
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e362e302f32342d3234203d3e2034383038.roa
File: 3231392e3233322e362e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: gYbkdjUqDrlQCoj/gDFdBgpPWD+XDAVFdb4c7HphN08=
Subject key identifier: CF:61:FB:87:2C:CA:3A:F6:20:EA:47:DA:14:16:32:0F:2E:99:55:C6
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 067E156DB88DA52E6760000BA7A5F76418080A6E
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e362e302f32342d3234203d3e2034383038.roa
Signing time: Mon 08 Jun 2026 10:16:51 +0000
ROA not before: Mon 08 Jun 2026 10:11:51 +0000
ROA not after: Mon 07 Jun 2027 10:16:51 +0000
asID: 4808
IP address blocks: 219.232.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:7e:15:6d:b8:8d:a5:2e:67:60:00:0b:a7:a5:f7:64:18:08:0a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 8 10:11:51 2026 GMT
Not After : Jun 7 10:16:51 2027 GMT
Subject: CN=CF61FB872CCA3AF620EA47DA1416320F2E9955C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:3d:21:85:e4:68:6b:c5:37:5a:86:25:3a:4b:
ec:ae:98:2d:84:bd:db:7c:1c:88:12:d6:7e:eb:cc:
e2:65:8a:99:85:59:77:80:4a:07:4c:d2:4b:ba:ad:
be:f7:13:7c:ec:7f:22:43:da:b9:d9:b8:42:3c:85:
e5:bb:9d:2b:ad:3e:ed:de:d8:62:88:59:8c:22:6a:
a6:f1:87:75:0b:ac:1f:72:6c:d2:e3:30:43:43:d8:
3a:59:ed:8f:cc:2b:1d:55:1b:52:91:a1:58:09:bb:
e5:da:62:1d:25:41:a5:38:fc:bb:c9:92:e3:f5:ce:
4d:f6:5d:43:21:85:95:a8:98:ca:b8:b2:ca:19:0a:
a8:e1:b3:a5:6c:9c:17:da:05:2a:0f:d3:ff:4d:dd:
c5:15:c0:65:f3:72:a1:fc:2e:2a:fd:98:69:90:4b:
7e:6e:4d:69:6e:1d:37:53:3f:6b:b6:ed:cf:89:cc:
05:75:43:e4:8c:45:e8:b3:e4:0b:e9:0e:82:6e:17:
2d:f9:94:f2:86:f9:c7:6d:fe:e3:01:5a:51:71:b1:
30:12:21:be:e4:8b:80:a2:99:c1:05:ea:04:9d:63:
03:26:da:32:3c:4b:a3:c1:1d:03:71:ba:85:ad:da:
79:22:a0:50:c8:a6:9d:8f:1a:20:cc:31:07:4b:9e:
c9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:FB:87:2C:CA:3A:F6:20:EA:47:DA:14:16:32:0F:2E:99:55:C6
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233322e362e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.232.6.0/24
Signature Algorithm: sha256WithRSAEncryption
35:e6:e2:6c:57:50:74:e4:1c:09:d0:be:b9:79:36:25:4c:cd:
5d:d3:c4:98:5b:8e:df:66:95:bc:7b:e3:fb:09:11:1c:6d:15:
1e:3b:cc:64:b2:1b:4b:15:4e:ba:84:91:93:a2:32:57:21:65:
c0:0a:f8:39:1a:40:a5:77:35:82:86:92:43:b3:9b:d4:7a:44:
0a:9e:ec:6d:cc:49:ec:90:ff:f8:38:07:ce:59:8e:b1:3a:76:
33:95:81:f7:4b:53:1b:ab:02:29:43:1e:68:ff:e4:d1:95:8c:
8e:90:26:86:32:b3:c2:b8:f7:aa:31:4d:31:8f:ea:8b:3e:9b:
61:be:49:dc:0b:cf:02:26:04:8f:3f:66:f3:6d:3c:83:ef:92:
52:7b:22:14:83:34:c9:3d:5f:fd:97:98:38:9b:28:45:4b:25:
f7:f1:86:3d:3e:55:cd:fb:2b:25:3d:b5:93:55:9a:ca:9f:09:
69:d6:8a:75:df:99:04:f6:18:08:1d:a2:d7:41:8f:88:f0:48:
07:45:d9:fb:20:be:90:1e:24:8e:0a:b9:10:c6:b7:02:3e:b8:
28:9e:cc:01:be:18:ac:ff:7e:2a:4b:bc:d7:6c:3a:86:42:1f:
46:cd:f4:b1:44:0b:42:ea:cd:f3:7e:e4:01:81:42:c7:03:0c:
b1:cd:45:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:07 2026 by rpki-client