
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096985075804798979/0/36302e3233322e3132382e302f31372d3232203d3e203234313433.roa
File: 36302e3233322e3132382e302f31372d3232203d3e203234313433.roa (raw, json)
Hash identifier: ByH42KhU84BjARWvSf4oIylPRBp7bQn0rgPvnZhkzS8=
Subject key identifier: F8:E8:0B:AC:FF:C2:BE:2B:C5:78:2C:B7:8B:CE:65:62:27:B2:C6:98
Certificate issuer: /CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Certificate serial: 1069A17B320AE609D9EE0736BC288136F3DBE546
Authority key identifier: 6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/36302e3233322e3132382e302f31372d3232203d3e203234313433.roa
Signing time: Thu 16 Apr 2026 02:36:01 +0000
ROA not before: Thu 16 Apr 2026 02:31:01 +0000
ROA not after: Thu 15 Apr 2027 02:36:01 +0000
asID: 24143
IP address blocks: 60.232.128.0/17 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:37:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:69:a1:7b:32:0a:e6:09:d9:ee:07:36:bc:28:81:36:f3:db:e5:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5
Validity
Not Before: Apr 16 02:31:01 2026 GMT
Not After : Apr 15 02:36:01 2027 GMT
Subject: CN=F8E80BACFFC2BE2BC5782CB78BCE656227B2C698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:29:13:f6:43:87:fb:20:08:81:b7:5a:4d:
cd:4a:51:fe:9f:8c:ef:f2:06:4d:a3:6a:6b:3d:ce:
ad:d8:6c:98:e5:c3:83:42:a6:1c:92:dc:00:51:57:
7b:d3:ec:e7:b9:97:92:22:0f:8a:75:07:0b:95:7e:
a4:67:4c:ba:55:05:f2:1a:2c:49:8c:74:af:84:1c:
fa:9c:38:01:0f:4a:6b:17:96:fa:80:1d:4d:22:43:
c3:5b:30:57:c0:0b:aa:70:a3:b2:69:79:8f:7c:1d:
d3:8d:04:df:fc:4f:af:f0:8d:f2:50:39:1d:19:23:
b1:43:e3:ab:05:34:66:a2:b8:60:76:b2:0d:16:8f:
52:6d:67:eb:19:db:ac:8b:b1:5b:9d:df:4d:27:b0:
c8:0c:5d:9f:3d:ab:d7:80:f5:0e:52:99:57:d4:8b:
de:ed:e6:b0:3a:0a:2c:3e:63:38:fb:6f:79:ce:00:
a1:29:1a:c5:9c:4b:76:ef:af:3e:0d:8c:8d:e6:ca:
b4:48:f7:c7:32:24:6e:c7:46:68:55:69:8f:dd:78:
c2:40:cf:b3:f7:42:88:d4:29:87:9a:4c:3f:f8:aa:
a5:a2:1c:9d:f7:b2:99:11:df:ce:d7:d9:85:87:fc:
19:43:c8:56:3d:c8:71:02:2c:c8:e0:f6:50:b0:ad:
77:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E8:0B:AC:FF:C2:BE:2B:C5:78:2C:B7:8B:CE:65:62:27:B2:C6:98
X509v3 Authority Key Identifier:
keyid:6F:11:CB:DA:AD:63:A7:BB:C9:86:EF:C7:0D:D5:C9:9B:E3:23:01:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6F11CBDAAD63A7BBC986EFC70DD5C99BE32301D5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096985075804798979/0/36302e3233322e3132382e302f31372d3232203d3e203234313433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
60.232.128.0/17
Signature Algorithm: sha256WithRSAEncryption
30:47:4c:08:9b:0d:69:0c:ce:d2:6a:fc:a4:4d:b1:fd:53:0e:
ca:aa:2d:90:65:15:d1:ce:9d:f3:67:a3:e2:73:8a:64:d2:86:
55:66:ab:00:12:80:87:55:2d:21:fd:d3:19:1e:78:87:f4:86:
b9:2a:5a:8c:bf:d3:5f:a8:de:07:ca:81:c3:68:45:14:5f:cf:
42:b8:5c:78:e2:1a:b7:02:91:c4:c6:27:39:77:7a:ae:a9:48:
ff:7a:27:7d:8f:fa:1f:38:1c:d5:6a:a5:75:17:59:c2:35:8f:
fd:fa:e6:98:29:e8:04:0a:74:9d:c4:ab:43:56:4e:0b:68:40:
b8:d2:d3:57:27:80:ec:35:53:28:14:a7:d7:5c:2f:58:10:d7:
30:fa:37:86:1b:84:8f:64:46:98:5a:a3:06:33:5b:b8:7a:fb:
aa:a3:9a:28:cf:2a:49:3a:bc:17:a7:d6:f8:bc:6c:76:9f:35:
0c:8e:75:04:ef:ef:d3:ca:b4:74:b9:c5:0d:38:77:48:44:d1:
99:a8:23:a2:0e:a9:bb:05:7d:92:4d:4e:24:a0:ef:06:46:a4:
9a:69:36:0d:fa:8d:a4:a1:ba:48:1f:80:78:73:42:59:b0:b9:
df:a8:c9:14:da:43:63:b5:0e:76:90:00:8a:83:fc:7f:4f:36:
ea:26:9b:15
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:07:05 2026 by rpki-client