
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3135302e3234322e3132302e302f32322d3234203d3e203338333635.roa
File: 3135302e3234322e3132302e302f32322d3234203d3e203338333635.roa (raw, json)
Hash identifier: IKQ0lyg0saeSIVd3Vl1bkJMPTw+sPGYUKJD6tFo7Rsg=
Subject key identifier: 3C:B4:ED:71:3B:64:CB:3F:27:F8:4C:F6:CB:2D:F6:D8:F4:C7:B2:9C
Certificate issuer: /CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Certificate serial: 1EE7BB578007BD68F9E8BA3490558AFCF0DBEB3E
Authority key identifier: A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3135302e3234322e3132302e302f32322d3234203d3e203338333635.roa
Signing time: Thu 09 Apr 2026 13:40:03 +0000
ROA not before: Thu 09 Apr 2026 13:35:03 +0000
ROA not after: Thu 08 Apr 2027 13:40:03 +0000
asID: 38365
IP address blocks: 150.242.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:e7:bb:57:80:07:bd:68:f9:e8:ba:34:90:55:8a:fc:f0:db:eb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A19672206A9DA7DF429536C9BFFADA94A8EBA70E
Validity
Not Before: Apr 9 13:35:03 2026 GMT
Not After : Apr 8 13:40:03 2027 GMT
Subject: CN=3CB4ED713B64CB3F27F84CF6CB2DF6D8F4C7B29C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c6:29:b0:a4:3a:64:ef:d2:5e:fe:42:08:ac:
27:3a:8e:be:46:1b:f7:ba:72:fb:f6:d0:81:d2:fc:
fb:df:21:77:6f:69:0a:d8:ad:c7:10:4a:d8:fe:34:
2d:72:09:50:80:44:4f:b7:32:5f:69:a4:ec:ae:ec:
6d:88:8b:aa:ff:2b:3c:72:0d:24:90:3d:62:6a:2f:
f6:24:20:70:48:11:42:bd:af:ce:e4:8c:58:7a:8f:
ca:6f:aa:14:62:02:27:f8:e5:14:b2:50:99:cb:1d:
ee:9b:09:93:b9:72:30:95:12:fb:69:01:3a:8c:ea:
77:ec:81:33:30:02:84:3e:b1:ba:50:71:ff:7b:d6:
f1:15:5e:9a:1f:87:fb:f0:32:a1:0a:39:98:b3:53:
07:ae:2a:5a:de:eb:dc:5f:f8:1a:ce:38:f9:dc:8e:
37:0c:f4:d2:4a:8d:f7:cc:4b:14:b1:9b:dc:e5:8c:
2d:c3:2c:8a:fb:e0:44:cb:7c:d5:04:ea:93:53:73:
94:c8:8a:87:bc:2f:c9:06:2e:d9:41:5d:fc:aa:19:
0d:12:c3:37:e9:3e:a5:d3:82:e4:a2:fe:99:99:a2:
7e:11:53:ce:ea:1a:20:fb:b6:d7:9c:15:1a:88:c8:
a6:7c:4d:ab:3f:fa:e5:0b:04:15:5f:35:33:0e:2e:
23:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B4:ED:71:3B:64:CB:3F:27:F8:4C:F6:CB:2D:F6:D8:F4:C7:B2:9C
X509v3 Authority Key Identifier:
keyid:A1:96:72:20:6A:9D:A7:DF:42:95:36:C9:BF:FA:DA:94:A8:EB:A7:0E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A19672206A9DA7DF429536C9BFFADA94A8EBA70E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576723372113922/0/3135302e3234322e3132302e302f32322d3234203d3e203338333635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.120.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:b8:55:d9:24:ef:59:90:4f:a0:1e:63:04:fa:9a:7c:82:a4:
e0:2d:a1:38:79:95:be:11:a2:87:d6:d8:b9:cf:4e:e9:c9:60:
e0:70:03:cf:04:48:13:5e:ec:4b:48:21:f9:f1:e9:32:ef:e5:
8c:d1:66:df:25:d6:19:6c:fb:f8:b6:3c:ca:6f:1a:46:48:b5:
37:21:aa:29:b4:8c:5f:cc:e8:74:30:68:f4:a2:3b:d9:e8:37:
0b:62:df:83:aa:d8:93:e9:09:13:75:bd:e3:a1:da:06:09:e5:
4a:b7:d9:c5:b4:b9:3d:b5:3b:a9:f6:c4:b3:43:aa:82:c9:b7:
fb:a9:ad:a8:77:6b:a5:e6:88:4d:93:b8:a1:aa:2c:ee:ae:de:
54:64:48:ea:fa:26:3e:58:ef:6d:c2:f9:54:db:8b:5b:81:9a:
24:af:8e:e4:e4:77:c2:59:34:3c:2b:52:1a:26:98:37:ae:29:
0f:00:06:de:ed:7f:02:79:c1:86:77:a6:c8:95:5d:4f:e4:be:
5e:63:89:a7:eb:d3:97:d7:08:4a:4b:18:bd:98:3d:6c:38:33:
84:43:2b:8a:44:07:10:07:fc:cf:49:f9:71:da:90:d2:a6:78:
b1:fc:c1:67:42:41:f9:81:5a:a5:50:0a:ec:41:17:8b:04:43:
bc:93:7f:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:18 2026 by rpki-client