
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3135372e302f32342d3234203d3e203633363436.roa
File: 3131372e35312e3135372e302f32342d3234203d3e203633363436.roa (raw, json)
Hash identifier: 4hwKpUtruqnpr7fVYfZ7u9ONCROhuMdG6kq/VnnRQ+g=
Subject key identifier: 83:9A:80:C0:F5:56:7A:85:C3:80:43:73:08:14:F3:37:60:FC:2B:F4
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 31734B0CDB9595E8F0DB4D555384A048EDF4DA2F
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3135372e302f32342d3234203d3e203633363436.roa
Signing time: Thu 07 May 2026 05:19:58 +0000
ROA not before: Thu 07 May 2026 05:14:58 +0000
ROA not after: Thu 06 May 2027 05:19:58 +0000
asID: 63646
IP address blocks: 117.51.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:73:4b:0c:db:95:95:e8:f0:db:4d:55:53:84:a0:48:ed:f4:da:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:14:58 2026 GMT
Not After : May 6 05:19:58 2027 GMT
Subject: CN=839A80C0F5567A85C38043730814F33760FC2BF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:e5:3b:af:64:20:2a:c7:50:16:71:6c:ff:
90:f9:4c:22:f9:3a:bb:7f:40:6e:0c:68:27:14:5d:
d1:13:80:36:26:0b:49:0e:3b:fc:04:76:02:a4:fd:
ec:0c:0b:bf:5c:36:f2:93:7d:1e:1a:bf:c0:79:01:
2b:17:a0:7b:4d:7b:32:b3:61:11:72:db:b2:91:ba:
3c:e0:1b:c7:c2:5e:5e:54:9f:ed:13:5a:ec:61:14:
9a:1f:ce:0e:47:ed:11:28:c8:b7:a5:3e:a0:e4:c0:
e8:6e:3b:64:03:1a:d1:67:2a:d9:44:25:b6:26:b8:
90:f9:dd:ad:73:bf:20:d4:e8:d5:da:75:5f:3f:3c:
53:54:ff:8c:ee:b2:e0:41:68:c4:ae:e8:62:c4:7c:
50:0c:db:92:b4:8b:e9:f7:19:45:25:b0:2f:98:29:
ea:99:8c:3a:c0:e1:a8:8d:05:fe:4a:7c:3b:f3:a8:
ec:52:23:41:9a:04:9e:32:70:4e:62:ca:b5:cf:da:
27:ec:05:77:4e:62:ce:73:ce:f6:3a:8c:1c:4e:67:
23:53:96:ce:45:a9:1e:38:bb:c7:aa:93:7e:54:16:
52:6a:30:f3:fa:b7:2f:2c:f7:61:ed:60:f4:52:b2:
61:aa:c7:20:86:af:b1:81:4a:7d:0b:c0:43:e7:fd:
44:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:9A:80:C0:F5:56:7A:85:C3:80:43:73:08:14:F3:37:60:FC:2B:F4
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3135372e302f32342d3234203d3e203633363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.157.0/24
Signature Algorithm: sha256WithRSAEncryption
97:9e:a5:bc:35:4c:65:04:d6:b2:d7:0b:b3:75:3f:e5:b9:4b:
e3:9b:41:b0:a9:34:cb:58:0b:28:0e:3c:44:7e:b8:1d:60:4a:
8e:8e:55:21:23:55:f6:fd:44:28:60:d3:b4:ac:57:1e:8c:46:
21:2b:68:b6:18:6c:1b:bd:76:b5:e3:7b:f3:8e:bf:89:22:7f:
9b:69:5c:ca:7b:99:1a:55:7a:d4:8f:2d:cc:c6:e5:b7:ba:d6:
23:61:b5:a9:ba:5a:1b:53:0d:ef:a1:56:1f:6e:46:ce:41:b9:
d4:ae:f2:bd:58:d8:f9:2a:1d:19:c2:00:79:84:cb:27:84:79:
d6:35:1a:4c:f2:2e:d1:2a:7e:d0:82:93:31:f0:62:3c:65:cc:
ec:90:3d:93:c4:e9:19:83:0d:98:5e:cb:61:13:1b:2c:10:29:
80:32:b5:00:3d:bb:99:72:ac:8e:ef:a8:7a:6c:05:1f:69:12:
4b:fb:cc:6d:ef:3b:20:25:d7:3e:b9:cc:87:fb:6b:71:0e:18:
f6:df:0c:a9:1f:e0:c6:96:e2:86:ac:6c:4b:5a:7b:12:21:7b:
ca:d1:04:b2:bc:cd:0a:e7:5e:00:e5:7c:dd:f9:77:26:ce:0b:
fd:eb:f9:a9:75:9d:fe:8e:d7:61:9f:d7:94:33:5f:71:a1:65:
e2:35:b6:59
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUMXNLDNuVlejw201VU4SgSO302i8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdB
N0QxNEI0MDAeFw0yNjA1MDcwNTE0NThaFw0yNzA1MDYwNTE5NThaMDMxMTAvBgNV
BAMTKDgzOUE4MEMwRjU1NjdBODVDMzgwNDM3MzA4MTRGMzM3NjBGQzJCRjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfAOU7r2QgKsdQFnFs/5D5TCL5
Ort/QG4MaCcUXdETgDYmC0kOO/wEdgKk/ewMC79cNvKTfR4av8B5ASsXoHtNezKz
YRFy27KRujzgG8fCXl5Un+0TWuxhFJofzg5H7REoyLelPqDkwOhuO2QDGtFnKtlE
JbYmuJD53a1zvyDU6NXadV8/PFNU/4zusuBBaMSu6GLEfFAM25K0i+n3GUUlsC+Y
KeqZjDrA4aiNBf5KfDvzqOxSI0GaBJ4ycE5iyrXP2ifsBXdOYs5zzvY6jBxOZyNT
ls5FqR44u8eqk35UFlJqMPP6ty8s92HtYPRSsmGqxyCGr7GBSn0LwEPn/UTzAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUg5qAwPVWeoXDgENzCBTzN2D8K/QwHwYDVR0j
BBgwFoAUFldnVvCwO/dezWvESaO+96fRS0AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTYwMjYzNjM2NzIwMDI1OS8wLzE2NTc2NzU2RjBCMDNCRjc1RUNENkJDNDQ5QTNC
RUY3QTdEMTRCNDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMTY1NzY3NTZGMEIwM0JGNzVFQ0Q2QkM0NDlBM0JFRjdBN0QxNEI0MC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5OTYwMjYzNjM2NzIwMDI1OS8wLzMxMzEzNzJlMzUz
MTJlMzEzNTM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMzM2MzQzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAHUznTANBgkqhkiG9w0BAQsFAAOCAQEAl56lvDVMZQTWstcLs3U/5blL
45tBsKk0y1gLKA48RH64HWBKjo5VISNV9v1EKGDTtKxXHoxGIStothhsG712teN7
846/iSJ/m2lcynuZGlV61I8tzMblt7rWI2G1qbpaG1MN76FWH25GzkG51K7yvVjY
+SodGcIAeYTLJ4R51jUaTPIu0Sp+0IKTMfBiPGXM7JA9k8TpGYMNmF7LYRMbLBAp
gDK1AD27mXKsju+oemwFH2kSS/vMbe87ICXXPrnMh/trcQ4Y9t8MqR/gxpbihqxs
S1p7EiF7ytEEsrzNCudeAOV83fl3Js4L/ev5qXWd/o7XYZ/XlDNfcaFl4jW2WQ==
-----END CERTIFICATE-----
Generated at Wed May 13 12:44:10 2026 by rpki-client