
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133332e302f32342d3234203d3e203633363436.roa
File: 3131372e35312e3133332e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier: OCw4BBGKUadV0jfQ22aOu0YPdA0n0Bg1oQXYl6d2xW8=
Subject key identifier: 0E:A0:03:21:57:81:B3:B1:13:2E:10:82:73:C4:70:E3:8D:B4:C6:E0
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 69041B6C4B109C7B27C33235080BF52F7F7EFCD7
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133332e302f32342d3234203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:20:00 +0000
ROA not before: Thu 07 May 2026 05:15:00 +0000
ROA not after: Thu 06 May 2027 05:20:00 +0000
asID: 63646
IP address blocks: 117.51.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:04:1b:6c:4b:10:9c:7b:27:c3:32:35:08:0b:f5:2f:7f:7e:fc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:15:00 2026 GMT
Not After : May 6 05:20:00 2027 GMT
Subject: CN=0EA003215781B3B1132E108273C470E38DB4C6E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:08:2e:de:3f:8c:18:09:57:82:ac:9d:1b:4d:
4b:65:96:d1:0e:ae:07:e8:55:4a:f4:cf:37:29:95:
d0:3f:dd:a3:65:a7:ad:25:8e:a0:94:0d:e5:e4:40:
3d:5d:34:7e:6e:64:6f:4b:45:7c:50:77:96:8a:1e:
90:7d:96:a4:eb:69:dc:33:53:c8:e3:ae:f0:49:34:
30:fb:95:50:ce:43:e4:0b:56:01:29:57:2f:a9:1d:
c3:3b:7e:1f:47:e6:07:76:a9:22:ef:22:e4:4d:07:
02:ef:76:9f:bd:c9:50:13:ed:f7:5a:ba:2e:9f:1b:
ab:42:30:33:46:1a:23:58:9e:3b:31:51:ae:6f:05:
a8:55:a2:40:d0:08:98:96:1b:2d:47:40:40:18:6b:
5b:f1:1b:84:1d:97:ad:2d:40:c6:86:e3:ad:8b:c1:
c9:ca:86:b8:1a:a3:a3:df:96:d2:15:a8:63:ad:72:
eb:2d:75:cf:ad:87:82:d9:d5:a5:15:9f:b8:c7:ef:
bc:dd:b4:28:01:45:12:2c:43:5d:e6:fe:f0:f5:5b:
53:45:c2:91:c5:33:2a:a1:9a:c3:6f:d7:cc:ce:cb:
e4:bc:2d:79:5b:24:2f:a3:aa:a6:03:ed:de:e3:be:
c0:9c:1c:45:ae:1a:ba:5b:42:51:98:1c:24:64:af:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A0:03:21:57:81:B3:B1:13:2E:10:82:73:C4:70:E3:8D:B4:C6:E0
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133332e302f32342d3234203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.133.0/24
Signature Algorithm: sha256WithRSAEncryption
72:58:1c:7d:97:ba:f4:09:ab:59:9c:03:76:13:70:2a:9c:2b:
6c:17:39:63:7a:a0:8e:da:0c:97:69:c1:7c:36:9d:5b:04:08:
96:cd:ea:89:4f:db:3a:3c:4f:bf:59:d5:18:49:20:72:b7:0e:
15:13:1b:e8:d3:57:fb:0b:b1:b8:66:91:c8:d6:50:fc:44:8a:
12:88:87:22:a8:39:29:4f:ec:9d:f9:43:31:82:a6:40:81:c1:
4a:3b:86:5a:b8:d5:74:56:64:47:b7:0b:3f:09:75:92:a0:bf:
29:6c:99:dc:73:b7:11:2a:3e:8d:30:89:c4:64:57:b5:39:d7:
9f:d0:c7:b6:03:44:3a:8b:aa:40:12:a1:57:4d:5b:79:56:a7:
bb:ce:a6:ad:46:18:bc:8e:d5:e0:d6:02:ac:a2:c0:33:93:ed:
fe:59:d2:22:48:63:c1:c4:fa:b8:66:23:ef:68:18:a7:1a:f2:
93:b6:fd:56:50:92:6e:a9:8d:f7:62:e1:eb:05:bf:9c:a5:30:
45:96:a4:7b:54:53:e6:c0:d9:dc:ec:89:9f:2b:d8:18:50:d3:
8b:ae:dc:06:93:a5:44:fb:0f:e1:e0:49:24:7c:0c:f6:c4:d1:
ea:12:b6:8f:6f:6c:eb:53:a1:d4:7d:e1:19:7b:83:0e:79:29:
3e:32:e8:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:45:18 2026 by rpki-client