
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3135302e3234322e35322e302f32322d3234203d3e2037363431.roa
File: 3135302e3234322e35322e302f32322d3234203d3e2037363431.roa (raw, json)
Hash identifier: ekBBdVVkv1lC9q3Q/mlU26UCQ36ldfJsXhBU/Su+9F4=
Subject key identifier: 06:D6:D6:BC:63:8A:D1:75:EB:C4:1A:F5:19:38:C2:15:26:59:D0:83
Certificate issuer: /CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Certificate serial: 66CBA793C2286FFB2A9619F220DA4EB1B3436661
Authority key identifier: CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3135302e3234322e35322e302f32322d3234203d3e2037363431.roa
Signing time: Wed 27 May 2026 07:34:56 +0000
ROA not before: Wed 27 May 2026 07:29:56 +0000
ROA not after: Wed 26 May 2027 07:34:56 +0000
asID: 7641
IP address blocks: 150.242.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 14:42:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:cb:a7:93:c2:28:6f:fb:2a:96:19:f2:20:da:4e:b1:b3:43:66:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7
Validity
Not Before: May 27 07:29:56 2026 GMT
Not After : May 26 07:34:56 2027 GMT
Subject: CN=06D6D6BC638AD175EBC41AF51938C2152659D083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:19:58:4d:15:14:44:94:0e:5e:cd:8b:1d:
2d:bd:57:7b:7a:63:40:0d:7d:86:64:e3:66:f0:a8:
55:23:54:ad:f2:56:ae:c5:3f:fd:e4:3f:de:0d:58:
56:de:8e:a5:c1:8c:46:1a:31:29:a7:9e:9b:74:64:
c9:5c:50:3a:83:7f:9c:3c:f3:63:b5:be:63:59:7d:
76:c0:f4:b0:7f:a3:ea:4d:13:10:cd:9c:29:aa:6c:
91:d8:92:64:81:5c:1d:eb:b4:32:04:5a:f3:67:dc:
7f:fb:2d:0b:d2:ae:dd:86:89:46:c7:89:17:dd:34:
af:73:0f:d7:04:71:b7:4b:67:95:f8:27:18:9b:e3:
a3:4a:5d:8a:41:c9:72:04:b6:af:5d:c2:e1:87:3b:
9c:56:93:b7:89:7b:d4:02:12:79:c3:f4:de:c1:ac:
0b:0a:f1:54:73:0f:75:92:ac:4e:22:a2:31:bb:ef:
f8:05:8f:1d:46:5c:ba:5d:11:ee:59:97:02:76:27:
3b:6c:a4:b4:59:60:ec:d4:ea:a9:b6:1d:d3:51:e5:
79:2a:e7:1f:1a:9c:78:8f:65:38:54:5e:63:ca:ff:
e3:63:e3:d5:5e:36:a9:ca:55:bf:82:de:c0:cf:3f:
8a:20:d8:b6:52:ee:a2:8c:e3:7e:4e:1a:51:45:3f:
17:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D6:D6:BC:63:8A:D1:75:EB:C4:1A:F5:19:38:C2:15:26:59:D0:83
X509v3 Authority Key Identifier:
keyid:CD:D5:5F:3D:78:FC:75:75:3F:F9:C6:C8:26:A7:D8:1A:A5:EB:EE:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CDD55F3D78FC75753FF9C6C826A7D81AA5EBEEB7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065574560142786561/0/3135302e3234322e35322e302f32322d3234203d3e2037363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.52.0/22
Signature Algorithm: sha256WithRSAEncryption
27:82:d1:c8:3f:50:4a:0f:4b:94:1c:a6:5d:99:63:14:4b:e4:
20:13:7c:78:46:26:19:4b:ca:21:48:3d:f8:09:b1:39:e5:a5:
3f:ae:aa:50:2a:c3:d1:4c:68:f3:70:7e:e3:9d:58:a2:7e:ba:
7c:ee:8c:08:98:61:08:23:7b:f4:39:1e:c0:cb:7c:30:4f:2c:
0a:91:63:3c:0f:6a:f9:19:7c:bd:9e:ed:18:37:ec:c3:62:a1:
b9:ce:25:9b:5f:2a:a1:a0:75:22:d2:ce:1b:de:e8:5d:85:9d:
6e:b0:53:3a:b6:5c:51:da:7c:73:e9:cf:d1:98:96:a4:20:12:
51:3d:39:b4:a0:21:fd:9d:c7:29:26:5c:7d:18:cc:cb:1e:51:
2e:7a:29:27:72:4f:1e:a7:a5:00:a8:f5:c9:b8:97:b0:1c:c7:
20:57:12:ee:3d:6d:e5:67:73:5b:2b:e5:6b:10:a6:12:88:8b:
62:9c:b7:eb:d8:79:00:a9:08:c3:dc:5f:c2:97:ae:6a:90:70:
d3:24:2f:1d:05:37:48:ae:dd:75:1d:7c:bc:bc:78:bc:df:81:
60:a6:3b:d5:b0:80:2c:5f:95:d4:24:9e:12:e8:34:01:18:cb:
5b:f7:f2:2a:1d:aa:96:70:18:63:fa:f1:bb:35:e4:4c:97:75:
9c:84:9f:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:02:21 2026 by rpki-client