
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31322e302f32342d3234203d3e2034383038.roa
File: 3231392e3233322e31322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: LqE53OpJKkGm6vY9p4ZeBCrpBA9z/1J5hGhPbgO4VOU=
Subject key identifier: 8A:CA:01:64:29:84:F0:67:D6:69:06:4B:94:22:55:4A:F0:69:84:66
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 7DDD9569C81CE28938D869C7EE3141B27FCBE7E8
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31322e302f32342d3234203d3e2034383038.roa
Signing time: Wed 10 Jun 2026 08:25:56 +0000
ROA not before: Wed 10 Jun 2026 08:20:56 +0000
ROA not after: Wed 09 Jun 2027 08:25:56 +0000
asID: 4808
IP address blocks: 219.232.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:dd:95:69:c8:1c:e2:89:38:d8:69:c7:ee:31:41:b2:7f:cb:e7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 10 08:20:56 2026 GMT
Not After : Jun 9 08:25:56 2027 GMT
Subject: CN=8ACA01642984F067D669064B9422554AF0698466
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:68:e5:f1:0b:88:5e:b0:19:ff:7b:64:b3:d8:
b1:c4:c2:19:cd:65:3d:f8:e4:b4:02:ca:29:c4:5e:
c7:d8:7c:2b:c2:2f:60:d2:55:41:23:76:90:63:9a:
92:05:15:39:3b:90:dc:5d:6e:a8:37:9c:a2:d0:0c:
96:ed:2e:52:26:ea:e6:e3:6b:07:b3:98:99:bc:c5:
5b:95:22:49:a5:f2:9c:60:c8:c7:81:71:41:32:6a:
87:cc:d4:ec:64:cd:c5:aa:bb:10:31:9a:38:50:56:
73:75:a7:13:4d:7b:ff:82:1c:77:56:eb:3e:0e:ec:
a0:a7:3a:ec:69:81:82:e9:ad:e7:03:ee:74:97:97:
83:5c:96:a9:71:fb:55:fd:45:e3:a1:04:b3:82:69:
fd:84:32:de:19:05:cf:3d:6c:5d:e3:b0:c8:ae:95:
0b:c1:4f:a8:67:14:8a:88:1d:69:f7:53:8d:b9:b1:
aa:c4:79:4b:35:26:7f:55:8d:8d:aa:e0:0c:10:90:
3c:f5:cf:84:46:b1:aa:70:83:27:d7:e1:bd:89:44:
cb:47:12:65:22:28:0f:94:85:36:16:79:91:03:b5:
a3:e6:54:1f:7f:16:40:c5:3f:94:83:16:9f:25:db:
94:a2:0c:85:06:ea:b3:1b:65:10:27:5e:1f:8e:9a:
69:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:01:64:29:84:F0:67:D6:69:06:4B:94:22:55:4A:F0:69:84:66
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e31322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.232.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:a0:e4:f8:80:4f:0c:61:73:1e:87:97:7b:21:6f:f8:30:ec:
a0:59:b9:98:44:4f:9e:0a:05:58:57:b9:7c:8c:2d:9e:3f:39:
e7:e1:63:53:bf:ea:c3:98:93:3c:0f:d0:8b:3e:56:67:33:01:
4a:4d:f4:95:2a:92:a2:21:f7:bf:26:72:96:f3:08:fc:13:36:
a7:08:4a:ca:c9:01:05:54:ce:de:51:ac:7e:c5:89:dc:a6:56:
c9:16:fd:95:fe:b4:8a:3d:4d:52:04:59:e4:4e:b5:96:1c:92:
3f:4c:50:da:bb:73:72:f9:5e:00:b9:77:64:8d:79:93:ed:9e:
a9:96:5a:66:ec:cc:48:b6:d8:ad:1f:46:8b:d5:ae:8d:00:a7:
6d:0f:ed:b5:81:11:5b:8a:ef:d8:92:7c:bd:f0:f5:3e:b9:f6:
6f:23:fe:69:49:6e:bf:b6:26:37:86:18:eb:da:7a:c5:d0:d5:
22:ff:f0:2d:45:b8:d0:0a:6b:30:d3:df:d6:da:61:34:c4:bd:
3e:bf:89:24:8f:6a:f3:b9:18:d6:76:77:b0:47:52:75:53:3c:
af:43:dc:7f:16:a7:b2:78:2d:16:da:20:fd:d7:dc:52:df:c3:
35:96:f9:fc:f5:e4:ab:cd:e3:35:76:50:40:ad:49:fe:7f:87:
f8:5b:b4:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:48 2026 by rpki-client