
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa
File: 3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa (raw, json)
Hash identifier: jeaTrOgdMebawys/6XnnQCO78gyxE7KX43eZsOidPFM=
Subject key identifier: 55:81:D6:44:EB:1B:D2:9D:B5:3D:C1:98:3A:F4:2C:72:A1:BE:30:11
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 48E816638DAE641B418A879E65CFF343A4E42B7B
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa
Signing time: Mon 13 Apr 2026 04:07:09 +0000
ROA not before: Mon 13 Apr 2026 04:02:09 +0000
ROA not after: Mon 12 Apr 2027 04:07:09 +0000
asID: 9803
IP address blocks: 211.150.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:e8:16:63:8d:ae:64:1b:41:8a:87:9e:65:cf:f3:43:a4:e4:2b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 04:02:09 2026 GMT
Not After : Apr 12 04:07:09 2027 GMT
Subject: CN=5581D644EB1BD29DB53DC1983AF42C72A1BE3011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:15:bc:d6:82:3b:f7:5f:59:22:9b:97:91:c3:
54:94:31:bf:59:50:ed:9f:8d:62:98:b7:d8:91:6e:
e7:fe:e2:5e:3f:3f:29:ba:07:bc:b9:a7:e9:d5:57:
41:d7:ed:64:73:4d:7b:d1:21:3f:e0:75:44:e1:91:
e6:90:43:5d:f3:bc:99:9b:4c:43:37:a5:c6:60:85:
2d:59:71:c6:45:a5:01:9c:a8:5b:5f:9c:63:0b:00:
7b:e5:63:4a:b5:51:d3:35:98:6b:7e:61:c4:e3:75:
19:9e:33:41:20:b3:9f:45:b0:0b:d3:6e:9c:86:6b:
d1:00:60:e8:bc:40:49:67:82:5e:c4:a9:6d:65:6f:
2a:f3:a9:3e:a3:95:a4:96:f4:9f:b8:f9:dc:49:87:
c6:2c:15:fb:f3:26:29:92:55:d1:8c:4b:7f:d7:74:
f7:64:d0:1d:57:b4:eb:b2:b7:93:0d:17:c7:22:c6:
f1:a1:51:5e:3f:1a:49:22:e3:ab:20:05:7d:bc:fb:
83:66:6f:64:01:c3:b0:46:7f:b2:25:1e:57:36:0c:
df:fb:e2:5b:cb:e2:15:8f:f3:e8:26:41:56:ac:20:
19:2b:7d:5e:a3:91:5f:81:88:c0:f3:5d:9c:bd:14:
46:99:3d:40:48:d5:1d:36:9d:f6:63:2e:d4:3d:c2:
ae:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:81:D6:44:EB:1B:D2:9D:B5:3D:C1:98:3A:F4:2C:72:A1:BE:30:11
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3132322e302f32342d3234203d3e2039383033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.150.122.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:e0:6d:bd:49:36:5e:1b:e5:17:3d:42:10:14:62:bf:63:9d:
d0:fc:dc:9f:cd:9e:6d:60:ef:5d:81:df:12:b0:0e:9c:f0:10:
0d:75:a7:e7:61:b8:bb:f0:8c:7f:eb:c3:63:1e:6b:b7:83:f5:
e3:46:69:6e:1d:81:c8:c8:66:b7:a4:a8:4d:a3:e5:0f:9d:25:
fa:eb:5c:2a:d8:2d:8a:c4:a6:50:d7:08:b3:35:bf:c5:3e:85:
a1:1d:56:23:91:01:4e:ae:16:64:4f:38:ed:95:8d:5e:3e:e3:
4e:61:04:84:41:68:dd:78:70:f1:ad:b5:db:cf:5f:70:54:f4:
61:d2:7e:96:71:50:e1:b5:26:d3:60:c0:74:5d:ac:e0:90:64:
40:56:47:f1:1e:c9:37:fe:e8:d5:47:5e:6d:27:fc:ad:bb:67:
ac:0c:39:40:95:b3:97:fe:9f:22:17:af:45:94:fb:bd:38:21:
4e:be:f2:64:0b:85:6c:9f:fe:61:ea:9c:f1:04:dc:0e:52:ba:
a2:63:1c:eb:21:b3:b0:1f:05:30:dc:c1:59:ac:35:27:9c:d8:
e9:2b:9c:ce:37:24:d2:91:37:34:2b:9d:53:a6:7b:e8:57:34:
5e:ce:38:a2:11:0a:d2:4a:65:23:76:7d:91:03:de:98:93:38:
29:f9:22:0e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:21:51 2026 by rpki-client