
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e302e302f31382d3138203d3e203233373234.roa
File: 3231312e3135302e302e302f31382d3138203d3e203233373234.roa (raw, json)
Hash identifier: O+AFP3LztmQknlXORk2THYCllaXkupnfWf00JCkvURk=
Subject key identifier: ED:70:46:1D:6B:BD:98:72:82:23:5E:47:86:21:C4:08:C6:8C:56:6F
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 105B099C66BEE3754297DDF738E37F5D1836B2ED
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e302e302f31382d3138203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:31:07 +0000
ROA not before: Mon 13 Apr 2026 06:26:07 +0000
ROA not after: Mon 12 Apr 2027 06:31:07 +0000
asID: 23724
IP address blocks: 211.150.0.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:5b:09:9c:66:be:e3:75:42:97:dd:f7:38:e3:7f:5d:18:36:b2:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 06:26:07 2026 GMT
Not After : Apr 12 06:31:07 2027 GMT
Subject: CN=ED70461D6BBD987282235E478621C408C68C566F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:52:e9:9e:ca:0b:f0:62:f1:0e:26:53:4c:
63:ed:66:6d:64:74:95:31:58:2b:f8:f3:3f:3c:ca:
b1:98:c3:46:9d:6d:9a:58:c4:43:c4:a9:d6:83:62:
4c:0c:eb:d4:4b:e0:44:a6:4b:71:7a:cf:46:1c:4e:
49:e2:b3:97:92:ad:b1:9f:f4:c4:76:02:3a:9e:27:
fd:eb:e0:31:78:da:cb:21:42:0a:f6:5d:50:85:cb:
cc:ae:11:44:02:a7:90:64:a7:23:5f:97:34:57:9f:
90:ad:21:c5:23:50:1b:b3:ac:ce:2c:d0:98:e5:8f:
4a:ec:0a:4b:41:b8:cb:75:fe:a3:7a:20:b1:f2:a7:
c2:7c:f5:f8:03:2a:59:22:59:97:15:eb:b8:70:e3:
1f:5a:e1:3d:19:79:59:54:89:30:b8:f0:ff:3c:1f:
57:b7:f2:46:2f:87:aa:02:5f:8d:7f:24:43:cb:be:
99:19:34:6e:b9:51:a5:ea:c1:ea:52:a6:bb:9b:cb:
d3:93:6f:87:d9:94:c0:18:d6:bc:7c:4d:68:55:52:
24:34:3a:78:35:04:e8:44:6e:da:c5:92:d3:5b:e6:
4f:9c:9d:b4:cb:83:1b:e6:e8:3e:4c:e5:e9:f7:9e:
55:04:1d:85:ab:d7:db:40:27:cb:ba:2a:3a:3d:b1:
d1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:70:46:1D:6B:BD:98:72:82:23:5E:47:86:21:C4:08:C6:8C:56:6F
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e302e302f31382d3138203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.150.0.0/18
Signature Algorithm: sha256WithRSAEncryption
cd:9f:10:46:ed:62:93:bb:f8:67:ef:96:37:87:52:f5:f6:45:
19:28:4e:6a:f7:5e:1d:82:1a:f2:3f:b4:b0:5d:39:11:a2:73:
d8:e0:93:be:9f:83:bb:58:45:95:2a:f5:64:f2:aa:fb:03:53:
14:7b:80:31:8d:c6:5e:d3:b3:f4:22:ad:a3:9f:52:6e:aa:4b:
d4:06:b9:ab:c8:19:ea:64:93:22:1d:4b:1f:9f:47:71:a3:2b:
a2:07:70:46:fe:bf:88:42:be:a4:96:4b:8a:1c:61:eb:36:66:
2f:b1:78:83:4f:12:84:36:ad:1e:7a:37:3a:98:c7:70:12:ac:
7f:19:11:2a:2e:48:08:7c:4d:3c:37:de:91:57:a0:fd:db:5b:
46:bb:b8:eb:fc:80:bb:1e:91:7a:9f:b0:5b:b4:d6:f7:8a:02:
09:f6:5b:eb:dc:d1:1b:04:d5:cb:03:15:c8:6b:03:04:05:25:
ff:b6:14:2e:8a:3b:e1:6a:57:41:41:34:bf:e2:cc:9c:16:b5:
4f:ec:a8:43:ee:4d:1c:45:9b:ff:a0:80:43:67:c7:24:50:f0:
ba:73:1a:c7:6c:93:55:3a:03:d9:17:70:a6:43:d1:9d:17:db:
88:00:82:7e:b4:8b:52:c0:f8:51:24:16:00:9a:80:67:9d:d6:
07:50:af:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:11 2026 by rpki-client