
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35362e302f32332d3233203d3e2034383038.roa
File: 3231382e3234342e35362e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: 5lqKnaxWmfn3WPysx7otNLyHkm3a6m3ZTXIMeDY2WaE=
Subject key identifier: 66:F9:BD:CD:58:39:26:3D:B2:E5:5E:7B:45:2A:EB:06:B0:CC:FC:D5
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 58394F1D8DF6386F156629F8B67AF8B61B23FA9F
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35362e302f32332d3233203d3e2034383038.roa
Signing time: Mon 08 Jun 2026 10:15:59 +0000
ROA not before: Mon 08 Jun 2026 10:10:59 +0000
ROA not after: Mon 07 Jun 2027 10:15:59 +0000
asID: 4808
IP address blocks: 218.244.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:39:4f:1d:8d:f6:38:6f:15:66:29:f8:b6:7a:f8:b6:1b:23:fa:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 8 10:10:59 2026 GMT
Not After : Jun 7 10:15:59 2027 GMT
Subject: CN=66F9BDCD5839263DB2E55E7B452AEB06B0CCFCD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:db:e6:28:a6:9b:38:a1:d6:91:f8:82:99:bc:
a5:98:1f:ba:b3:52:e2:e6:c8:e1:3a:3e:b9:b4:e8:
05:b5:9a:8c:77:69:16:25:b3:52:95:2a:42:36:b6:
53:15:c4:bd:84:11:ba:b5:5b:54:1e:2e:dc:f4:cb:
9e:07:35:aa:66:f0:2f:ef:ad:79:ac:a6:70:af:85:
08:7e:00:eb:51:69:de:d2:c1:14:2f:83:75:32:57:
f2:d5:62:ea:47:f4:5a:92:51:f9:c0:b4:b5:3d:f3:
7b:cf:70:fa:8c:bb:ca:58:5b:e8:47:01:76:84:26:
71:bd:65:e0:57:45:37:19:b8:02:fd:0c:21:dc:61:
e5:f3:c8:4d:e6:80:ee:15:98:72:41:c0:98:26:58:
b4:90:34:99:5c:e3:0d:b6:4e:51:bd:91:a4:2f:bf:
01:c6:ec:77:47:b1:09:15:d7:76:37:03:b7:12:45:
5f:b6:90:69:94:b7:a6:22:0b:74:74:ac:5a:72:b0:
eb:6b:12:d7:cc:3f:37:54:8a:6e:d2:f1:a8:f8:fc:
f2:c8:c7:6e:bb:5b:87:60:ca:51:96:fc:bb:16:9e:
ea:78:aa:26:01:c7:36:be:97:5a:b5:bf:0e:f2:96:
1e:46:cb:53:5a:68:41:ff:3f:38:98:80:90:03:2e:
83:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F9:BD:CD:58:39:26:3D:B2:E5:5E:7B:45:2A:EB:06:B0:CC:FC:D5
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231382e3234342e35362e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
218.244.56.0/23
Signature Algorithm: sha256WithRSAEncryption
47:97:e4:6b:81:99:84:d5:3b:40:04:7c:ef:0a:fb:1c:dc:41:
c9:18:43:08:f6:17:1b:5e:24:c4:7f:6f:4d:37:b3:49:08:e0:
12:e1:f0:18:c5:03:0b:d7:5b:0b:c9:87:c9:90:5c:c3:fe:2a:
16:96:cb:54:8a:39:69:9e:c1:ee:d4:4b:37:fe:5e:65:5a:b7:
74:ab:c5:36:44:e5:91:3f:75:7f:14:f8:81:12:12:0d:bb:3f:
f3:ab:e8:95:d0:06:b0:99:97:86:2d:9b:f7:2e:da:55:fd:3f:
c4:9d:54:2d:85:e3:f3:7f:d7:63:fd:35:c1:3b:e1:92:3d:f9:
fd:4c:7b:2c:0f:14:80:80:74:2c:c7:77:81:e8:9e:77:cd:4b:
d1:f9:97:72:b7:5d:5d:ab:51:26:b7:5f:77:c9:02:70:3a:49:
e3:7a:ea:f3:3e:1b:10:25:a8:6e:ce:00:56:16:d6:04:12:c8:
c9:9a:0a:45:a9:40:21:3d:e3:ad:0b:0a:c5:67:5f:e3:bc:50:
19:ed:48:3c:9c:3d:06:43:4d:2f:00:3d:b4:46:5d:a3:78:86:
3d:17:ac:8b:27:33:5e:68:07:a3:ad:3f:be:7c:73:04:ab:3c:
32:0d:3b:e5:d9:df:b4:bb:88:c4:07:04:a6:cf:86:a5:e6:68:
db:ab:97:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:08 2026 by rpki-client