
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e36342e302f31392d3139203d3e203233373234.roa
File: 3231312e3135302e36342e302f31392d3139203d3e203233373234.roa (raw, json)
Hash identifier: 4RghX/MxjGxNYt3iuL9Mxdh4Io2D3U5e37dKXANiKB0=
Subject key identifier: 2E:63:08:53:64:BF:4C:96:D4:10:06:B3:30:F6:9D:E1:F9:CA:E1:EC
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 43B57DC71EC2249CF03E120C78A812EDEC8B4B78
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e36342e302f31392d3139203d3e203233373234.roa
Signing time: Mon 13 Apr 2026 06:50:53 +0000
ROA not before: Mon 13 Apr 2026 06:45:53 +0000
ROA not after: Mon 12 Apr 2027 06:50:53 +0000
asID: 23724
IP address blocks: 211.150.64.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:09:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b5:7d:c7:1e:c2:24:9c:f0:3e:12:0c:78:a8:12:ed:ec:8b:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 13 06:45:53 2026 GMT
Not After : Apr 12 06:50:53 2027 GMT
Subject: CN=2E63085364BF4C96D41006B330F69DE1F9CAE1EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:65:79:91:08:7f:98:0e:29:9e:3c:29:2c:0a:
de:90:b8:09:9b:ec:f7:2f:0b:f0:11:3f:05:c8:27:
6b:60:b0:31:57:26:16:3b:97:de:07:23:ac:c9:de:
15:4b:82:9a:98:19:c3:c1:d4:12:bf:77:1b:e9:e2:
6a:9b:a3:68:85:01:16:50:3a:4c:1d:f6:d0:af:d2:
84:9b:73:e2:48:79:38:97:11:08:24:81:7d:d9:e7:
28:14:8f:10:b1:d8:0d:65:76:73:97:c9:bd:90:56:
23:c4:24:cb:00:41:14:ce:e4:e7:c3:d0:02:8f:3b:
ed:26:36:e3:cb:ed:71:09:71:2c:5e:50:a7:66:f9:
d9:99:77:04:e9:e6:88:e7:b0:e7:c1:8b:09:f7:2e:
37:9d:a8:67:c0:97:04:f3:63:21:8c:6e:7d:86:b5:
af:ee:ab:19:ae:00:b9:81:87:af:cc:c1:3e:ac:f9:
d3:c2:46:30:9f:48:b3:c9:81:8d:37:d1:c8:89:8f:
ab:17:4f:dc:88:43:ce:cd:30:a4:46:9e:29:31:41:
16:9d:f9:4c:3b:ea:a3:17:fd:fe:4e:e8:c7:f0:24:
73:aa:5e:11:e4:1c:6a:3f:f3:86:1c:57:a1:ee:45:
c5:7d:fb:52:1e:a5:57:4f:25:cf:21:9e:dc:00:d1:
40:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:63:08:53:64:BF:4C:96:D4:10:06:B3:30:F6:9D:E1:F9:CA:E1:EC
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e36342e302f31392d3139203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.150.64.0/19
Signature Algorithm: sha256WithRSAEncryption
17:76:0e:b2:1d:02:e5:e7:b9:eb:05:55:ce:53:e0:2c:ec:1d:
dc:21:59:b2:8d:c5:07:ff:2f:30:61:eb:a3:6b:2d:b4:15:1d:
20:4a:26:39:15:b2:32:dc:3d:cc:6d:9b:44:c5:57:b5:1c:c2:
28:76:fe:a4:c4:a0:f8:9d:49:40:83:39:55:5c:79:c8:c6:b3:
75:2e:bf:ca:69:d5:bc:ee:d7:ab:a1:44:dc:61:7c:c7:66:ec:
10:79:7b:c8:66:b9:bd:af:56:d3:41:84:0f:97:92:cf:e2:3a:
16:e6:05:47:aa:cc:8a:2c:0a:b4:b3:ef:cd:ff:45:8f:69:68:
0e:73:f4:86:cd:bf:ca:d8:9c:5b:31:2f:8a:7f:c7:94:d6:75:
1b:63:c5:94:90:ab:02:5b:5b:9e:0a:98:e8:cd:a8:c7:70:13:
51:cb:dc:5f:d0:af:f7:34:45:32:2c:fa:82:69:66:c3:4c:2d:
9d:ef:22:7d:6b:47:dd:46:92:c7:60:72:c7:30:a2:de:f6:ff:
f3:af:79:5c:8d:22:f0:a7:e1:05:c6:c4:59:fb:4a:aa:06:1c:
92:35:9b:99:d1:c2:03:42:34:df:9c:bf:68:79:01:e6:9d:b5:
f9:c8:95:6a:6d:0c:0d:36:6b:fb:32:1f:a3:af:7b:6c:80:e4:
00:2c:e5:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:28 2026 by rpki-client