
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3135302e3234322e37362e302f32322d3232203d3e2034383038.roa
File: 3135302e3234322e37362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: y6Tf2xSYD5JmpHmzNtdtKnHIbcnN5l76m/WJZK+R440=
Subject key identifier: 44:92:5A:98:53:9A:D0:B9:F4:8A:D4:ED:17:71:9A:99:61:68:C5:E3
Certificate issuer: /CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Certificate serial: 3279891D1B256268B4F667F86F5B0FFE6C3FE8A3
Authority key identifier: C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3135302e3234322e37362e302f32322d3232203d3e2034383038.roa
Signing time: Mon 13 Apr 2026 08:15:04 +0000
ROA not before: Mon 13 Apr 2026 08:10:04 +0000
ROA not after: Mon 12 Apr 2027 08:15:04 +0000
asID: 4808
IP address blocks: 150.242.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:10:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:79:89:1d:1b:25:62:68:b4:f6:67:f8:6f:5b:0f:fe:6c:3f:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398
Validity
Not Before: Apr 13 08:10:04 2026 GMT
Not After : Apr 12 08:15:04 2027 GMT
Subject: CN=44925A98539AD0B9F48AD4ED17719A996168C5E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:0d:5f:c0:79:4a:67:4a:d2:6d:e4:fb:ce:5d:
61:24:8e:35:ab:65:08:e3:02:84:8a:05:82:e5:c9:
2a:8d:3f:52:46:d0:1b:71:39:e4:a6:d2:44:be:6b:
49:11:85:07:0c:fd:4a:c3:07:70:d7:65:de:cb:df:
90:de:87:ff:80:7c:90:51:e2:10:59:e8:35:80:73:
b9:34:34:aa:b4:4b:93:86:8d:be:e0:e0:7b:f2:b7:
f0:98:b6:d5:8f:27:c0:eb:87:a9:90:f4:e8:7f:86:
6f:80:15:43:9b:d2:64:8b:37:55:93:57:05:e9:20:
cd:c8:b9:f5:5d:50:74:0b:0e:d9:07:5a:39:34:cf:
10:4b:80:51:04:36:58:6f:de:fa:06:6c:cb:64:74:
d0:1a:85:f4:c2:b3:41:f8:01:7f:7d:71:7c:e9:95:
b3:6c:09:dd:78:58:0b:da:0c:c9:b2:e1:30:7e:25:
15:bb:a4:68:a8:9d:a1:2c:58:31:40:99:64:74:a1:
35:79:43:be:0f:0f:02:47:8f:d1:69:5c:85:0c:78:
6e:e1:82:e7:e6:2b:b0:10:de:ad:d3:0d:ae:87:3c:
af:79:7f:38:0a:23:93:dd:0f:22:66:f5:ad:83:8a:
02:45:6d:4b:ab:c8:28:b5:d1:10:74:dc:b7:25:ec:
ad:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:92:5A:98:53:9A:D0:B9:F4:8A:D4:ED:17:71:9A:99:61:68:C5:E3
X509v3 Authority Key Identifier:
keyid:C1:C4:8F:95:93:D6:A1:9D:BD:3F:AC:A9:C6:EF:A5:B5:5A:D3:F3:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C1C48F9593D6A19DBD3FACA9C6EFA5B55AD3F398.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095978316885655555/0/3135302e3234322e37362e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.76.0/22
Signature Algorithm: sha256WithRSAEncryption
79:54:0f:aa:8b:3d:26:b6:4c:27:08:1e:a0:9d:46:2c:4b:b8:
90:da:ca:32:c3:7f:22:40:28:6f:bc:b4:f9:fd:7b:d0:9b:60:
2e:2d:62:f3:67:07:2c:8a:ee:77:86:fd:c5:1d:90:9c:8b:65:
0c:d5:bd:1e:3a:cb:12:cf:ae:ed:a5:83:cd:07:8d:d6:3d:48:
5d:6a:82:9b:7b:60:e4:98:f2:a2:a5:d8:3a:98:e7:cd:e6:b5:
80:0d:71:e1:a1:f7:60:5b:ca:94:88:30:08:c6:f5:40:42:3b:
9e:1c:c4:83:50:1d:71:d8:b5:73:d9:4f:38:55:46:a8:aa:ae:
39:4a:a8:7f:ab:d1:7b:cc:f2:a4:31:b8:07:a9:ff:4a:d3:06:
59:f3:02:ae:4b:93:d5:87:5f:8c:21:1b:68:64:76:41:f0:f6:
ed:90:85:ed:be:6e:e1:7e:3a:a4:6c:01:c3:7e:90:92:23:06:
76:01:95:72:76:4b:80:7e:cb:4a:25:ae:a5:1a:ec:96:ff:b9:
89:65:94:ff:ea:df:5f:9c:d5:42:71:a4:5f:39:05:27:d5:f5:
bc:29:9f:20:6a:24:df:bd:eb:c7:5d:b8:1f:bd:79:33:02:9f:
03:07:3b:57:e4:50:62:61:e1:73:2a:26:f2:2f:b4:36:31:39:
23:33:de:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:02:03 2026 by rpki-client