
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31322e302f32332d3233203d3e2034383038.roa
File: 3231392e3233322e31322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: cBvqwaNCyehSzliUsLE87rT969g+nl0xyOmwP0q1DjE=
Subject key identifier: 7A:D7:0C:04:CA:2F:A6:51:18:63:1C:49:EE:B8:B2:8D:A2:92:E3:F2
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 7A71DB36B99F9A279B82CFC6EA0BEF779615F6F5
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31322e302f32332d3233203d3e2034383038.roa
Signing time: Wed 10 Jun 2026 08:26:26 +0000
ROA not before: Wed 10 Jun 2026 08:21:26 +0000
ROA not after: Wed 09 Jun 2027 08:26:26 +0000
asID: 4808
IP address blocks: 219.232.12.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:71:db:36:b9:9f:9a:27:9b:82:cf:c6:ea:0b:ef:77:96:15:f6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 10 08:21:26 2026 GMT
Not After : Jun 9 08:26:26 2027 GMT
Subject: CN=7AD70C04CA2FA65118631C49EEB8B28DA292E3F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:c6:ac:55:64:c9:51:44:79:98:5d:9c:be:
7d:b1:28:74:7b:24:5e:e9:ac:a2:97:8a:74:32:79:
7c:14:0c:18:8d:16:ff:66:cf:be:c2:80:ce:41:9c:
c7:92:ea:aa:63:ce:0b:1e:56:0c:45:e7:62:65:17:
0e:6d:1e:bb:dd:44:99:e2:66:4a:f4:0b:01:99:3b:
a9:44:88:7a:74:47:83:21:b3:16:e0:30:87:92:36:
4c:ef:d8:00:72:95:5e:26:f7:ba:a9:4a:a6:8e:10:
ee:3f:62:4c:30:e9:62:5a:c7:e8:6e:23:6f:ea:f8:
d0:2f:b1:bb:90:d0:72:8b:e5:ce:44:f5:0d:7e:4b:
42:98:d2:d0:75:5f:12:81:79:a2:3b:9d:46:c5:10:
74:26:1f:4b:73:2c:38:4a:37:5e:0a:d0:47:1a:e6:
7a:18:8b:22:64:70:58:25:5a:17:32:c1:f0:07:6c:
4a:82:1c:b0:af:b7:22:bf:2d:60:e6:23:62:0d:37:
4e:e1:10:d9:60:83:b1:22:5a:ab:d2:78:55:45:ae:
c8:3c:c7:0d:20:c4:93:02:a1:50:53:ec:3b:fc:79:
5b:b2:e8:57:d6:6f:ea:a4:74:83:19:ca:46:15:fd:
dd:36:0a:b0:66:d4:b9:87:fc:2e:42:06:2a:81:2c:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D7:0C:04:CA:2F:A6:51:18:63:1C:49:EE:B8:B2:8D:A2:92:E3:F2
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31322e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.232.12.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:01:8c:39:53:94:24:db:48:11:a6:c3:0f:f1:88:ab:39:65:
be:e7:dd:77:ee:c1:35:ba:49:d2:f0:94:1e:93:1f:d0:aa:ea:
c9:f3:dd:8e:e4:24:90:a6:a8:42:7b:cf:b2:1b:18:e8:c0:b6:
cf:08:61:8b:81:b9:32:a4:15:9b:31:19:ce:0c:ff:08:d0:2a:
b4:0b:b6:b3:8c:68:00:bc:95:6d:b3:57:36:ed:0f:26:d9:d3:
6e:f3:4d:eb:d8:0d:61:92:c3:5d:79:1c:0c:42:75:db:8b:3f:
b0:9f:24:51:dc:d4:d7:2c:f5:73:06:97:69:5f:36:b7:6c:a4:
f4:8d:b5:f8:82:ed:8b:5d:87:37:69:43:b5:70:05:09:1a:ab:
7f:58:41:9b:ac:55:99:ec:65:9a:9a:fe:b0:ce:56:dd:7f:0c:
41:e2:05:f8:4f:9c:fb:f0:82:63:7e:82:9b:8c:c8:34:f0:cd:
e6:66:b8:0d:96:95:69:6f:00:0d:7f:1e:46:1f:d4:f0:d4:e0:
60:14:19:30:0a:8c:a0:4d:fa:69:c8:ab:82:5f:a3:2a:94:db:
d4:0b:3e:f9:19:76:67:d9:83:90:8a:f4:b8:79:e0:16:44:68:
56:39:06:d2:ae:63:0e:1b:c6:0f:93:42:5c:0c:90:39:46:ca:
e4:b8:c0:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:10 2026 by rpki-client