
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa
File: 3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa (raw, json)
Hash identifier: WJkP0W15rAl9+roSJlFkJJU2uJEAC90HgnWnFNu7xEQ=
Subject key identifier: 3D:DC:6B:F5:46:B3:67:94:1C:69:CE:D3:96:2D:42:C2:48:CD:B3:7F
Certificate issuer: /CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Certificate serial: 7F1CED8DF4354A1BC8FCDF57DECB01C2F4F666CF
Authority key identifier: 22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa
Signing time: Tue 14 Apr 2026 01:10:04 +0000
ROA not before: Tue 14 Apr 2026 01:05:04 +0000
ROA not after: Tue 13 Apr 2027 01:10:04 +0000
asID: 23724
IP address blocks: 211.150.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:1c:ed:8d:f4:35:4a:1b:c8:fc:df:57:de:cb:01:c2:f4:f6:66:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22102F7EAB37C81E87BB5EB21560BFA6243553CC
Validity
Not Before: Apr 14 01:05:04 2026 GMT
Not After : Apr 13 01:10:04 2027 GMT
Subject: CN=3DDC6BF546B367941C69CED3962D42C248CDB37F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8e:5e:90:eb:93:4c:cc:a3:75:34:23:70:4e:
f7:14:bc:83:b4:49:1f:ad:c8:e4:b2:85:4a:c4:d9:
a1:b2:fd:1f:f5:bc:6b:d4:80:1a:ca:3a:a1:8b:e9:
f9:9b:7b:ed:79:19:6a:a9:5d:ee:cd:11:a9:36:13:
41:fa:a8:ed:33:58:f5:5a:08:cf:85:2c:6c:c5:21:
d7:21:95:93:c6:b5:b4:f3:12:ac:73:4c:e0:8f:27:
65:bf:fe:6a:05:4e:93:60:4d:c2:8f:7c:8e:8f:d7:
d0:5d:8c:6a:b6:1f:9d:70:64:9a:27:dd:c4:72:cd:
7e:d2:1c:d2:97:02:41:62:c7:4c:75:bd:da:f7:f8:
b8:4d:1a:b5:cd:c6:8f:53:7e:f3:57:f8:f2:22:90:
4d:79:03:d4:05:50:69:ef:a3:bb:2f:f4:20:dd:c7:
74:2f:ab:86:90:5c:c5:16:c9:85:09:e0:d6:dc:d9:
b4:70:92:88:b5:64:81:d9:f5:42:d2:3f:28:26:8e:
7f:03:c8:a0:36:aa:a9:08:99:33:33:7a:c4:1d:62:
c1:93:66:ce:dc:87:4f:0c:c7:dd:fe:d2:22:01:e8:
1a:96:cb:84:ab:8f:fc:08:a5:01:ca:29:71:7b:0b:
e7:a0:2d:65:b1:ab:d3:9b:64:00:3b:d3:b7:02:15:
3d:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:6B:F5:46:B3:67:94:1C:69:CE:D3:96:2D:42:C2:48:CD:B3:7F
X509v3 Authority Key Identifier:
keyid:22:10:2F:7E:AB:37:C8:1E:87:BB:5E:B2:15:60:BF:A6:24:35:53:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/22102F7EAB37C81E87BB5EB21560BFA6243553CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095920006954221569/1/3231312e3135302e3131342e302f32332d3233203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
211.150.114.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:96:0c:6f:c2:11:65:00:17:88:1a:fe:ac:2e:a1:3f:b7:25:
c0:9f:e0:3a:31:ad:0a:be:67:ea:10:3d:ef:09:a4:b3:b9:d8:
dd:e0:06:c0:20:66:9a:10:df:4f:6b:ca:e3:80:12:ef:d7:ec:
36:b1:6b:31:c7:db:b2:68:44:28:ee:9c:ea:3a:6c:88:b4:66:
7e:3c:61:cb:89:78:6f:a3:78:24:b7:3d:02:7e:9e:0b:88:0b:
b7:ee:40:13:62:68:02:fe:27:a5:c3:ef:bd:f9:2e:d4:be:1a:
66:3b:33:33:71:0f:fa:f5:b3:d2:0b:ac:2c:ae:05:ac:4e:e5:
78:19:c0:05:b1:4d:a5:1a:d2:72:50:eb:34:3a:8e:ed:c7:a9:
05:32:3e:7e:52:e4:82:1e:3e:b7:e1:88:38:fc:b8:ff:97:07:
94:6a:8d:61:d2:71:40:82:76:99:5a:8b:55:81:d4:38:56:11:
6f:96:57:64:a7:57:d2:e9:6a:36:b4:aa:4b:35:00:4b:9a:82:
47:67:fd:20:eb:e5:4b:57:a8:dc:d0:0e:b9:54:4b:7e:fc:b1:
6e:d2:33:a1:76:1e:48:17:4c:76:76:1a:e1:b4:00:1d:5d:87:
29:b7:6c:6a:e5:1d:88:ec:20:69:80:3b:cf:10:1c:cf:cd:27:
73:d1:fe:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:31 2026 by rpki-client