
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132382e302f32342d3234203d3e203633363436.roa
File: 3131372e35312e3132382e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier: POMKABR0FiErZIJV4bCLUk+wpJhd2x1qTpjyXfVa2lI=
Subject key identifier: 06:24:54:F3:E9:1B:3B:DD:C8:D9:5D:06:7A:C0:2F:71:09:91:D9:49
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 4622E3260CBDA4E98414A8A67671670BD3929BE2
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132382e302f32342d3234203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:19:59 +0000
ROA not before: Thu 07 May 2026 05:14:59 +0000
ROA not after: Thu 06 May 2027 05:19:59 +0000
asID: 63646
IP address blocks: 117.51.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:22:e3:26:0c:bd:a4:e9:84:14:a8:a6:76:71:67:0b:d3:92:9b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:14:59 2026 GMT
Not After : May 6 05:19:59 2027 GMT
Subject: CN=062454F3E91B3BDDC8D95D067AC02F710991D949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:75:3c:f7:90:9b:16:88:06:d5:9f:5e:68:3a:
70:49:2a:76:34:6a:84:a1:5a:53:78:5a:49:f0:4b:
3c:0c:b8:d8:b3:f1:d1:a6:19:2e:25:26:88:b4:d1:
4a:fe:f7:b4:3b:ec:81:80:cc:d7:f6:ae:5f:19:69:
f1:ee:18:7c:12:17:e7:d5:bb:d6:a7:52:23:98:17:
44:6e:32:a6:90:b3:09:e1:53:58:32:ac:59:f2:df:
f0:bf:f9:6a:53:16:84:b9:e9:8e:e7:b8:7f:f4:0f:
9c:62:f5:9c:9a:d3:c4:ad:d5:8d:a1:4b:30:15:27:
ca:b2:6a:b0:de:b8:a8:e7:27:56:46:71:fa:0d:83:
9d:f8:51:65:9e:db:67:b9:66:56:b4:3a:33:13:4d:
e2:8b:8d:7c:2d:80:bf:ca:45:ea:ab:e3:25:9f:9c:
1b:0c:2d:ba:d4:6b:c5:dc:ee:fc:a3:58:8c:30:d5:
6f:b9:37:8b:c2:03:d5:78:f6:15:c1:63:73:36:9d:
e0:10:10:de:4e:8e:2e:40:a5:fa:84:e6:98:60:6c:
9f:83:10:58:e6:e3:c4:00:c7:59:c2:75:1d:ee:c4:
cb:52:81:7a:9c:39:16:98:a8:c2:4c:be:02:83:73:
8d:6a:cf:96:dc:80:70:92:c8:b5:11:79:0e:ff:6c:
82:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:24:54:F3:E9:1B:3B:DD:C8:D9:5D:06:7A:C0:2F:71:09:91:D9:49
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132382e302f32342d3234203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.128.0/24
Signature Algorithm: sha256WithRSAEncryption
41:e0:96:04:6b:9a:d4:1a:99:11:15:bb:fc:b2:d5:72:2a:b3:
7b:1c:09:09:2f:bb:41:b4:28:7b:09:fb:52:1f:fc:e9:52:25:
77:57:5e:b4:03:82:ef:b9:7c:b6:7d:4d:96:34:8f:be:0a:50:
8d:23:a2:49:20:bf:78:1b:ef:61:3a:49:5b:7e:39:fe:b8:1a:
75:69:90:c2:2e:ad:af:d0:06:4d:ed:67:af:ff:5b:5c:2c:1b:
be:d7:19:34:63:02:54:d7:2a:c7:5a:ca:e9:e1:9b:31:9b:0e:
36:2b:4e:b8:5c:85:d8:15:67:f9:49:f2:90:5c:65:1a:b9:9c:
9d:08:2f:4f:74:f7:96:ab:c1:1e:c4:b5:39:41:01:b9:60:f3:
1a:11:ee:cf:77:cc:6d:2e:9a:e5:14:c2:af:5f:49:99:79:d1:
b9:88:4a:8e:f7:ec:bf:4e:4e:80:01:ca:d3:0e:76:e3:44:eb:
25:93:4a:26:81:e8:10:58:84:74:93:db:17:8e:31:ad:8f:40:
e1:ac:52:9e:c0:f9:b8:94:12:b5:02:e6:2a:1f:2b:ae:99:0b:
2c:05:d0:90:29:d9:02:e0:84:e3:5a:f3:ca:56:03:50:02:bd:
b7:73:29:4b:61:e9:14:a0:e6:3e:7f:94:6c:9b:1b:7c:47:bc:
ea:6a:bf:2a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:51:31 2026 by rpki-client