
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32382e302f32342d3234203d3e2034383038.roa
File: 3231312e3134342e32382e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: +maMBs1UDw6Y+U7rIUBR48iGY10eQMY4jITezs0S8+g=
Subject key identifier: EF:02:52:3B:65:F0:5A:DE:FD:4D:09:48:16:EB:F0:16:EC:61:80:67
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 59AA18B7C4F5DB23F353C661207068FB1650FBFD
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32382e302f32342d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 11:30:23 +0000
ROA not before: Thu 04 Jun 2026 11:25:23 +0000
ROA not after: Thu 03 Jun 2027 11:30:23 +0000
asID: 4808
IP address blocks: 211.144.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:aa:18:b7:c4:f5:db:23:f3:53:c6:61:20:70:68:fb:16:50:fb:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 11:25:23 2026 GMT
Not After : Jun 3 11:30:23 2027 GMT
Subject: CN=EF02523B65F05ADEFD4D094816EBF016EC618067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:80:5d:4a:5f:69:f6:0e:ec:04:d3:10:a7:46:
67:3f:86:4e:ca:ee:5a:10:38:78:2d:11:95:e0:39:
b2:6e:35:91:58:dd:a6:04:63:c4:ff:56:34:ab:e4:
81:50:7d:0d:b1:2e:90:48:04:8b:8d:82:a9:92:af:
91:11:f0:f1:e9:fc:60:51:8c:8c:08:44:4e:4b:d9:
ec:ed:22:c1:ca:6b:be:ff:18:02:51:57:05:58:f4:
81:b8:2c:a0:53:0d:69:b4:95:f7:8c:63:be:33:15:
60:df:e0:29:f3:45:0d:a1:5a:3d:d0:bf:fd:9f:b1:
71:f4:52:67:b4:08:bf:b2:88:12:3b:89:bd:58:da:
a1:6b:99:70:63:00:60:52:47:14:8b:4a:98:c5:f8:
8f:bf:49:42:1a:76:b2:19:75:fc:2f:d2:05:00:f1:
d1:29:d6:e6:8a:10:c1:79:3e:c1:e0:ec:55:d8:76:
0d:e6:52:bb:4d:ed:39:a7:14:26:7e:04:97:b2:6e:
83:fd:77:d6:f5:47:99:72:88:9b:19:d4:24:7e:cb:
0e:3b:66:f6:ce:f6:8f:2d:f1:aa:1b:c5:d7:20:77:
83:3d:21:9d:44:7e:9a:6c:e5:93:bd:bb:7a:0d:d3:
15:3a:91:3a:39:d6:38:f3:3a:13:ca:0c:9b:fd:80:
30:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:02:52:3B:65:F0:5A:DE:FD:4D:09:48:16:EB:F0:16:EC:61:80:67
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e32382e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.28.0/24
Signature Algorithm: sha256WithRSAEncryption
37:32:7b:e2:77:e1:cd:40:46:a7:5a:49:bf:28:dd:7d:c5:9b:
53:de:6b:a3:15:af:f7:b2:d7:1d:27:10:6a:6a:f4:f0:19:2f:
8a:71:03:b5:85:03:7c:3b:d2:4a:12:69:69:f5:29:a2:65:e5:
6b:d4:dd:81:55:3e:16:08:38:c1:a5:c0:4f:8f:2b:fc:0b:1b:
53:0d:a9:3e:16:78:47:14:f5:0e:55:94:fb:7d:c1:04:19:bf:
7b:f3:b8:c6:4b:41:f3:9a:df:6f:2d:6a:73:75:d4:d8:9d:19:
82:92:75:b7:74:18:66:6e:19:15:c0:67:78:28:da:bd:66:37:
e0:9a:a8:49:5f:3e:58:43:e5:4c:2f:0f:1e:83:5e:10:24:46:
77:00:12:b4:a0:aa:8c:d0:e4:92:99:fc:35:1f:38:41:99:2e:
45:c4:c6:80:35:dd:0e:2b:fb:d2:fc:af:0d:4c:fc:3b:53:d5:
02:76:30:30:ec:2a:aa:0f:de:8d:b6:0d:17:b8:1a:73:8d:24:
e6:d6:2a:75:70:26:f7:4a:a9:39:e1:22:46:0a:1b:f7:76:94:
c1:16:a7:77:2c:dd:e3:44:ac:65:6b:33:4b:6e:7a:88:1e:76:
ee:38:d1:8c:5b:62:cb:c2:1b:7a:9e:16:4c:0a:e1:7d:b9:67:
d1:cf:d7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:48 2026 by rpki-client