
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31312e302f32342d3234203d3e2034383038.roa
File: 3231392e3233322e31312e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: 2AvNBUVau8oCf2GGfOKe7ocZFK9ziYb3kjCVqlFRYNI=
Subject key identifier: 0C:E0:DE:FF:94:DD:66:9E:5C:20:9D:D3:BC:87:22:5F:4D:FE:36:AC
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 16436277295E013ABE8401E7FDFF21D736C480D3
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31312e302f32342d3234203d3e2034383038.roa
Signing time: Mon 08 Jun 2026 10:17:36 +0000
ROA not before: Mon 08 Jun 2026 10:12:36 +0000
ROA not after: Mon 07 Jun 2027 10:17:36 +0000
asID: 4808
IP address blocks: 219.232.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:43:62:77:29:5e:01:3a:be:84:01:e7:fd:ff:21:d7:36:c4:80:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 8 10:12:36 2026 GMT
Not After : Jun 7 10:17:36 2027 GMT
Subject: CN=0CE0DEFF94DD669E5C209DD3BC87225F4DFE36AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:62:71:bc:bd:12:06:0f:d2:77:b0:fa:cc:43:
50:ed:fc:2f:59:cd:44:d3:1e:6e:9b:66:24:69:e4:
34:d3:7c:26:c5:1c:23:67:28:72:1a:30:b9:c1:89:
5e:2d:89:eb:ee:91:f5:64:83:53:c5:8e:13:3a:55:
6b:24:e5:2a:9e:89:d9:f1:ad:cc:ac:31:cf:b6:39:
1e:5b:96:32:ea:e7:4e:79:a6:d8:f6:9b:86:cf:d9:
8e:ed:6f:38:91:eb:2e:6c:f6:88:b5:e6:01:fd:a0:
ac:e7:65:17:da:b9:5e:25:1a:09:f2:06:b4:0a:96:
33:17:1f:27:51:e9:c3:9c:9f:a3:df:16:cd:72:54:
b7:58:a1:eb:39:41:25:c1:e4:7f:9c:84:46:df:8a:
12:ff:09:7e:ad:c2:47:3d:ed:39:79:9d:81:13:d7:
08:18:1c:a9:51:19:65:b7:4e:ce:2b:c4:da:4b:49:
33:53:65:16:de:d8:1d:e1:be:3d:d8:bd:72:5f:dd:
ef:9b:9c:7c:b4:97:89:42:a0:7d:c9:b3:3c:5b:97:
62:a2:4d:a3:dd:45:b8:5f:85:69:ac:b1:06:2c:7b:
c3:e8:50:20:7d:bd:e7:65:ed:a2:05:34:f4:ab:d3:
44:ea:ed:6a:79:a8:25:df:1c:ba:08:39:4c:c5:de:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E0:DE:FF:94:DD:66:9E:5C:20:9D:D3:BC:87:22:5F:4D:FE:36:AC
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31312e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.232.11.0/24
Signature Algorithm: sha256WithRSAEncryption
71:17:6d:84:7a:76:00:f2:13:00:d4:69:43:8d:da:77:64:ae:
bd:0f:3c:15:9f:68:6d:66:32:bf:27:3d:74:12:87:16:c6:66:
76:00:13:5f:31:cd:0b:d3:e1:b7:01:ea:68:6e:bf:74:78:d2:
16:35:b2:86:52:0a:b1:7c:30:01:47:0d:ba:e9:31:08:a6:21:
14:f5:11:ee:fe:98:ff:ee:02:4d:dc:33:e7:ff:0a:19:d6:64:
e1:48:35:36:67:5b:5b:1b:3e:ff:13:f5:f5:78:61:fe:67:5b:
d4:82:af:48:3b:53:45:86:89:15:19:fc:37:e8:42:bd:e3:4e:
21:12:80:12:02:7c:fe:d7:af:e8:bc:32:28:fb:a9:7d:4b:9c:
a0:8c:1e:03:cf:70:7f:1e:59:7a:1d:12:65:84:26:bf:8a:d0:
fb:8b:23:54:1a:91:67:0a:f7:0c:df:40:e4:b6:89:00:83:a3:
f5:40:f3:3d:6b:35:ff:4e:20:1b:83:7d:19:9b:01:f8:9e:c7:
28:2a:3e:de:50:68:8c:c6:1a:c2:8a:07:7b:e4:8f:40:14:7d:
7b:52:e1:66:2b:79:40:62:ba:77:2f:26:f6:50:f9:65:19:fc:
50:d0:66:33:64:1f:4d:66:f5:65:aa:51:46:4b:32:aa:7b:c8:
62:59:d3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:53 2026 by rpki-client