
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa
File: 3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa (raw, json)
Hash identifier: uzEDoJO/HvzsS7Mob7amPkS2gE4be7zeo6tmlv3hVOY=
Subject key identifier: 71:63:E8:32:E7:20:DC:EF:C9:08:C6:5B:81:80:E2:28:63:6C:73:3E
Certificate issuer: /CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Certificate serial: 4CADB00B012419599EF55B1E27D3E696D59E2D37
Authority key identifier: 25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa
Signing time: Tue 14 Apr 2026 09:24:46 +0000
ROA not before: Tue 14 Apr 2026 09:19:46 +0000
ROA not after: Tue 13 Apr 2027 09:24:46 +0000
asID: 131516
IP address blocks: 150.242.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 14:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ad:b0:0b:01:24:19:59:9e:f5:5b:1e:27:d3:e6:96:d5:9e:2d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25C6596195B162409A5AFAA92570F258BAD3C42D
Validity
Not Before: Apr 14 09:19:46 2026 GMT
Not After : Apr 13 09:24:46 2027 GMT
Subject: CN=7163E832E720DCEFC908C65B8180E228636C733E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:76:c0:43:dd:cc:a6:63:1d:ad:b9:ab:df:
6f:25:3a:c5:25:19:43:b3:07:6b:a8:b8:a1:9c:a5:
53:26:3a:bd:d3:83:43:a8:b9:fc:9f:29:8d:fd:f9:
b3:ff:81:d9:dd:b3:a4:00:dd:b8:d8:03:0e:54:7d:
42:40:fe:a9:a8:e4:43:76:d6:60:39:62:0b:70:f7:
61:8f:4a:3d:a3:0c:7d:e9:21:20:1b:81:f8:72:2f:
5e:a7:50:8f:73:c4:93:26:0f:7f:7c:6b:66:3e:c4:
56:99:91:83:72:a0:9d:8b:41:93:74:b5:90:39:50:
03:8d:e8:e8:98:c3:05:7f:e3:4b:0f:f1:b9:78:8b:
5d:36:e4:85:96:a6:ba:02:82:7c:93:83:af:f6:e4:
d0:dd:21:9d:38:23:af:1e:5b:33:5b:a0:9e:5d:25:
3b:ba:95:d6:5d:2a:26:f0:d3:d7:24:ce:8c:92:18:
2e:67:bb:f9:9d:c2:7c:24:16:4f:fd:c3:30:8d:24:
62:de:ee:7b:89:66:27:e4:69:d1:30:de:16:7d:bd:
76:cb:ac:96:cc:95:c8:f1:be:71:49:13:10:7c:f9:
2a:43:5f:46:8c:82:ff:65:00:a5:9f:56:c4:dd:ec:
eb:da:dd:0c:6e:8d:f9:ca:89:91:dd:87:4c:da:e7:
90:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:63:E8:32:E7:20:DC:EF:C9:08:C6:5B:81:80:E2:28:63:6C:73:3E
X509v3 Authority Key Identifier:
keyid:25:C6:59:61:95:B1:62:40:9A:5A:FA:A9:25:70:F2:58:BA:D3:C4:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/25C6596195B162409A5AFAA92570F258BAD3C42D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/25C6596195B162409A5AFAA92570F258BAD3C42D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585911216996355/0/3135302e3234322e3234302e302f32322d3234203d3e20313331353136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.240.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:08:60:0e:94:b2:66:29:ad:60:de:11:43:52:93:ee:68:6e:
d2:a9:c3:cb:28:7e:f1:d3:ea:f0:f7:48:18:95:b7:24:07:c5:
01:99:b6:05:c4:43:8c:40:38:c9:37:b1:24:8c:39:31:54:7c:
1e:62:93:55:f3:1d:38:59:32:ab:d6:72:e9:ac:a9:b4:9a:aa:
86:f7:b3:78:39:4e:ed:70:94:a3:4f:81:c4:b9:43:e4:07:4f:
5f:2e:1a:60:99:ad:bd:2c:84:7a:42:d9:0f:10:9e:de:4c:3d:
4d:7e:c8:05:d0:19:ca:6e:c7:1e:57:d6:e7:60:dd:0b:ac:82:
b4:34:2d:64:1f:08:c6:62:21:bd:f4:33:46:86:c1:5a:45:ce:
f4:8f:6a:dd:87:44:50:dc:74:77:cc:d2:b1:36:3b:97:21:16:
3e:0d:73:a6:87:37:45:00:cb:f3:1c:0f:c5:52:52:e6:98:25:
c6:d6:fb:b4:5d:89:58:d5:2a:01:ad:ff:ef:20:c0:c0:7a:2c:
6f:3f:b0:37:4a:24:19:5d:2c:db:a6:02:ee:b2:df:81:ec:3c:
0d:aa:be:54:2e:d0:50:2f:42:a2:44:37:81:25:07:7e:ad:57:
c8:e9:d4:29:94:b3:b8:0e:39:37:d7:10:4a:7a:1f:2c:4c:d1:
69:64:eb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:27:37 2026 by rpki-client