
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e392e302f32342d3234203d3e2034383038.roa
File: 3231312e3134342e392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: Cy4NR6mYQzi4bINE+DMsdIotIn7K2a0paLUmD2wKrUQ=
Subject key identifier: 13:61:B7:27:1F:17:59:46:4E:B2:B2:AF:FB:93:4D:11:7D:21:39:61
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 222276AF412B0CAD261A4F393C0C000FBEFC1726
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e392e302f32342d3234203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 05:40:43 +0000
ROA not before: Thu 04 Jun 2026 05:35:43 +0000
ROA not after: Thu 03 Jun 2027 05:40:43 +0000
asID: 4808
IP address blocks: 211.144.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:22:76:af:41:2b:0c:ad:26:1a:4f:39:3c:0c:00:0f:be:fc:17:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 05:35:43 2026 GMT
Not After : Jun 3 05:40:43 2027 GMT
Subject: CN=1361B7271F1759464EB2B2AFFB934D117D213961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:5c:9b:c5:b7:ca:79:39:5a:ad:60:71:51:
39:7a:c7:31:cc:cc:5e:c3:c8:e6:e0:26:b2:76:32:
6e:7e:b3:45:b3:76:4b:12:a8:72:6f:3d:9c:c5:46:
09:ac:fb:25:a3:ae:0d:f7:34:ea:cd:0f:6d:44:7e:
5f:45:88:85:f7:ac:cd:d3:ea:a6:9c:29:a3:c0:3f:
51:24:3a:c7:95:9e:e1:87:17:6b:10:3a:3c:5b:ac:
8c:b9:b4:b4:d6:ef:ab:a1:5b:d9:91:8b:a4:55:b1:
da:87:5c:05:12:89:9a:bf:fa:5c:27:08:bc:65:64:
dc:fb:74:8a:e5:ac:40:f7:a4:35:a6:01:38:ec:c7:
71:62:8e:49:bc:ba:2a:82:b4:02:31:d1:1f:2e:c3:
1f:98:b3:87:37:8e:ae:8f:7d:a7:25:93:23:55:4a:
94:58:26:eb:ff:17:17:3b:4f:28:e5:25:68:70:03:
d7:5d:cb:de:93:08:21:ce:86:5a:04:78:31:fb:d2:
6c:89:ba:0b:6f:92:e0:02:4f:d9:77:9a:37:6d:75:
2c:6e:6f:e1:2a:17:4d:07:bf:cc:54:0e:3d:7c:61:
03:db:21:17:64:b2:0a:5e:b6:94:47:58:e6:46:c7:
ec:5b:62:17:f4:06:3d:b8:97:34:c2:25:9d:d0:53:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:61:B7:27:1F:17:59:46:4E:B2:B2:AF:FB:93:4D:11:7D:21:39:61
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231312e3134342e392e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.144.9.0/24
Signature Algorithm: sha256WithRSAEncryption
35:ee:07:d3:99:5f:ed:8a:36:a3:63:cc:8e:2c:5e:7e:c8:5c:
7d:e6:df:b2:cc:c8:67:2f:f1:9d:8c:c2:07:94:ec:b5:17:04:
5f:ac:a9:3f:81:9a:c7:62:ef:91:5f:3d:da:53:da:27:ce:3e:
49:f3:12:e1:db:07:31:bf:99:3e:29:98:56:30:51:90:4f:a9:
30:a2:d2:14:91:a5:6e:4b:95:54:08:bf:f2:83:bf:28:3b:ca:
c5:f3:bc:2c:e2:a7:79:eb:f4:a4:62:59:ba:2a:ed:c2:06:6c:
2a:77:76:6c:92:a1:61:93:8b:47:ee:a0:ca:ff:83:b7:79:db:
e3:fc:55:6b:75:2a:ea:b4:fc:9d:3d:4c:3a:82:1e:18:1a:3c:
91:97:b8:fd:a6:7a:ad:2a:4a:6d:1c:45:c1:ba:ff:20:26:fd:
df:46:a7:13:e7:6e:2b:51:3f:b8:cb:dc:6c:f6:12:86:c4:f9:
89:24:f9:96:88:4f:2b:50:f1:c1:51:79:f2:61:5b:ae:a2:b9:
c3:9a:ae:26:e4:00:a6:1b:a3:68:14:ae:21:cc:fe:19:f7:80:
63:80:c3:89:bf:d7:1c:cc:23:4e:b5:c0:a0:50:30:e2:09:33:
7b:37:01:4b:be:d5:76:8f:4c:07:29:50:d1:8c:66:11:87:db:
e1:46:2f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client