
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa
File: 3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa (raw, json)
Hash identifier: hEg2s0VwxNa3G9IrIGxFGXJ9m7NvlBxjn9sJKiZtSug=
Subject key identifier: EB:44:1C:CA:5D:92:D7:69:2A:87:35:47:D3:20:2C:8A:F8:8E:D2:C1
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 6F2F01A870715ADD08FCFE8C930848F83FF6C1E5
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa
Signing time: Thu 07 May 2026 01:28:40 +0000
ROA not before: Thu 07 May 2026 01:23:40 +0000
ROA not after: Thu 06 May 2027 01:28:40 +0000
asID: 45086
IP address blocks: 150.242.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:2f:01:a8:70:71:5a:dd:08:fc:fe:8c:93:08:48:f8:3f:f6:c1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:23:40 2026 GMT
Not After : May 6 01:28:40 2027 GMT
Subject: CN=EB441CCA5D92D7692A873547D3202C8AF88ED2C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:b1:fa:20:92:12:99:14:fe:1f:05:4b:15:
36:d9:df:3f:1f:32:29:84:9c:b4:69:9a:4e:69:ae:
62:44:71:3b:6f:c2:9d:d2:28:34:50:6f:99:a5:82:
2f:ae:23:0b:4d:fa:b7:51:88:51:5b:60:84:8f:53:
9f:6b:0d:0c:35:4c:e1:55:c8:ca:10:db:a0:23:7a:
74:3e:2b:c1:6e:28:36:e2:55:5e:81:21:b3:5a:ff:
95:1c:3a:92:2e:fc:56:34:bb:6a:a3:82:56:f5:f1:
42:ca:83:08:65:b0:36:a7:ae:bd:77:06:8d:78:e6:
50:84:43:ae:4a:6d:13:1c:13:25:ac:0c:c3:a1:33:
64:15:3f:88:0f:81:29:9e:86:09:7c:50:d7:e3:1d:
b5:98:d0:f0:7c:51:30:a2:4f:4d:5d:cd:b1:72:ac:
63:fe:50:3b:0d:7f:3e:93:82:d5:c1:5c:92:8a:b9:
d2:fb:ce:90:e4:21:b2:fc:5f:c9:97:fb:57:9c:bb:
a7:ae:8f:62:f9:3e:9b:a2:75:0a:41:1d:8c:83:16:
de:76:37:be:c4:57:94:ae:88:7d:58:c6:92:08:55:
4f:54:37:46:2c:c9:cb:c3:4c:39:22:73:e9:fa:55:
d5:d5:5a:71:39:33:e3:ce:97:61:3b:18:73:c4:5e:
f9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:44:1C:CA:5D:92:D7:69:2A:87:35:47:D3:20:2C:8A:F8:8E:D2:C1
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3135302e3234322e3131322e302f32322d3232203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.112.0/22
Signature Algorithm: sha256WithRSAEncryption
21:58:2c:75:d7:79:40:69:bb:43:41:4a:ac:fc:53:52:55:25:
88:f9:31:c6:b5:db:6d:2e:33:97:28:b1:51:59:68:43:8e:44:
dc:45:e6:8a:8c:e5:78:ff:95:3b:74:3f:88:0d:f9:7f:18:20:
03:0b:02:5a:49:93:60:53:15:98:03:6d:07:07:42:fe:89:63:
59:5c:4c:44:ba:bf:93:02:5d:69:55:45:88:fa:c3:30:29:25:
47:db:92:e0:7c:92:b5:37:ab:81:8d:77:1c:55:7a:bd:27:a9:
c2:a2:2a:e7:a3:6b:92:9c:01:6f:38:5b:ab:ab:c6:85:5b:13:
b8:01:0a:97:36:fc:69:dd:06:fc:e9:d2:26:79:b8:6d:c4:fd:
fd:5c:7e:fe:fd:12:c0:54:c4:6c:0a:29:a7:55:c8:b4:9e:c5:
a4:83:97:cd:2f:d3:7e:f9:f4:96:ff:8c:3d:3d:9d:ce:88:25:
26:32:d2:89:b6:04:3a:a2:aa:11:ca:d3:08:08:21:15:b3:fa:
01:21:28:e2:cf:c6:d5:6a:d9:ba:c9:0e:73:25:97:56:7c:31:
d5:9f:57:f1:ee:85:44:b2:a4:79:de:40:d8:f1:e4:25:e0:9b:
91:89:f8:aa:96:d0:96:da:cb:8a:66:45:6d:81:95:7d:8a:83:
a7:4a:b5:a0
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUby8BqHBxWt0I/P6MkwhI+D/2weUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy
NUIwMkMwOTAeFw0yNjA1MDcwMTIzNDBaFw0yNzA1MDYwMTI4NDBaMDMxMTAvBgNV
BAMTKEVCNDQxQ0NBNUQ5MkQ3NjkyQTg3MzU0N0QzMjAyQzhBRjg4RUQyQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC41rH6IJISmRT+HwVLFTbZ3z8f
MimEnLRpmk5prmJEcTtvwp3SKDRQb5mlgi+uIwtN+rdRiFFbYISPU59rDQw1TOFV
yMoQ26AjenQ+K8FuKDbiVV6BIbNa/5UcOpIu/FY0u2qjglb18ULKgwhlsDanrr13
Bo145lCEQ65KbRMcEyWsDMOhM2QVP4gPgSmehgl8UNfjHbWY0PB8UTCiT01dzbFy
rGP+UDsNfz6TgtXBXJKKudL7zpDkIbL8X8mX+1ecu6euj2L5PpuidQpBHYyDFt52
N77EV5SuiH1YxpIIVU9UN0YsycvDTDkic+n6VdXVWnE5M+POl2E7GHPEXvkDAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU60Qcyl2S12kqhzVH0yAsiviO0sEwHwYDVR0j
BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD
NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDA5Njc4ODI3MTM0NjQ4MzUvMC8zMTM1MzAyZTMy
MzQzMjJlMzEzMTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNTMwMzgzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEApbycDANBgkqhkiG9w0BAQsFAAOCAQEAIVgsddd5QGm7Q0FKrPxT
UlUliPkxxrXbbS4zlyixUVloQ45E3EXmiozleP+VO3Q/iA35fxggAwsCWkmTYFMV
mANtBwdC/oljWVxMRLq/kwJdaVVFiPrDMCklR9uS4HyStTergY13HFV6vSepwqIq
56NrkpwBbzhbq6vGhVsTuAEKlzb8ad0G/OnSJnm4bcT9/Vx+/v0SwFTEbAopp1XI
tJ7FpIOXzS/Tfvn0lv+MPT2dzoglJjLSibYEOqKqEcrTCAghFbP6ASEo4s/G1WrZ
uskOcyWXVnwx1Z9X8e6FRLKked5A2PHkJeCbkYn4qpbQltrLimZFbYGVfYqDp0q1
oA==
-----END CERTIFICATE-----
Generated at Wed May 13 17:36:52 2026 by rpki-client