
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132392e302f32342d3234203d3e203633363436.roa
File: 3131372e35312e3132392e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier: nkjCt88aOtA3r5rzF2RH1PDk7LZYm/wH8MLDGs+wELI=
Subject key identifier: A7:C5:AA:BB:14:7F:D3:73:50:C1:E0:02:2C:39:F5:0E:1D:C4:CB:60
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 3A231D132E4DFB414DEAFFC58D6A0342A77D2B24
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132392e302f32342d3234203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:20:00 +0000
ROA not before: Thu 07 May 2026 05:15:00 +0000
ROA not after: Thu 06 May 2027 05:20:00 +0000
asID: 63646
IP address blocks: 117.51.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:23:1d:13:2e:4d:fb:41:4d:ea:ff:c5:8d:6a:03:42:a7:7d:2b:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:15:00 2026 GMT
Not After : May 6 05:20:00 2027 GMT
Subject: CN=A7C5AABB147FD37350C1E0022C39F50E1DC4CB60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:6d:9c:74:4e:09:c5:78:5a:88:ed:cb:9d:
5a:24:ac:d7:55:af:5e:12:34:f0:df:7a:36:6d:79:
02:e8:53:94:c1:f5:f9:76:ef:af:e7:c5:90:20:78:
b8:a5:36:13:c1:57:52:35:fd:ac:c7:7f:9a:a7:80:
e6:e5:fb:1c:40:e1:d9:2e:4d:37:f8:a4:24:40:ed:
8d:fe:0f:9f:7a:e2:fb:b0:f6:f7:1d:98:c4:5f:3a:
57:d8:5b:59:f5:09:9b:ac:ee:62:5f:64:20:f2:df:
90:06:58:62:c8:06:ae:a0:16:0c:97:58:7f:2a:42:
63:73:7e:89:b1:11:f9:c7:b6:5e:7a:f8:68:5e:f1:
a7:3b:c8:c7:b4:e6:10:0a:ef:ac:68:bf:bb:e4:a5:
35:9e:03:84:13:72:4f:e1:62:be:a4:de:54:2e:9b:
ac:b8:5c:4a:50:08:a8:d5:75:5b:c0:33:ab:e9:bc:
c8:c0:57:66:e3:80:47:3c:93:27:1f:f0:03:c6:98:
5b:62:a5:9d:59:24:96:54:a8:f4:88:94:da:c4:e9:
d3:95:37:4b:f3:c4:65:cc:56:29:99:44:67:61:e3:
ec:ba:d4:71:42:a5:fc:4c:07:5b:b5:1b:20:c4:48:
73:5c:ef:37:fc:58:8e:6e:ca:7c:55:33:cd:53:5f:
a6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:AA:BB:14:7F:D3:73:50:C1:E0:02:2C:39:F5:0E:1D:C4:CB:60
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3132392e302f32342d3234203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.129.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:c0:1d:cf:54:e0:d2:d8:5f:c8:88:77:ec:a9:8a:5b:b9:2e:
38:df:f5:7a:44:ce:9a:60:60:0a:92:5f:d4:ad:ef:e9:fa:5e:
c7:f9:60:91:9a:94:c7:f1:1b:38:69:a3:7c:96:53:29:34:7f:
9f:5a:a0:6a:ac:3a:ae:9a:34:c2:2f:b5:10:04:db:fe:3e:71:
b3:2a:8d:10:cd:67:dd:3e:31:2c:fa:d1:e5:93:98:88:94:f3:
c0:8a:1d:35:c2:4d:14:cf:f9:09:f8:fb:52:2b:85:c0:5e:b7:
39:b9:37:39:27:68:8e:2b:0c:fa:f4:ba:d6:56:b2:d1:4b:58:
7a:3f:5c:81:ee:f8:c4:6b:1a:c7:cd:c3:db:d6:86:c9:2e:86:
a9:3a:da:b0:6c:55:b5:25:dc:57:66:14:1a:f9:53:66:1b:77:
a6:b8:be:f6:fd:c4:0b:17:07:91:81:3b:37:f6:75:c2:1d:7d:
ca:6c:b6:a2:57:6b:62:c1:d8:be:ec:d2:98:16:3a:dd:63:62:
fa:b5:55:4b:3e:58:ad:51:4d:8b:42:1b:c2:2e:df:02:16:3e:
fe:05:7b:02:07:89:f4:ff:f2:bf:13:83:33:83:12:55:47:70:
29:8b:7b:b3:03:fb:28:31:0e:7e:ec:0b:2b:fc:6b:4c:fe:51:
cd:05:79:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:09:04 2026 by rpki-client