
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135302e302f32342d3234203d3e203234313431.roa
File: 3231302e352e3135302e302f32342d3234203d3e203234313431.roa (raw, json)
Hash identifier: y6kqJ1YDTpOPqPKWU+Y/iiteI55ARuprTHApGMr7IZA=
Subject key identifier: 01:41:AD:4F:0F:1E:09:06:B1:69:45:A8:4B:DB:EC:93:0A:23:F1:22
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 1A006C0B9D95D9D8592D0DDF6D0E91FAAC826246
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135302e302f32342d3234203d3e203234313431.roa
Signing time: Fri 14 Aug 2026 09:20:09 +0000
ROA not before: Fri 14 Aug 2026 09:15:09 +0000
ROA not after: Fri 13 Aug 2027 09:20:09 +0000
asID: 24141
IP address blocks: 210.5.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 15:20:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:00:6c:0b:9d:95:d9:d8:59:2d:0d:df:6d:0e:91:fa:ac:82:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Aug 14 09:15:09 2026 GMT
Not After : Aug 13 09:20:09 2027 GMT
Subject: CN=0141AD4F0F1E0906B16945A84BDBEC930A23F122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8b:7d:c5:b5:88:c6:d3:ab:a6:fb:df:1e:37:
a2:e2:d4:23:85:eb:e1:7c:1c:ce:66:0a:62:a0:0c:
9a:d2:23:05:36:74:ea:dd:a5:4e:a6:a4:a9:b9:c7:
4f:54:89:74:58:e4:04:de:be:5b:4f:4a:3d:9d:11:
4f:9e:2a:c3:cd:2a:68:6c:eb:70:b1:c2:4e:f0:53:
1b:ab:71:64:0a:b6:6e:b6:e4:e7:e1:90:8a:c4:d0:
6b:b7:8d:ed:e9:f2:93:ec:5a:29:2b:de:ea:94:e4:
b6:52:12:a5:2a:3c:de:d4:25:f8:03:d0:99:dc:fd:
a4:59:8a:3d:df:4c:45:c9:de:aa:e4:d5:e7:81:e3:
c8:51:9f:cf:3c:37:f7:85:2d:8a:c1:31:4f:e5:67:
4c:78:87:d9:b9:1a:17:5a:86:ff:33:05:96:a1:a1:
2f:c3:a4:08:a5:d1:8b:1d:13:a8:69:26:8e:4f:2c:
48:52:10:42:48:5f:fc:3b:b5:fd:dd:4a:85:30:69:
47:3d:18:f9:23:40:95:53:d7:2a:a8:93:23:e1:2e:
bf:c9:e3:22:40:f1:ca:ef:2f:70:ef:21:46:ed:71:
a5:d0:72:cb:36:ee:29:95:aa:e6:30:83:1b:a0:41:
4e:fe:c1:48:f3:12:1c:e6:66:a4:34:fb:4d:6a:e3:
a4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:41:AD:4F:0F:1E:09:06:B1:69:45:A8:4B:DB:EC:93:0A:23:F1:22
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135302e302f32342d3234203d3e203234313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.5.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:16:09:a6:84:bd:66:5a:15:a5:e0:07:ae:7f:f7:de:af:0d:
97:c8:ae:22:56:14:8b:3b:e2:37:ee:0d:47:65:6d:08:ca:07:
dc:cb:10:d8:9c:55:ad:3c:00:e8:ad:87:ef:1c:bb:3c:55:5f:
6c:c3:11:15:88:fc:a5:76:bf:77:68:a5:38:e4:6e:ca:d1:4c:
e9:af:ce:17:57:c0:66:81:71:fc:45:21:33:43:da:87:0f:c4:
bc:89:65:d5:d0:65:34:36:9b:55:2a:bf:19:fb:e1:ab:ef:71:
ba:26:d7:35:29:d4:f3:ae:15:d5:fc:4e:e3:01:96:2c:e8:65:
fb:f5:f9:ab:57:11:ae:54:c2:39:bc:ea:de:68:56:23:44:45:
b6:a9:8e:62:a7:39:80:6b:be:ac:eb:0c:b8:e2:61:02:45:b2:
01:86:81:56:84:10:24:f9:f7:95:c6:84:34:97:36:46:fb:71:
35:b1:89:27:6e:e5:94:d3:1c:33:aa:90:b1:13:09:da:58:bd:
f1:6e:bb:52:36:2c:32:22:23:9c:8d:c3:41:1a:9d:15:ca:ea:
d7:99:24:b6:f9:b0:d6:e9:02:a3:2d:25:04:26:81:1f:6b:fb:
2b:90:f0:b9:e0:ab:fa:0a:5f:b1:6c:42:3a:cc:3a:fb:2c:76:
91:a6:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 07:12:18 2026 by rpki-client