
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34342e302f32322d3232203d3e2034383038.roa
File: 3231382e3234342e34342e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: 9TvilzeITSoaW5VFw4s6x4iFni5h3IND+YxZ3iXWjns=
Subject key identifier: 09:95:36:7D:48:60:14:D3:A7:3E:6C:95:7D:60:C9:D7:1C:D3:9C:1C
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 41840F3D2F6E99185C97F81BA3960CBD89FAAADA
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34342e302f32322d3232203d3e2034383038.roa
Signing time: Mon 08 Jun 2026 10:14:57 +0000
ROA not before: Mon 08 Jun 2026 10:09:57 +0000
ROA not after: Mon 07 Jun 2027 10:14:57 +0000
asID: 4808
IP address blocks: 218.244.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:84:0f:3d:2f:6e:99:18:5c:97:f8:1b:a3:96:0c:bd:89:fa:aa:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 8 10:09:57 2026 GMT
Not After : Jun 7 10:14:57 2027 GMT
Subject: CN=0995367D486014D3A73E6C957D60C9D71CD39C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:c8:1f:ed:ce:5e:d4:c8:f1:36:35:4d:43:
9e:b7:42:50:58:b7:9a:ac:fb:cf:87:53:78:16:8f:
05:b7:1d:b2:28:6b:4d:18:c9:ee:fd:01:95:0b:08:
83:11:5d:57:4d:2e:bb:e1:cb:ae:9b:b1:6b:a2:f6:
6b:b8:3e:cc:2d:fd:99:67:6b:b0:0d:12:89:93:d4:
99:7f:19:1f:35:6a:2a:f5:c9:b4:af:46:bf:47:65:
c4:82:1c:9d:5b:24:02:ec:7a:f0:66:25:d1:5c:c8:
f7:be:c1:9f:1d:18:30:25:3f:e7:9a:63:5a:8e:a9:
99:f4:6b:c0:a0:a2:68:c7:18:19:65:b2:2e:9d:7f:
6b:6b:9e:57:3e:29:b1:f7:82:98:57:37:b9:d2:7f:
43:21:bd:e8:86:be:07:09:53:4f:b0:43:78:68:de:
3f:5b:7a:49:c4:6c:63:5b:c9:ec:12:cb:0b:74:cb:
27:1a:a2:66:59:1c:dd:b1:d2:7c:ef:2c:cd:e5:a1:
49:9a:d8:26:29:71:e0:d6:91:13:33:84:15:a0:e8:
89:9d:31:0c:66:ea:af:6c:18:65:c2:ac:ff:1a:6d:
d5:13:74:ef:e9:b1:a4:93:7e:c1:d6:44:a9:cb:2a:
0a:f1:24:8c:6f:48:84:1e:75:4f:64:d5:2e:49:3d:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:95:36:7D:48:60:14:D3:A7:3E:6C:95:7D:60:C9:D7:1C:D3:9C:1C
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34342e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.244.44.0/22
Signature Algorithm: sha256WithRSAEncryption
30:fc:41:e9:0f:2a:13:83:06:4c:5b:fc:20:e0:ef:97:85:c2:
25:83:d1:94:01:fe:42:39:96:2e:75:27:3b:de:a3:77:13:af:
8c:be:b4:16:1f:d1:af:b7:fe:1b:d3:a4:07:f1:b7:61:d3:b4:
57:dc:00:b4:58:50:fb:0f:c2:58:5f:1e:32:d5:24:94:f1:93:
a5:34:5d:b5:ee:c0:ce:07:79:67:28:e7:65:e0:c3:f6:25:9d:
25:7c:ce:74:72:87:dc:b4:de:41:a4:00:ee:89:93:99:b6:a9:
00:6a:35:9f:8b:3f:1d:d5:89:3c:d9:fd:21:e9:b4:8d:2a:e3:
08:44:7e:2d:c6:d5:80:11:18:32:d4:2a:56:00:8e:e3:62:9a:
c9:72:b4:ae:fa:ff:ab:8c:45:d9:03:c4:c0:65:33:26:0a:47:
de:14:3a:78:eb:14:a3:f6:d8:4b:a6:49:81:b5:9b:27:97:9a:
9b:96:d7:b5:12:b8:bf:3d:4a:e0:99:81:da:91:b4:42:e8:fb:
ec:f7:f7:2e:71:c4:a4:2d:24:fb:f5:aa:f4:fe:75:2d:68:57:
f3:bb:d0:68:ca:30:ff:c3:c3:fc:69:3a:ed:98:33:cf:b4:aa:
65:11:6f:bc:ff:cd:ea:49:e4:b2:73:00:92:78:39:c7:79:53:
f7:46:c9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client