D7F8F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32342e302f32342d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 11:25:14 +0000
ROA not before: Thu 04 Jun 2026 11:20:14 +0000
ROA not after: Thu 03 Jun 2027 11:25:14 +0000
asID: 4808
IP address blocks: 211.144.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:ad:29:b6:de:9c:99:95:0f:87:fd:8f:b1:a2:18:9e:57:2d:7f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 11:20:14 2026 GMT
Not After : Jun 3 11:25:14 2027 GMT
Subject: CN=17CED6792BD3A0E80DF71A335B731F7C931C6A40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:47:8f:63:2c:3a:73:60:dc:84:2b:17:28:
73:4c:15:eb:2a:96:53:39:5d:74:bf:2f:9c:d6:e3:
8d:53:e6:19:3c:f8:63:69:67:95:08:e0:9f:e9:5f:
95:7d:2a:3d:83:b7:37:31:74:66:b8:e7:3c:ff:37:
96:78:7f:df:e5:65:43:21:e0:b4:a2:02:df:6d:94:
55:db:ce:8a:67:a5:c1:f7:48:2d:51:c7:67:9f:09:
76:13:2c:8d:20:b6:22:72:e9:b0:93:e6:30:39:ff:
04:2a:04:a5:56:3d:6e:5c:0a:1b:ed:e9:f3:d3:f2:
28:c8:01:92:c7:ed:9e:01:c9:f7:1f:86:d7:ff:ad:
85:12:3e:be:f3:bd:b6:97:ed:bc:ec:22:fa:7c:07:
4d:36:a7:1d:d3:99:04:20:53:bf:f6:1e:56:d3:9c:
92:e9:22:ce:20:e1:b3:cb:c3:71:8d:cf:70:6b:87:
9f:67:da:7e:f8:4d:77:df:a2:c8:e3:74:59:f6:fd:
e9:e9:a3:14:8a:58:60:a8:c5:5b:c0:52:7d:c5:18:
ea:f0:2d:cf:49:43:ab:ee:38:10:7c:9f:4b:33:2c:
48:33:ef:6a:0d:26:87:b7:0d:54:fa:f7:94:ce:44:
c5:e2:f8:ca:af:9e:58:33:68:cf:f2:a8:c5:d6:a2:
96:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:CE:D6:79:2B:D3:A0:E8:0D:F7:1A:33:5B:73:1F:7C:93:1C:6A:40
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32342e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.24.0/24
Signature Algorithm: sha256WithRSAEncryption
27:42:3a:67:f2:9d:a7:24:8e:31:33:15:74:74:e4:4a:47:cd:
f0:00:0a:f8:9a:b0:be:32:4a:60:dc:7d:05:87:60:e8:c2:ce:
d6:c6:6f:fe:2b:34:b2:d5:94:c5:15:75:7f:7e:1b:15:9f:17:
43:59:ad:6f:33:50:7d:3d:36:57:c6:db:db:70:27:22:2c:09:
8c:dc:66:13:89:3c:44:d6:78:c0:2d:0b:a4:b4:dd:a3:d7:04:
2b:50:3d:0c:b2:bc:a2:13:e5:90:9e:5c:f7:bd:0c:1b:28:fc:
c3:a4:cf:8b:35:c1:c3:d6:b4:a2:88:53:e9:87:de:1e:f5:29:
db:b5:b5:50:f8:a4:e5:5b:62:72:22:cc:a4:23:b9:29:f9:fa:
96:e6:0b:5e:99:bf:ff:1f:0e:3d:3f:6e:bd:9f:4d:34:fd:d9:
bf:4a:75:2b:15:ae:de:43:c8:6c:1a:7d:70:7c:5a:c2:30:4d:
e0:28:64:36:24:8b:0c:5d:ab:b7:84:33:84:f4:b0:64:61:65:
06:5c:60:88:9a:c1:3e:ab:f0:c4:71:35:d3:a0:62:40:d6:57:
9f:f2:74:20:5b:29:af:5b:cf:bc:9b:25:14:d6:18:2b:29:47:
48:77:9a:28:e2:26:79:f2:e3:45:61:52:3f:94:ae:31:2a:38:
55:ff:e1:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:49 2026 by rpki-client