
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa
File: 3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa (raw, json)
Hash identifier: bNLxHCF56o5c9/9VWES3yadTSuspPp7UN72gjNrCZbc=
Subject key identifier: E1:B5:5D:6E:49:37:02:6D:FC:B1:F0:35:73:5C:60:C9:3A:69:42:FD
Certificate issuer: /CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Certificate serial: 68E6E5601F90E0790AAEDB340B8D60BD4A485158
Authority key identifier: A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa
Signing time: Fri 10 Apr 2026 08:05:15 +0000
ROA not before: Fri 10 Apr 2026 08:00:15 +0000
ROA not after: Fri 09 Apr 2027 08:05:15 +0000
asID: 24149
IP address blocks: 150.242.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 12:09:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e6:e5:60:1f:90:e0:79:0a:ae:db:34:0b:8d:60:bd:4a:48:51:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A48290B7B4443542D0460FD49BDF1B444360AE86
Validity
Not Before: Apr 10 08:00:15 2026 GMT
Not After : Apr 9 08:05:15 2027 GMT
Subject: CN=E1B55D6E4937026DFCB1F035735C60C93A6942FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:93:a8:82:80:eb:20:44:6d:16:40:77:30:
ba:31:ec:23:68:3d:5e:3a:cf:a6:67:08:f1:2e:1b:
48:6f:3d:d6:c8:ab:38:ea:91:41:ae:ab:93:88:1a:
a5:b6:8d:27:a4:67:3f:2d:26:3e:f0:cc:2e:4a:ae:
2d:40:65:47:69:e0:a4:66:2b:2a:66:d5:5c:33:e4:
d5:78:bc:32:e6:e5:c0:ac:ec:3d:ab:f1:58:42:0e:
be:93:97:94:3a:98:3a:a1:cc:09:e4:8c:99:25:0d:
eb:ea:14:2b:f1:78:5a:f4:2a:d0:4c:16:7e:06:66:
50:a3:92:9d:bd:0e:5f:e8:ea:53:fd:2e:a9:d0:ef:
e5:e1:48:5c:4a:2e:04:d4:e3:1b:66:55:34:6f:c5:
da:88:df:5d:90:1e:70:64:d2:aa:dd:a1:bb:81:5d:
d3:ef:9d:33:f6:95:d9:96:38:66:cd:5e:a3:e2:a3:
81:a3:77:90:54:8f:74:e0:1b:07:c8:e2:ae:97:c3:
2a:3e:7b:41:ff:d6:3a:a6:ed:26:85:21:79:d5:d8:
3e:a9:82:b5:7e:84:05:51:2e:86:1b:cb:9c:a9:c0:
2d:39:04:6d:63:4b:98:3d:7a:13:b9:1e:7c:6b:4d:
ad:57:71:14:16:11:5f:99:ff:95:be:ab:ba:b3:89:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B5:5D:6E:49:37:02:6D:FC:B1:F0:35:73:5C:60:C9:3A:69:42:FD
X509v3 Authority Key Identifier:
keyid:A4:82:90:B7:B4:44:35:42:D0:46:0F:D4:9B:DF:1B:44:43:60:AE:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/A48290B7B4443542D0460FD49BDF1B444360AE86.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A48290B7B4443542D0460FD49BDF1B444360AE86.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094884727254482947/0/3135302e3234322e3135392e302f32342d3234203d3e203234313439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.159.0/24
Signature Algorithm: sha256WithRSAEncryption
13:ab:7f:af:d5:ad:19:59:f5:d2:a7:ee:a1:a2:a7:df:9c:ff:
9b:a3:5e:68:d1:c1:1d:5e:c8:5e:8e:dd:b8:d0:db:3a:b5:5e:
87:21:44:d7:07:a9:1c:23:9f:77:38:9f:48:0f:c7:93:30:8a:
e9:d0:6c:d3:19:c1:fe:50:79:bc:5d:c7:ce:7a:8a:be:04:a0:
64:7f:6e:00:ac:f5:bc:d5:d5:60:a8:98:55:19:4f:c6:96:5b:
3c:cf:b4:86:29:a1:b0:e0:f2:31:a7:00:1c:1c:f7:2f:49:19:
d2:9d:48:8d:08:c5:79:3a:48:36:e4:a9:05:7c:03:1b:e3:10:
e6:b6:bb:71:83:a8:3d:a8:1c:91:0f:3b:27:6f:b7:da:66:03:
f6:5b:2e:0c:30:14:96:ea:49:93:be:95:6a:0e:14:b8:21:73:
10:3b:c7:f1:b3:bd:1d:46:f4:a9:64:dc:18:b3:8f:31:f9:bf:
fd:8d:f2:e7:90:a4:5f:48:2b:c6:9d:ff:63:73:a6:95:18:47:
ac:09:30:ad:d7:12:1c:7f:e7:5d:14:d7:90:86:d5:1c:05:c4:
92:b2:a0:33:6b:03:89:18:ef:80:d6:60:9c:19:d9:3c:b8:86:
99:fa:b8:c2:d0:fc:96:5d:90:d9:55:62:bf:80:a3:d5:ec:0e:
93:7e:ac:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:32 2026 by rpki-client