
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e302e302f31392d3139203d3e2034383038.roa
File: 3231392e3233322e302e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: mVMSEokBNk3uZ5sAZbJBm3InDEauT6EWU57r+1R1fzY=
Subject key identifier: A6:B9:F3:B8:0D:8E:A5:C6:83:C6:1A:4A:72:2A:57:AC:F2:A1:FD:72
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 4EBC84A09E6D67593BA31D11508F448A5CFDF731
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e302e302f31392d3139203d3e2034383038.roa
Signing time: Wed 10 Jun 2026 08:26:51 +0000
ROA not before: Wed 10 Jun 2026 08:21:51 +0000
ROA not after: Wed 09 Jun 2027 08:26:51 +0000
asID: 4808
IP address blocks: 219.232.0.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:bc:84:a0:9e:6d:67:59:3b:a3:1d:11:50:8f:44:8a:5c:fd:f7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 10 08:21:51 2026 GMT
Not After : Jun 9 08:26:51 2027 GMT
Subject: CN=A6B9F3B80D8EA5C683C61A4A722A57ACF2A1FD72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c6:9b:6e:ab:f4:95:91:67:ea:40:aa:cf:7d:
ae:b2:c4:6e:1f:27:50:02:ac:2d:95:75:ad:c1:b4:
73:1b:c0:7e:4b:7b:e7:22:da:1a:e7:af:6a:38:17:
08:ce:80:cf:d4:3f:4b:19:fb:06:17:94:fa:2d:88:
fd:67:cd:1b:ee:e8:f5:d9:c8:57:1b:00:9f:7b:fe:
94:86:c7:e8:28:5e:98:82:c6:f7:6e:4e:22:cf:59:
b5:3f:e5:58:40:a5:5e:ef:c8:d3:b3:61:95:39:b6:
e4:96:00:48:49:fd:fa:45:a8:71:d3:d5:cd:5f:e5:
d5:bf:b3:ef:ba:8d:70:e8:db:2d:18:20:7b:29:91:
b4:69:29:3e:8c:29:48:2a:da:99:50:87:12:1b:e1:
32:7f:03:7f:f9:86:04:4f:d2:6d:77:a4:88:9c:0b:
e3:c7:bb:2d:5c:bf:19:6b:a2:08:8b:96:ee:04:5f:
5c:ed:f2:0b:32:cf:c1:0f:7a:6d:35:3c:f8:a1:9b:
6e:f9:92:5d:d2:d7:69:db:de:a2:db:8f:56:a7:4e:
a1:11:57:b5:7e:1b:72:d3:a1:4b:29:cf:80:ff:11:
30:19:0d:0f:1d:15:ef:4e:3c:e6:e0:f0:89:f3:94:
e6:85:e1:a7:8a:fa:3b:3b:77:f3:82:b5:fd:60:a8:
8c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:F3:B8:0D:8E:A5:C6:83:C6:1A:4A:72:2A:57:AC:F2:A1:FD:72
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e302e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.232.0.0/19
Signature Algorithm: sha256WithRSAEncryption
18:f3:d3:30:8d:e3:b1:af:07:3e:41:c8:4f:85:e8:50:84:84:
03:a2:8a:cb:83:ba:cc:ba:95:27:b5:c3:38:4d:8d:32:a8:25:
8e:21:0f:34:47:e2:bc:96:f2:0e:cd:c3:c1:3c:7d:69:4c:4b:
25:cc:c7:f8:a7:9c:88:30:a2:6c:c0:6c:10:c2:d3:86:2d:16:
31:9e:94:3f:10:af:7f:91:d7:be:7b:8e:12:6e:b5:29:b9:d5:
3b:d3:d0:0b:f1:77:5b:af:12:ba:01:24:f9:48:6b:ff:ca:09:
1c:ff:7c:d9:22:e7:03:7e:ea:de:f8:51:33:6f:c0:cd:a3:3d:
e4:5d:7a:8e:3f:4a:25:26:2e:9b:9f:bf:e4:06:16:02:09:90:
a3:f1:96:ed:a7:29:5b:9c:94:e2:41:f7:58:e3:84:b4:a4:13:
71:2a:12:9b:68:80:16:e5:7a:19:66:39:e4:cf:96:35:f4:e8:
4f:90:17:ad:7f:86:68:58:22:74:92:c7:ac:c2:1c:b2:0e:81:
c8:c7:cd:97:1a:38:7d:60:aa:73:f5:97:d8:82:30:77:fc:ea:
3c:97:34:bf:2f:f7:5d:28:25:1a:84:79:88:f1:79:58:59:0f:
c4:f1:df:81:44:b5:5d:30:39:38:78:54:3d:8e:12:30:e3:b9:
b6:9a:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:11 2026 by rpki-client