
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135312e302f32342d3234203d3e203234313431.roa
File: 3231302e352e3135312e302f32342d3234203d3e203234313431.roa (raw, json)
Hash identifier: LPQdu7Ox+2r9XDPVITTyP/SvVc6m2m22xqS0ijhDA+Y=
Subject key identifier: 5C:C0:55:CA:96:7F:74:07:8F:CA:AD:74:06:CB:74:4F:B1:B4:AF:CD
Certificate issuer: /CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Certificate serial: 6A10B2948C8F316A282212A5BEAACBDF53C7BE2F
Authority key identifier: BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135312e302f32342d3234203d3e203234313431.roa
Signing time: Mon 13 Apr 2026 02:52:24 +0000
ROA not before: Mon 13 Apr 2026 02:47:24 +0000
ROA not after: Mon 12 Apr 2027 02:52:24 +0000
asID: 24141
IP address blocks: 210.5.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:10:b2:94:8c:8f:31:6a:28:22:12:a5:be:aa:cb:df:53:c7:be:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F
Validity
Not Before: Apr 13 02:47:24 2026 GMT
Not After : Apr 12 02:52:24 2027 GMT
Subject: CN=5CC055CA967F74078FCAAD7406CB744FB1B4AFCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bb:f6:78:37:8e:ba:34:3c:b1:64:43:0c:c5:
43:d4:69:ee:1d:2d:13:73:8e:07:60:db:30:f5:42:
a3:9b:f2:78:50:99:1d:11:f4:69:1d:6f:46:e1:3d:
6c:e0:6d:e6:0b:08:9b:97:2f:56:76:d4:f1:61:2b:
73:9e:ff:49:c7:e0:cf:f3:bd:e8:cb:39:5a:e5:c9:
c2:a2:a7:1a:7c:c3:db:fe:b5:3b:7b:45:bc:9e:e3:
98:72:7a:13:9b:fb:6c:9e:ad:a4:d1:64:3d:31:02:
8d:e2:be:11:1e:52:f4:0b:f0:5f:07:08:0f:2f:32:
88:cf:ad:a4:a6:fb:09:8d:36:41:44:0a:96:84:c1:
04:90:c0:7e:f1:e2:70:c4:ef:3b:c1:c3:33:00:7f:
49:a8:73:34:30:33:6c:29:8b:b9:8d:fb:e7:6d:85:
69:c5:c8:a6:4b:f5:b5:83:49:0c:5d:bb:53:37:97:
c4:c7:85:0c:e1:54:30:d9:a6:77:6c:04:b3:72:c3:
ed:8b:7f:1a:29:42:db:07:91:ba:fb:cc:49:06:4f:
78:08:b1:0a:ba:16:1d:47:db:10:b0:bc:6e:35:87:
89:ad:43:d7:50:c9:a9:f3:13:11:7c:86:3a:89:1b:
94:b4:bb:2f:82:46:0e:92:27:39:17:de:87:b0:9a:
8e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:55:CA:96:7F:74:07:8F:CA:AD:74:06:CB:74:4F:B1:B4:AF:CD
X509v3 Authority Key Identifier:
keyid:BA:46:61:FF:AF:7B:AA:7A:94:8C:DA:87:F6:61:C5:BB:F7:54:BF:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/BA4661FFAF7BAA7A948CDA87F661C5BBF754BF3F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095887880083013635/0/3231302e352e3135312e302f32342d3234203d3e203234313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
210.5.151.0/24
Signature Algorithm: sha256WithRSAEncryption
50:5b:09:16:14:53:6f:e1:98:8d:f8:f1:81:9e:a3:dd:85:0a:
