
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135362e302f32342d3234203d3e203338333435.roa
File: 3135302e3234322e3135362e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: XFB8+28HE2luxQB59A5C8GrDlJJMi23P97UbpbeEQMU=
Subject key identifier: 6B:F4:6D:CF:4D:B4:89:0F:6A:92:BE:35:4B:4D:96:FE:1F:ED:54:4E
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 50085B01A829A8FC90FC212A8BA27CA05E28990A
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135362e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:05:15 +0000
ROA not before: Fri 10 Apr 2026 08:00:15 +0000
ROA not after: Fri 09 Apr 2027 08:05:15 +0000
asID: 38345
IP address blocks: 150.242.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:08:5b:01:a8:29:a8:fc:90:fc:21:2a:8b:a2:7c:a0:5e:28:99:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:00:15 2026 GMT
Not After : Apr 9 08:05:15 2027 GMT
Subject: CN=6BF46DCF4DB4890F6A92BE354B4D96FE1FED544E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:58:c3:f5:ed:96:90:02:de:3f:65:27:88:60:
47:d7:f3:d6:8a:7e:21:85:22:73:5f:d6:ef:f1:d2:
c7:be:85:7a:24:2b:a7:fa:6f:c9:85:f2:61:38:70:
9f:7e:6f:f9:be:1f:05:02:1e:2b:32:a9:27:04:48:
17:88:c0:8a:17:fd:e6:90:a0:f3:9c:25:68:d9:99:
89:8e:b2:cd:d8:0a:08:31:8c:27:e4:79:8c:13:7f:
c1:73:29:da:9c:a2:ca:c5:ee:75:56:e9:f6:1b:e9:
de:ef:ba:72:36:47:22:bc:ed:8c:c6:cd:10:b8:e8:
e5:f3:11:ba:4c:45:37:cd:4c:75:e4:bb:44:3e:49:
5b:a3:a5:98:72:bf:ec:95:c6:a3:6c:b2:11:d2:98:
65:30:76:b7:ca:8c:d3:f7:97:21:17:29:31:8e:04:
ad:51:e9:9b:0e:79:51:f5:73:4d:1b:06:b5:e0:5d:
7a:c5:cf:00:0f:d4:99:f4:c9:eb:7e:b2:35:b3:6f:
c4:a6:fc:ab:7e:d2:f1:dd:6d:95:1b:4a:6c:98:cf:
e0:c3:f6:88:7a:ae:03:a1:7b:d7:25:cc:52:6e:94:
70:22:96:d8:5c:dc:6f:8d:9f:e5:18:f6:29:c7:0a:
55:97:9b:4e:2a:ef:f0:72:9f:88:0a:2f:5f:fa:0c:
5e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F4:6D:CF:4D:B4:89:0F:6A:92:BE:35:4B:4D:96:FE:1F:ED:54:4E
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135362e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.156.0/24
Signature Algorithm: sha256WithRSAEncryption
23:69:04:39:f0:07:19:20:45:6d:5f:4c:01:f5:8f:9e:26:f8:
78:60:2f:ef:6e:32:60:86:dd:e5:a2:b8:b0:3b:15:27:c2:58:
17:17:1f:cc:9f:91:bc:6e:84:d9:0c:22:51:12:97:34:28:db:
d9:50:65:43:da:91:f0:9a:92:8b:16:a7:79:5e:08:13:6a:1f:
e8:ca:4d:ad:9f:9c:b2:ba:fb:2a:03:ce:1a:a3:84:2e:3f:5b:
a5:c3:fa:b3:9a:2d:c3:f6:a7:91:6a:79:6c:c3:e3:fd:fe:19:
ba:45:7d:cf:0b:0c:5e:6e:ca:b6:fb:fd:b7:22:fd:62:df:d5:
42:cc:ab:ce:6c:f7:e9:19:3d:5a:bc:67:ef:57:f8:08:10:54:
d3:7b:32:9b:cc:62:5b:d4:ee:a2:ba:95:bd:65:06:36:a0:3a:
70:31:a8:3a:11:1b:d8:3a:24:6d:f0:3a:84:80:8d:74:54:3f:
f9:da:64:ab:ec:c3:75:ef:b7:08:74:28:94:3f:fd:dd:8f:97:
df:9b:a2:0b:93:ee:aa:ec:e5:e9:46:be:c7:fb:da:b3:29:10:
34:98:c0:e3:27:69:a9:36:74:bb:d9:02:7a:d4:23:c0:46:34:
3e:c8:a2:62:a9:39:75:af:d3:2f:b1:c5:4d:e2:c7:a1:b0:14:
7b:cf:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:35 2026 by rpki-client