
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35322e302f32332d3233203d3e2034383038.roa
File: 3231382e3234342e35322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: Pn2j6qMsVZYY1HREO3k7cz+k0wLvRddtDan8U5SlGkU=
Subject key identifier: B6:A7:48:26:EB:F6:E6:4B:6E:7A:95:D9:8B:75:C5:9F:55:2A:FB:7F
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 200FA95F6D15DDDE94D4B7260F56176E44FB82C6
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35322e302f32332d3233203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 11:35:24 +0000
ROA not before: Thu 04 Jun 2026 11:30:24 +0000
ROA not after: Thu 03 Jun 2027 11:35:24 +0000
asID: 4808
IP address blocks: 218.244.52.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:0f:a9:5f:6d:15:dd:de:94:d4:b7:26:0f:56:17:6e:44:fb:82:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 11:30:24 2026 GMT
Not After : Jun 3 11:35:24 2027 GMT
Subject: CN=B6A74826EBF6E64B6E7A95D98B75C59F552AFB7F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2b:62:3d:97:25:75:b9:23:6c:09:d1:3f:dc:
54:33:f3:d1:10:5b:96:14:a0:45:ff:e9:5e:1e:f1:
57:e9:2c:3f:16:5c:e4:6e:72:e5:8e:7b:86:2b:90:
68:e3:7d:15:3c:d5:4e:c4:83:fc:86:e6:d6:52:ea:
47:76:ea:9f:06:ae:77:ff:7c:57:c8:59:14:48:3b:
c5:bd:4d:98:59:20:8c:3e:20:e9:95:f8:fb:70:87:
3b:a5:36:50:43:58:7e:fc:80:74:fd:8f:9f:4f:5e:
b2:95:af:b9:f2:80:4b:00:ce:6e:f8:2a:ec:57:49:
3f:5b:49:48:75:5e:8d:5f:75:32:6a:42:d0:59:5c:
ea:99:9a:00:15:24:0f:8f:36:27:6b:4f:29:7e:47:
a8:a0:48:a0:e7:26:b5:85:b5:89:c6:cd:75:64:6c:
85:d0:7e:a1:88:e7:c4:6e:bb:8c:e4:32:65:cf:56:
ea:19:f0:20:c6:ca:ca:bd:9e:34:48:80:22:52:4e:
eb:4f:75:be:59:a3:2f:d3:56:48:1f:30:c2:d8:83:
85:0d:d8:12:0d:f3:e5:de:ae:b2:55:e1:b6:6c:70:
3e:a8:ae:79:c6:f2:71:82:c4:2d:40:27:b9:63:a9:
4e:e4:a7:ce:77:fe:26:2e:ec:ad:4a:a8:4f:d0:4b:
48:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A7:48:26:EB:F6:E6:4B:6E:7A:95:D9:8B:75:C5:9F:55:2A:FB:7F
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35322e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.244.52.0/23
Signature Algorithm: sha256WithRSAEncryption
95:74:05:ed:0e:12:8f:f6:a1:b8:a5:62:50:6f:12:1c:80:8e:
51:1f:4e:2a:d8:a4:96:0e:ca:d9:25:7b:33:52:1d:7d:c3:19:
ca:f9:2b:6a:8d:1d:9e:72:a4:13:3c:4a:26:36:72:11:6a:43:
4d:df:70:ad:7a:bb:a6:8f:ca:d4:7d:78:5a:2a:6e:c4:1e:2b:
85:3c:cb:89:7f:7f:0f:6e:c7:df:86:52:b2:c1:63:2b:e9:82:
45:d2:89:19:00:16:bc:4a:b5:bc:df:41:22:66:cc:59:60:e1:
37:a1:47:25:99:db:61:e8:66:66:ad:8c:51:22:d4:3c:1d:97:
a6:81:ee:6d:db:65:77:16:6f:9c:17:5d:c0:e1:09:db:c4:8d:
f8:7d:bf:75:29:a1:ac:f8:36:a2:e5:4a:85:f2:4b:8e:cf:ff:
ec:c1:ed:77:73:d6:fb:06:86:5e:13:cf:7b:50:d4:7d:b9:b0:
99:e7:ac:3e:c3:84:20:32:d8:0d:e4:97:75:72:30:2d:f9:91:
6f:12:27:95:11:05:55:96:a4:6b:56:7b:fe:b0:7f:b4:47:59:
02:0a:f7:63:7b:eb:59:a6:e8:d4:de:31:12:57:02:1a:df:9c:
02:81:f5:f4:14:28:a3:07:e5:55:7e:38:95:ff:68:66:99:20:
a2:b8:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:06 2026 by rpki-client