
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135372e302f32342d3234203d3e203338333435.roa
File: 3135302e3234322e3135372e302f32342d3234203d3e203338333435.roa (raw, json)
Hash identifier: m2WgoCDyBGT1F0v4UuLLLMEz97/r3v1EknRvN4qb8XE=
Subject key identifier: C6:9C:53:44:0A:7C:7B:16:AF:E3:FB:59:82:B9:FF:F6:DB:DE:1D:BB
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 4796693AEC3C56633F8EBDA9478FA9A5E781A0E8
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135372e302f32342d3234203d3e203338333435.roa
Signing time: Fri 10 Apr 2026 08:05:15 +0000
ROA not before: Fri 10 Apr 2026 08:00:15 +0000
ROA not after: Fri 09 Apr 2027 08:05:15 +0000
asID: 38345
IP address blocks: 150.242.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:96:69:3a:ec:3c:56:63:3f:8e:bd:a9:47:8f:a9:a5:e7:81:a0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:00:15 2026 GMT
Not After : Apr 9 08:05:15 2027 GMT
Subject: CN=C69C53440A7C7B16AFE3FB5982B9FFF6DBDE1DBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:1b:23:36:cf:a3:bd:f7:11:2c:35:a9:46:
4a:86:b5:9c:a7:4c:59:05:1d:34:42:7f:eb:3f:37:
08:1c:19:e5:29:f8:27:72:8f:1c:30:88:58:9a:1f:
3d:38:a7:26:89:ae:92:68:2b:4a:4d:06:63:da:dc:
6d:d7:3d:67:b6:75:5e:a0:3e:10:e3:46:1f:23:21:
e6:66:0b:99:7d:16:7c:81:0f:c5:92:f2:84:f6:f8:
24:d8:e7:ab:14:a6:9d:cf:60:b6:4b:d3:0b:23:23:
92:0b:b6:df:68:76:36:f8:03:72:2f:c3:93:33:97:
67:2c:77:94:55:1d:b5:f1:52:79:08:3b:e8:f0:c4:
3c:23:1c:84:b5:cf:f8:ed:63:79:84:e0:74:ae:4a:
b7:86:ca:a8:a1:64:47:eb:1e:b5:6a:7b:30:a7:a3:
a3:b4:03:a5:4e:e3:ae:02:ec:5e:eb:e7:8a:90:75:
35:49:96:6a:fe:34:5a:ea:5c:8a:af:0c:91:a6:85:
13:bf:61:b6:d8:88:a6:45:26:5e:ca:2e:c0:a5:0a:
8e:cd:3d:7e:39:61:3e:f7:2a:51:6a:a0:51:31:46:
e4:3b:86:44:82:52:de:71:c7:8e:dc:95:c3:5a:b4:
56:5d:28:a6:93:da:4e:23:cd:1d:2e:c3:31:76:e6:
3c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:9C:53:44:0A:7C:7B:16:AF:E3:FB:59:82:B9:FF:F6:DB:DE:1D:BB
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135372e302f32342d3234203d3e203338333435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.157.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:27:3a:34:a0:62:28:b5:53:69:25:24:dd:65:f3:39:17:1f:
f4:2c:17:a4:d6:21:38:7c:7f:8b:cb:d3:7e:a3:88:4f:03:9c:
aa:57:05:da:b2:20:f6:80:e2:71:84:75:d9:88:28:3f:53:de:
3b:4d:42:56:42:6a:9e:3e:e7:ca:67:16:e8:87:f9:41:d0:92:
d0:37:04:3f:06:d0:2a:ec:cb:9a:fe:7a:b6:a0:2c:9b:47:ec:
bf:3b:39:5f:c6:4c:0f:93:26:4c:ce:b4:e9:a4:77:2c:a8:77:
ca:bb:66:6b:a5:d0:81:3c:f6:b3:2d:68:04:e7:53:2b:ce:b2:
08:32:11:2d:8b:78:a7:52:a6:3d:9f:13:e5:da:fd:cb:bd:1c:
46:84:1f:24:0d:d6:76:71:1e:38:a2:3e:9b:3b:8b:44:0a:98:
a5:8f:eb:55:fe:8c:f6:52:69:8e:2f:4d:25:62:a6:f1:2e:69:
4d:be:fe:b6:7d:cb:c0:ba:af:37:fe:30:50:94:bd:71:55:16:
37:e0:3c:80:6d:8d:b0:83:ff:bb:3f:c3:af:df:8a:0c:e8:b0:
de:4f:ab:67:01:8f:13:ff:80:85:1b:a8:8f:8b:ae:c8:1a:ca:
8a:9d:99:05:8d:95:fa:ef:9d:2b:4e:74:ce:e5:44:a8:59:fb:
2f:a0:23:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:18 2026 by rpki-client