
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1124140768701710373/0/36302e3233322e302e302f31372d3137203d3e203234313433.roa
File: 36302e3233322e302e302f31372d3137203d3e203234313433.roa (raw, json)
Hash identifier: cXD/OfZhxV2I85LOF/CmMWrUatSOUukkmst2PGONvFo=
Subject key identifier: 07:83:DF:90:4F:AC:CF:0B:6C:36:39:33:00:29:22:C7:96:6E:71:79
Certificate issuer: /CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9
Certificate serial: 2B317F81D515D5A75F743AEA20EC8A144C10BBCD
Authority key identifier: 81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/36302e3233322e302e302f31372d3137203d3e203234313433.roa
Signing time: Tue 30 Jun 2026 09:21:03 +0000
ROA not before: Tue 30 Jun 2026 09:16:03 +0000
ROA not after: Tue 29 Jun 2027 09:21:03 +0000
asID: 24143
IP address blocks: 60.232.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl
rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 05:50:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:31:7f:81:d5:15:d5:a7:5f:74:3a:ea:20:ec:8a:14:4c:10:bb:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819043520D3A1F4E5EDCD8C05762425A8A01F3D9
Validity
Not Before: Jun 30 09:16:03 2026 GMT
Not After : Jun 29 09:21:03 2027 GMT
Subject: CN=0783DF904FACCF0B6C363933002922C7966E7179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d3:32:55:b4:4d:8c:a4:a8:8a:25:14:95:88:
79:b1:70:c5:66:d9:4a:7f:71:91:4a:a0:c0:7c:8f:
23:6d:d8:94:7c:f0:40:a6:7c:4b:8d:2d:63:94:1b:
a3:6c:d2:67:4b:5c:fd:d3:f6:3e:7a:26:c2:8e:74:
2f:70:40:54:7c:fd:d7:1f:c7:13:29:0d:e8:24:f6:
3b:ee:8a:53:68:a8:64:fa:0f:51:d4:94:de:67:89:
f6:5a:8f:4e:26:00:c6:a0:62:79:ee:a8:d4:b4:31:
ca:65:ae:2e:10:bc:96:94:c6:8d:e6:0a:e3:62:1f:
2e:e5:e9:c8:99:c1:57:6e:01:78:e6:4d:85:c3:91:
f8:e6:7e:83:35:75:3b:66:4f:64:a1:31:18:0b:5e:
38:da:fb:4b:00:5b:b5:2d:73:50:a3:d6:50:a7:95:
a6:5d:aa:44:ea:ba:e4:cc:5b:5b:2a:60:f0:f7:2a:
cf:a9:ae:35:95:69:4f:b3:af:92:ab:6f:d5:51:7c:
a1:6e:46:1f:9b:65:20:1a:30:23:48:ce:1b:9c:69:
7c:45:ce:8e:4f:30:74:1c:8c:4c:b0:7f:c3:14:75:
b9:dd:d5:5a:0a:3d:4d:d6:01:6e:49:84:23:f7:d6:
57:36:f5:07:79:13:81:69:33:14:08:18:94:47:d4:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:DF:90:4F:AC:CF:0B:6C:36:39:33:00:29:22:C7:96:6E:71:79
X509v3 Authority Key Identifier:
keyid:81:90:43:52:0D:3A:1F:4E:5E:DC:D8:C0:57:62:42:5A:8A:01:F3:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/819043520D3A1F4E5EDCD8C05762425A8A01F3D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1124140768701710373/0/36302e3233322e302e302f31372d3137203d3e203234313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.232.0.0/17
Signature Algorithm: sha256WithRSAEncryption
47:91:b1:4f:f2:7e:44:43:40:44:5d:f8:f8:39:32:e6:de:84:
c0:52:26:a6:78:0e:5f:cb:33:42:15:3c:0f:ae:d3:86:b2:14:
f1:f1:f4:86:c5:09:f8:bd:a3:51:ea:e5:10:4f:6e:a6:31:77:
9c:d4:1f:ac:08:54:5e:d5:cc:d7:ff:cb:09:32:11:b5:45:31:
33:4c:98:ad:98:3a:b4:8a:73:3e:d6:18:a5:7e:88:ce:6d:01:
1d:5f:34:69:cb:a0:a2:94:4e:73:9a:8a:4c:47:0a:3e:96:4d:
c0:a6:6b:29:7f:50:99:bd:ac:2b:dc:71:6b:3f:a5:c8:54:43:
67:c2:11:a8:1d:24:07:fd:c4:24:3c:7f:96:ae:73:ec:ef:c9:
81:eb:60:80:1f:d1:50:b4:c0:2d:d3:47:93:ff:a8:d8:79:5e:
8b:c8:d1:89:10:5e:03:76:90:1d:da:5b:41:33:51:20:5a:6b:
44:f3:d9:ee:84:4f:36:28:70:ec:06:50:da:a9:61:06:7b:1b:
73:91:a3:43:66:cf:26:8f:8d:71:15:ad:b5:c3:c5:f1:93:7c:
af:70:1a:4d:ec:9e:48:34:1a:da:98:ee:9b:65:19:87:55:76:
8a:fe:17:f8:e5:79:1b:05:a1:a2:f5:0e:8e:c3:38:11:a9:e9:
3d:c4:f5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 13:48:24 2026 by rpki-client