
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203536303430.roa
File: 3131372e35312e3137322e302f32322d3232203d3e203536303430.roa (raw, json)
Hash identifier: fLpeL5Ir/FJ8q9KhxX6EcmIYjYQBcr5BRMjRM+gEIOs=
Subject key identifier: 63:40:AB:D4:C1:91:FE:28:2A:4B:A4:45:7C:75:81:60:12:49:62:3F
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 3147F41B012FCB3F36CF171C4F4A503FA2DFB604
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203536303430.roa
Signing time: Thu 07 May 2026 05:15:50 +0000
ROA not before: Thu 07 May 2026 05:10:50 +0000
ROA not after: Thu 06 May 2027 05:15:50 +0000
asID: 56040
IP address blocks: 117.51.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:47:f4:1b:01:2f:cb:3f:36:cf:17:1c:4f:4a:50:3f:a2:df:b6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:10:50 2026 GMT
Not After : May 6 05:15:50 2027 GMT
Subject: CN=6340ABD4C191FE282A4BA4457C7581601249623F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:58:3f:fd:d4:2c:cf:2a:a3:66:26:1c:6d:
57:c2:88:41:83:20:9e:4b:f3:c1:fa:6b:c1:67:7f:
75:12:05:34:45:5c:0b:2e:fe:fb:cf:f2:0a:47:57:
cd:3e:74:ea:3d:07:89:e2:cf:40:54:10:cd:5c:af:
4a:88:04:69:b0:4e:3a:45:c2:42:d1:59:ae:0d:31:
9d:67:d2:df:c9:f4:06:f3:f5:c2:72:b6:d8:8b:3b:
be:5e:e1:87:a5:02:f9:54:fc:58:8e:d8:53:de:8c:
98:ae:ab:b5:49:c1:7e:03:21:7f:8c:51:e2:71:d8:
2d:5c:1c:9f:41:c1:d1:f5:d8:6d:34:10:bc:5e:c6:
ac:51:b2:f2:3e:6c:11:57:86:d6:1b:19:ab:65:fa:
70:b4:45:4f:ab:5d:1d:f7:ba:43:2b:db:b5:08:35:
6e:b1:22:f2:95:5e:ad:37:58:93:83:e3:39:d0:66:
0c:b9:37:c6:a0:ef:99:b9:43:a6:05:d2:0a:61:b1:
10:7a:65:8c:0e:43:5f:74:7e:47:42:cf:0e:0c:a7:
ef:61:44:b3:9b:da:48:a8:6e:ff:d9:69:35:71:0d:
d0:e1:3b:f5:88:aa:67:1f:53:27:ff:61:97:7a:a4:
f0:b7:02:af:9f:75:2f:47:bb:ca:f5:dc:91:8d:37:
0a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:40:AB:D4:C1:91:FE:28:2A:4B:A4:45:7C:75:81:60:12:49:62:3F
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.172.0/22
Signature Algorithm: sha256WithRSAEncryption
86:df:1f:8a:ab:91:a0:82:24:ce:36:64:95:c9:76:e0:3d:44:
7f:56:8d:55:47:5b:19:c0:1e:c2:ec:ce:ab:7f:42:d0:a4:e8:
a1:f9:dd:cd:b2:6a:16:9f:2c:24:65:15:c9:9d:1a:58:23:28:
31:84:0b:3b:f7:9f:26:92:cf:ee:09:22:31:8b:0f:8f:41:3d:
d1:12:d2:96:44:24:3c:c0:36:cd:30:c3:26:87:27:10:d3:1f:
b5:a4:9c:d9:d4:ff:d5:fc:90:12:c1:e6:c2:38:18:6e:c8:f7:
69:a8:fd:91:87:16:72:11:07:57:e7:bf:0d:cd:7d:5e:25:33:
22:62:5d:6d:2c:26:43:93:67:1e:c4:bd:7e:69:7d:96:12:f5:
8f:52:1a:fb:0c:c0:8d:38:5d:de:5f:7e:06:44:a0:29:a8:de:
2d:b6:6c:95:b5:09:b1:cf:1e:60:a2:6d:a9:3f:36:d4:d4:07:
2e:ac:16:3b:6d:21:58:a2:55:b1:22:dc:d6:68:62:f7:8d:73:
6d:2a:35:fe:b3:2b:06:f1:7b:5b:22:02:d7:12:c7:6b:76:69:
b5:ba:c3:22:23:16:fc:26:d2:ea:09:28:22:19:d9:39:61:df:
65:13:b9:70:d1:97:47:37:4f:a8:74:5c:26:0a:35:a7:e2:dd:
1c:e9:85:34
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 12:06:32 2026 by rpki-client