
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132382e302f31392d3139203d3e203633363436.roa
File: 3131372e35312e3132382e302f31392d3139203d3e203633363436.roa (raw, json)
Hash identifier: Aenfa7I4EA/fdeIVzeMveSZBTYgJtBc51mj0LRZ28w8=
Subject key identifier: 09:77:3E:2C:19:70:30:C6:86:6C:28:A7:DD:62:EC:8A:C2:5C:CC:9A
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 5A7261265C49933319C2BDB1649695D819F5A418
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132382e302f31392d3139203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:20:00 +0000
ROA not before: Thu 07 May 2026 05:15:00 +0000
ROA not after: Thu 06 May 2027 05:20:00 +0000
asID: 63646
IP address blocks: 117.51.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:72:61:26:5c:49:93:33:19:c2:bd:b1:64:96:95:d8:19:f5:a4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:15:00 2026 GMT
Not After : May 6 05:20:00 2027 GMT
Subject: CN=09773E2C197030C6866C28A7DD62EC8AC25CCC9A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:09:4e:aa:fa:2d:06:d1:12:b1:5a:ea:64:
56:0f:97:55:e1:b5:d0:61:ce:66:6f:a2:e6:59:9e:
e3:e3:4b:0c:00:3c:af:ac:7d:b9:f6:c1:e4:81:3e:
69:2f:5a:67:31:1a:05:02:bb:ab:ec:0e:70:33:87:
d3:8a:15:ec:d7:9a:82:1d:3a:e4:7a:16:93:44:67:
b0:14:ec:f9:ec:82:7f:2d:71:5c:e4:04:df:2f:46:
cb:df:95:79:81:5f:aa:a3:e0:df:0d:f4:48:a3:57:
d0:84:97:11:08:51:29:b8:08:bc:ee:14:e7:a8:cc:
52:5e:e1:eb:c8:2c:1f:79:8e:0b:be:ea:e8:24:21:
82:e9:cc:db:83:84:79:16:ee:c3:05:6e:f8:44:29:
3e:2f:c7:83:a6:86:d5:b1:40:a9:02:c3:e5:60:84:
46:44:8d:69:d0:b3:0f:7b:c0:3c:f2:19:d7:f8:90:
d8:96:4b:70:ba:3e:77:3c:c3:e7:96:a7:fe:ec:a1:
e4:3e:97:87:56:0d:5f:e9:28:56:ef:42:bc:e0:45:
8c:d3:74:87:ff:34:bd:24:c8:da:5b:7d:9b:b1:35:
77:f3:60:1f:d6:fb:d4:12:ea:98:69:51:0d:58:a9:
98:65:ba:c6:24:22:0f:b1:d2:eb:d6:24:35:7b:e3:
72:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:77:3E:2C:19:70:30:C6:86:6C:28:A7:DD:62:EC:8A:C2:5C:CC:9A
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132382e302f31392d3139203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.128.0/19
Signature Algorithm: sha256WithRSAEncryption
a5:d1:c7:0a:8f:e6:91:fc:6f:a4:a9:dc:1b:18:8a:7c:cf:f5:
f2:9f:fc:31:ef:d9:1c:0a:f4:4d:63:84:99:50:7a:67:70:06:
26:08:48:2c:a5:c9:28:dc:8c:4b:a5:ff:67:68:d8:ea:3b:e5:
38:f7:f1:6b:7f:fb:56:89:5b:9c:93:95:8c:6c:e7:b1:3d:f5:
d6:99:62:1c:7e:bf:4c:ed:ca:e1:3f:72:ac:8c:56:04:9b:99:
91:33:43:bd:81:82:ff:07:a3:b9:25:ba:17:f7:63:0c:8b:6a:
94:99:69:9c:6d:1d:a3:aa:fc:f1:4d:a9:41:04:1b:ba:4c:34:
25:26:97:9b:91:a4:b6:64:81:70:06:4b:53:33:fb:15:8c:d6:
8c:6a:91:75:26:ca:b5:a9:45:51:75:f7:f8:6e:df:9d:5e:88:
92:ca:98:68:20:40:51:2f:f5:cf:26:c5:8a:f1:bf:6a:a8:e2:
57:7d:28:16:d0:48:14:a3:26:92:22:34:f2:96:8d:ed:bf:25:
17:e6:26:f1:92:72:0f:0a:50:58:2f:f5:4f:50:82:10:6a:ce:
8a:b9:82:43:66:7e:49:48:7b:39:f9:f0:83:be:c7:67:60:fc:
64:bb:19:a1:9c:1d:d7:d1:88:c9:a7:e1:41:b7:6f:72:c1:dd:
60:8f:94:51
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:23 2026 by rpki-client