
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233352e33322e302f31392d3139203d3e2034383038.roa
File: 3231392e3233352e33322e302f31392d3139203d3e2034383038.roa (raw, json)
Hash identifier: rfObVsLXIKbAjaNM08K2PAM8dE6Us3POh+EGokHsxo0=
Subject key identifier: 77:65:D5:39:61:BE:7A:16:BA:D1:8B:58:1E:4C:90:49:91:78:52:0E
Certificate issuer: /CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Certificate serial: 2B767DE89710874905D5AA246C6F99C63533BA9C
Authority key identifier: A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233352e33322e302f31392d3139203d3e2034383038.roa
Signing time: Thu 04 Jun 2026 05:44:08 +0000
ROA not before: Thu 04 Jun 2026 05:39:08 +0000
ROA not after: Thu 03 Jun 2027 05:44:08 +0000
asID: 4808
IP address blocks: 219.235.32.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:76:7d:e8:97:10:87:49:05:d5:aa:24:6c:6f:99:c6:35:33:ba:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A60990A9CA589164050432BD05473DCF9F93F6F8
Validity
Not Before: Jun 4 05:39:08 2026 GMT
Not After : Jun 3 05:44:08 2027 GMT
Subject: CN=7765D53961BE7A16BAD18B581E4C90499178520E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:91:e4:e7:72:a8:98:30:b9:31:64:65:17:
f6:34:6a:71:d4:9d:ba:b2:27:00:14:fc:75:e4:69:
80:23:0a:c5:c9:ba:30:08:18:92:a9:73:b5:da:47:
4a:24:2b:02:0e:25:c0:86:4c:9f:3e:f1:c9:17:4f:
76:e3:6b:c2:0a:48:ba:b9:45:c0:b8:3f:41:f7:53:
fa:32:5c:89:28:48:3c:fe:f1:ad:6d:ef:06:8f:77:
66:6b:83:bc:d7:8a:e9:41:c5:d6:00:5a:68:a6:37:
76:0e:81:34:8d:0b:2b:53:8d:d6:02:bd:ee:a1:c9:
e5:3e:d4:d0:d8:de:7a:e8:ee:c5:89:e0:6c:86:aa:
71:da:2a:46:35:98:32:b9:56:40:be:53:ac:50:56:
13:98:ea:d7:bb:47:27:6f:50:a1:d6:48:b5:99:7e:
f9:53:85:49:e7:3c:d7:d1:27:9b:5c:e8:28:1a:18:
d9:05:30:30:91:49:04:b3:22:1d:cc:92:38:f0:8f:
30:0f:10:74:cc:1a:58:ce:44:e3:df:c6:bf:09:58:
4d:6e:8e:c2:42:1f:22:aa:36:0b:84:14:04:dc:6a:
98:74:0a:47:14:94:0b:c0:37:cb:be:5a:59:c0:9b:
57:c4:ca:13:5b:03:2e:1d:04:95:68:74:25:6d:d3:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:65:D5:39:61:BE:7A:16:BA:D1:8B:58:1E:4C:90:49:91:78:52:0E
X509v3 Authority Key Identifier:
keyid:A6:09:90:A9:CA:58:91:64:05:04:32:BD:05:47:3D:CF:9F:93:F6:F8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/A60990A9CA589164050432BD05473DCF9F93F6F8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A60990A9CA589164050432BD05473DCF9F93F6F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1107575437531283477/0/3231392e3233352e33322e302f31392d3139203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
219.235.32.0/19
Signature Algorithm: sha256WithRSAEncryption
78:07:80:2b:90:97:31:a0:9a:27:3c:62:3a:17:d9:45:f9:97:
d1:de:cb:91:3f:f0:13:52:1f:3a:33:e5:18:2a:dc:09:e8:44:
f9:96:f5:9a:98:d1:04:2c:2c:69:83:12:56:b3:18:98:32:dd:
ef:3f:57:26:3b:96:41:c1:f6:ec:4e:bd:d2:5f:22:db:59:c3:
3e:de:82:75:80:62:a2:4b:3f:58:88:14:04:e1:42:ff:f4:9c:
a9:1d:e5:59:8a:7d:be:9d:5c:11:cd:51:14:14:bf:e9:8d:ce:
aa:ef:2b:d0:c9:8e:ba:b2:8e:b6:da:ae:22:a2:8e:c9:cc:d6:
1d:47:2f:bb:f6:8c:aa:d7:51:76:dc:8f:fd:f7:c5:d3:27:c8:
96:23:ed:8a:81:e0:61:0c:5f:80:29:00:f8:51:c5:b9:eb:a5:
64:2d:67:14:46:b0:78:a4:4d:b7:40:97:eb:87:d6:37:d9:45:
2c:20:24:3f:40:d3:5f:c5:12:66:fd:8e:97:ed:a3:05:7d:41:
6f:e2:0f:b2:2b:ed:f6:90:31:19:24:88:f3:7c:52:11:17:cd:
fa:42:30:fb:79:ad:71:0a:c6:23:a6:87:2c:93:44:5d:83:d1:
c2:44:d0:cc:a2:5e:08:9a:62:ca:7d:b3:11:21:74:6d:76:9e:
be:2f:8e:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:49 2026 by rpki-client