
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133392e302f32342d3234203d3e203633363436.roa
File: 3131372e35312e3133392e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier: EERd2R+gJzGKXrhpBeXZsbIrUWcRVHLQKioA+ZGWrXY=
Subject key identifier: CC:66:FC:1A:EE:5E:77:FE:A0:D0:0A:D3:CB:09:11:96:AE:38:16:17
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 417E166D7B80274CD9547392D8E79001CC2A9C04
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133392e302f32342d3234203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:20:00 +0000
ROA not before: Thu 07 May 2026 05:15:00 +0000
ROA not after: Thu 06 May 2027 05:20:00 +0000
asID: 63646
IP address blocks: 117.51.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:7e:16:6d:7b:80:27:4c:d9:54:73:92:d8:e7:90:01:cc:2a:9c:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:15:00 2026 GMT
Not After : May 6 05:20:00 2027 GMT
Subject: CN=CC66FC1AEE5E77FEA0D00AD3CB091196AE381617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b3:30:5e:fe:9a:94:1d:af:94:17:12:1a:89:
e4:7d:5a:4e:73:6c:9f:f5:8c:38:48:2a:05:07:b1:
33:5f:2b:d8:2d:b3:6e:66:86:5a:61:a1:1e:b5:05:
81:fc:f3:54:af:5c:41:8f:5f:fe:70:a1:65:ca:e8:
82:de:16:71:2f:21:7f:0d:a4:38:50:59:49:e5:6d:
89:98:0f:73:1e:53:d1:ce:b3:fa:eb:29:ec:9c:05:
92:d0:70:d1:6f:c5:0a:19:88:cf:35:11:70:35:f3:
f5:a4:40:39:da:b9:f4:9f:6c:9d:5f:50:b9:b1:05:
ce:14:33:1b:ea:68:7f:ea:a3:b2:e4:67:d5:0f:98:
37:71:14:5c:c2:c9:0a:bf:ae:99:01:5d:3a:d3:b6:
9f:34:16:a5:4b:a4:51:d9:48:be:36:3d:2b:0e:1f:
8b:3e:cf:be:37:00:89:b9:16:84:b8:25:c4:36:87:
7a:a6:0b:dc:45:45:65:d3:a7:33:f4:69:96:87:bb:
bc:42:b9:11:c9:41:04:b1:4d:8c:80:ef:f6:ee:dd:
e8:49:97:1c:82:8b:87:da:53:fb:31:c9:63:14:d2:
7e:47:73:34:44:db:d6:99:7c:cd:03:1b:2d:c7:47:
c9:e6:78:f0:e8:c8:c9:84:d4:09:58:a0:4d:38:6d:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:66:FC:1A:EE:5E:77:FE:A0:D0:0A:D3:CB:09:11:96:AE:38:16:17
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3133392e302f32342d3234203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.139.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:d5:9f:54:7a:48:a1:0d:f1:97:e2:fa:07:e6:ea:58:13:89:
24:d8:30:78:62:0f:0f:67:0f:3c:e7:97:7f:fc:fc:75:12:b0:
5b:09:db:00:c4:3c:d8:ee:af:a9:d8:c4:d7:89:81:93:62:d6:
11:e8:12:91:bf:24:15:45:5d:e5:d9:5c:b6:50:b1:4c:b8:71:
ba:75:96:63:60:d0:98:cf:9d:be:e3:dc:15:9e:3f:5a:8b:68:
13:db:ef:82:7d:8c:15:c2:7c:57:b0:f5:fe:0c:ef:af:83:f2:
78:2d:d5:ec:dd:70:97:79:ee:ec:60:a5:d0:17:e4:25:61:46:
ff:45:d4:5f:59:04:67:c5:b0:5d:d3:fe:cc:e3:91:8b:cf:e9:
80:78:81:f1:63:64:ff:02:41:a2:7f:6e:4f:6f:a4:15:60:47:
41:55:ff:ea:dc:9d:ba:8a:6c:d4:7b:1e:83:50:f8:ea:f6:2d:
4a:0f:c8:d6:c6:51:17:34:59:67:70:e5:e2:02:10:be:5e:01:
3d:c9:1a:ac:04:bc:c1:3e:a4:41:96:73:4f:2f:1b:50:8d:68:
5f:22:d2:af:bb:61:5a:f3:81:aa:6c:76:32:f0:58:09:3f:71:
4b:6b:0b:ae:05:ec:90:f9:5e:50:91:29:db:e9:4e:76:9c:96:
ee:d7:32:c0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 13:00:29 2026 by rpki-client