0f:5d:1c:a0:32:78:33:c7:39:b0:00:b3:a7:93:0d:f6:56:ed:
aa:3c:50:66:f5:13:0b:11:51:c7:66:25:01:3c:01:21:95:86:
4b:84:fe:20:03:0f:e6:db:8d:19:5b:76:b9:26:37:e8:b9:46:
ce:02:ed:f4:12:29:0f:50:1e:2e:ba:58:95:ab:13:0f:a5:d0:
7d:59:e9:07:64:c9:79:7e:01:75:18:84:64:38:9d:ee:5c:4a:
43:17:5a:c3:8f:5b:10:88:05:cd:e7:c4:59:83:0d:07:1e:9b:
33:3b:d0:b3:6a:a8:6b:78:54:d7:cd:e9:b6:89:50:32:96:30:
35:0b:fc:d1:bb:07:84:58:75:55:0f:82:19:27:2b:87:f8:82:
93:75:0c:05:f8:7f:11:aa:8d:b4:bd:ff:80:07:87:21:7e:a7:
e6:b7:51:32:dd:8c:5a:c5:a7:87:73:af:f1:39:bb:c7:7f:59:
26:2e:09:0a:0c:1a:1a:74:de:ea:98:4a:68:8e:38:02:f2:7f:
5f:de:4e:fc:b4:a4:18:da:d8:87:72:07:01:be:ad:23:4b:5e:
4e:91:6c:71:5c:26:5a:1c:6f:94:4a:5e:51:18:87:ed:b1:49:
3f:e4:99:cd
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUahCylIyPMWooIhKlvqrL31PHvi8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJG
NzU0QkYzRjAeFw0yNjA0MTMwMjQ3MjRaFw0yNzA0MTIwMjUyMjRaMDMxMTAvBgNV
BAMTKDVDQzA1NUNBOTY3Rjc0MDc4RkNBQUQ3NDA2Q0I3NDRGQjFCNEFGQ0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTu/Z4N466NDyxZEMMxUPUae4d
LRNzjgdg2zD1QqOb8nhQmR0R9Gkdb0bhPWzgbeYLCJuXL1Z21PFhK3Oe/0nH4M/z
vejLOVrlycKipxp8w9v+tTt7Rbye45hyehOb+2yeraTRZD0xAo3ivhEeUvQL8F8H
CA8vMojPraSm+wmNNkFECpaEwQSQwH7x4nDE7zvBwzMAf0moczQwM2wpi7mN++dt
hWnFyKZL9bWDSQxdu1M3l8THhQzhVDDZpndsBLNyw+2LfxopQtsHkbr7zEkGT3gI
sQq6Fh1H2xCwvG41h4mtQ9dQyanzExF8hjqJG5S0uy+CRg6SJzkX3oewmo6lAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUXMBVypZ/dAePyq10Bst0T7G0r80wHwYDVR0j
BBgwFoAUukZh/697qnqUjNqH9mHFu/dUvz8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NTg4Nzg4MDA4MzAxMzYzNS8wL0JBNDY2MUZGQUY3QkFBN0E5NDhDREE4N0Y2NjFD
NUJCRjc1NEJGM0YuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQkE0NjYxRkZBRjdCQUE3QTk0OENEQTg3RjY2MUM1QkJGNzU0QkYzRi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk1ODg3ODgwMDgzMDEzNjM1LzAvMzIzMTMwMmUzNTJl
MzEzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzQzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANIFlzANBgkqhkiG9w0BAQsFAAOCAQEAUFsJFhRTb+GYjfjxgZ6j3YUKD10c
oDJ4M8c5sACzp5MN9lbtqjxQZvUTCxFRx2YlATwBIZWGS4T+IAMP5tuNGVt2uSY3
6LlGzgLt9BIpD1AeLrpYlasTD6XQfVnpB2TJeX4BdRiEZDid7lxKQxdaw49bEIgF
zefEWYMNBx6bMzvQs2qoa3hU183ptolQMpYwNQv80bsHhFh1VQ+CGScrh/iCk3UM
Bfh/EaqNtL3/gAeHIX6n5rdRMt2MWsWnh3Ov8Tm7x39ZJi4JCgwaGnTe6phKaI44
AvJ/X95O/LSkGNrYh3IHAb6tI0teTpFscVwmWhxvlEpeURiH7bFJP+SZzQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:09 2026 by rpki-client