
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133302e302f32342d3234203d3e203633363436.roa
File: 3131372e35312e3133302e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier: NACRUEGFJbH6sBngBzFWD5HD0eK4OOWvIiVPEN8Lh5k=
Subject key identifier: BF:58:59:98:6E:B5:E8:86:C8:4C:F3:FF:39:5D:96:AB:DE:F9:3C:36
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 52BCC79C3E7D4C2C05DFA0B9EA58F771B99E1936
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133302e302f32342d3234203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:20:00 +0000
ROA not before: Thu 07 May 2026 05:15:00 +0000
ROA not after: Thu 06 May 2027 05:20:00 +0000
asID: 63646
IP address blocks: 117.51.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:bc:c7:9c:3e:7d:4c:2c:05:df:a0:b9:ea:58:f7:71:b9:9e:19:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:15:00 2026 GMT
Not After : May 6 05:20:00 2027 GMT
Subject: CN=BF5859986EB5E886C84CF3FF395D96ABDEF93C36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:51:40:53:84:fb:af:e0:ee:4c:41:16:fd:3f:
ca:24:1f:1b:00:c9:69:e4:38:a0:61:82:e4:e4:50:
b1:ec:7e:7c:79:2e:ee:fb:52:21:d5:be:f1:68:c8:
3e:d8:79:f4:40:fd:f2:01:38:ea:5c:2c:ad:0c:75:
f2:ef:63:83:a5:fb:d7:31:ae:4e:e5:c2:59:f7:39:
1d:e2:e2:1f:aa:fa:f2:50:fd:70:fe:f1:7c:7d:e4:
82:68:b2:92:6a:93:8b:d1:5c:e8:7e:cd:93:a5:8c:
33:bc:85:e8:67:8c:6d:3b:c0:72:24:03:0a:aa:3e:
68:76:b1:ed:b0:f9:fe:ce:3b:10:4d:54:81:2d:3b:
7d:a5:4a:df:e9:b5:e0:8f:35:2f:ea:76:f1:0a:51:
21:29:29:17:dc:61:f1:34:d0:f6:19:f2:07:47:fb:
e9:4d:cf:57:94:85:39:2a:e9:77:48:54:fd:15:15:
39:38:a7:f4:5d:ab:74:a9:d1:92:a5:83:ee:51:33:
6d:c7:ca:0c:0d:e9:7f:99:07:bf:b8:4f:dc:3d:a4:
e8:50:f3:bc:8d:a8:18:81:2b:ac:ab:17:9e:95:ac:
45:2c:50:d3:6b:8f:93:d7:0b:19:76:94:e7:f3:01:
c9:aa:36:39:7a:40:08:15:04:4a:1f:7f:db:2b:bc:
cc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:59:98:6E:B5:E8:86:C8:4C:F3:FF:39:5D:96:AB:DE:F9:3C:36
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133302e302f32342d3234203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.130.0/24
Signature Algorithm: sha256WithRSAEncryption
93:3e:0b:9e:97:cb:22:b9:0f:b7:13:6c:d8:71:66:6c:85:7a:
0c:be:7e:69:a6:e4:f5:17:80:f6:e4:34:b9:8d:bb:e2:8c:e9:
79:62:db:1a:52:6c:85:3d:13:00:cc:2e:45:a2:62:23:59:3a:
56:0b:8e:66:cc:96:7c:cf:dd:c7:66:1e:72:f2:65:ad:d3:3f:
fb:15:fc:65:ce:3f:6c:bc:79:69:cb:85:87:45:12:80:ef:1e:
c3:2e:b9:86:1a:ac:77:c3:5c:e5:94:49:78:33:2b:a3:63:0c:
51:25:50:37:ce:25:84:34:64:94:19:c3:f1:e5:f8:ec:86:d9:
3a:91:2d:d7:56:4d:7a:59:15:88:2b:cf:31:a5:5d:b5:2d:d8:
15:de:7c:f9:c0:c6:39:3a:dc:b9:c0:24:82:44:09:c2:eb:c9:
44:14:e9:12:42:5b:7f:d8:ec:46:96:7a:43:09:df:4f:b5:f2:
32:fc:51:70:7d:e9:83:4e:c4:69:14:20:43:a4:71:21:42:ba:
83:be:79:a7:22:a9:c1:a2:6b:16:5d:fd:04:ae:e7:02:37:2d:
87:76:3b:4f:4b:06:79:fb:41:52:26:95:03:0e:0e:73:8e:7f:
ba:d7:52:0e:e4:71:2f:78:b5:70:56:13:e0:19:6b:86:fd:23:
0e:25:46:cc
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUUrzHnD59TCwF36C56lj3cbmeGTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA1MDcwNTE1MDBaFw0yNzA1MDYwNTIwMDBaMDMxMTAvBgNV
BAMTKEJGNTg1OTk4NkVCNUU4ODZDODRDRjNGRjM5NUQ5NkFCREVGOTNDMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLUUBThPuv4O5MQRb9P8okHxsA
yWnkOKBhguTkULHsfnx5Lu77UiHVvvFoyD7YefRA/fIBOOpcLK0MdfLvY4Ol+9cx
rk7lwln3OR3i4h+q+vJQ/XD+8Xx95IJospJqk4vRXOh+zZOljDO8hehnjG07wHIk
AwqqPmh2se2w+f7OOxBNVIEtO32lSt/pteCPNS/qdvEKUSEpKRfcYfE00PYZ8gdH
++lNz1eUhTkq6XdIVP0VFTk4p/Rdq3Sp0ZKlg+5RM23HygwN6X+ZB7+4T9w9pOhQ
87yNqBiBK6yrF56VrEUsUNNrj5PXCxl2lOfzAcmqNjl6QAgVBEoff9srvMw7AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUv1hZmG616IbITPP/OV2Wq975PDYwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5OTYwMjYzNjM2NzIwMDI1OS8wLzMxMzEzNzJlMzUz
MTJlMzEzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHUzgjANBgkqhkiG9w0BAQsFAAOCAQEAkz4LnpfLIrkPtxNs2HFmbIV6
DL5+aabk9ReA9uQ0uY274ozpeWLbGlJshT0TAMwuRaJiI1k6VguOZsyWfM/dx2Ye
cvJlrdM/+xX8Zc4/bLx5acuFh0USgO8ewy65hhqsd8Nc5ZRJeDMro2MMUSVQN84l
hDRklBnD8eX47IbZOpEt11ZNelkViCvPMaVdtS3YFd58+cDGOTrcucAkgkQJwuvJ
RBTpEkJbf9jsRpZ6QwnfT7XyMvxRcH3pg07EaRQgQ6RxIUK6g755pyKpwaJrFl39
BK7nAjcth3Y7T0sGeftBUiaVAw4Oc45/utdSDuRxL3i1cFYT4Blrhv0jDiVGzA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:42:36 2026 by rpki-client