
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34392e302f32342d3234203d3e2034383038.roa
File: 3231382e3234342e34392e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: uJifpXg4380FMRoGA60pqnAwzHoEFp7p+0U9GdiTZ4k=
Subject key identifier: B9:69:63:4F:16:A3:7C:59:3D:A6:90:70:1D:D0:2F:EE:44:FB:1B:A2
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 356E562660DDB4C42941F316CCEBCD807BDAF7FF
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34392e302f32342d3234203d3e2034383038.roa
Signing time: Mon 08 Jun 2026 10:15:28 +0000
ROA not before: Mon 08 Jun 2026 10:10:28 +0000
ROA not after: Mon 07 Jun 2027 10:15:28 +0000
asID: 4808
IP address blocks: 218.244.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:6e:56:26:60:dd:b4:c4:29:41:f3:16:cc:eb:cd:80:7b:da:f7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 8 10:10:28 2026 GMT
Not After : Jun 7 10:15:28 2027 GMT
Subject: CN=B969634F16A37C593DA690701DD02FEE44FB1BA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:de:88:84:55:84:b9:f9:bb:3d:d4:63:99:aa:
86:ac:3b:8c:44:7d:be:ac:21:8b:b3:d3:c3:56:79:
7a:4b:5d:1c:23:de:06:11:25:5a:a1:8a:6d:e0:67:
6f:f7:70:c5:93:97:ab:8e:93:79:b9:5c:01:eb:6d:
46:ca:11:e1:b8:7a:dc:c7:52:e1:2f:cb:29:e4:38:
25:2a:a3:e1:64:67:36:1f:b6:d7:db:f7:4a:d5:cc:
98:59:30:56:34:e1:4a:7e:17:b0:67:aa:f3:5c:b4:
f0:5a:ac:2c:95:d4:f3:97:e8:aa:9c:27:b5:e6:bc:
b0:f4:60:15:d8:69:cf:aa:54:e2:cb:9d:1c:51:ac:
fd:da:20:6e:1c:84:8a:35:90:54:5b:ee:22:6c:43:
6c:05:69:b3:91:1e:be:5e:ff:9a:a7:a3:8c:12:c3:
46:4e:29:74:a7:cc:3f:ca:10:d4:75:75:e2:59:72:
c6:ec:48:cd:65:cf:5f:9c:12:04:76:ea:18:38:c4:
f1:80:96:8d:16:7d:fb:51:e4:a9:bf:e8:c8:ed:07:
d0:c9:ee:99:72:20:f4:d7:8d:d9:3a:0b:29:7f:21:
ae:89:65:64:f2:9c:a1:e7:3b:be:0e:21:a2:db:1d:
7c:eb:18:ac:a2:4e:6f:c0:a7:34:53:1a:cc:7c:c2:
d1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:69:63:4F:16:A3:7C:59:3D:A6:90:70:1D:D0:2F:EE:44:FB:1B:A2
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e34392e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.244.49.0/24
Signature Algorithm: sha256WithRSAEncryption
96:ec:ce:4f:e4:da:f2:3a:bb:7d:f4:93:db:48:6a:ff:17:30:
b3:16:49:b7:a4:32:3d:fc:8e:99:8a:6b:71:5e:7c:13:b8:ec:
c5:d6:d1:59:75:60:00:0d:33:62:f3:46:c9:b8:a1:33:9d:62:
cc:c4:f2:a9:69:cb:42:4a:80:8a:a7:30:8e:2e:39:70:d0:f1:
83:3c:91:15:96:63:1d:b4:29:80:f9:17:10:72:3f:55:98:6d:
14:64:31:a4:f4:61:5b:82:47:f9:a1:19:55:0a:b2:75:9a:ae:
c5:c2:77:65:69:7e:b7:2f:44:32:cc:bf:ff:99:a4:bd:58:ed:
15:1c:33:fc:8c:d9:47:1f:0f:40:76:c0:b1:26:10:3f:24:7c:
d4:e9:14:4b:a7:2c:5f:ee:b4:ed:be:5d:99:ba:19:20:5c:0f:
70:56:c2:33:3c:2a:b1:78:5f:a5:3f:b7:9b:6e:d5:ac:9e:d0:
50:cc:50:a9:52:33:ad:5b:64:5e:f6:43:b4:78:a2:e5:e6:94:
ab:0f:ee:50:22:75:cd:05:0d:bf:93:05:cf:8f:66:45:6b:ba:
f7:d4:33:92:35:e5:48:6c:13:d8:2d:66:4a:fb:43:82:67:b7:
a1:ca:24:fe:58:45:45:8d:33:b2:19:3f:bd:6b:91:89:66:90:
c9:86:76:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:11 2026 by rpki-client