
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203538343636.roa
File: 3131372e35312e3137322e302f32322d3232203d3e203538343636.roa (raw, json)
Hash identifier: MR0SjnUbF9aNH11dywlGHeOWE0VrBbSzqx7j1NBStiU=
Subject key identifier: 31:58:E0:BC:31:0E:75:31:A6:29:B0:DF:CE:82:8A:A4:3C:45:58:DB
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 35AC17CE1E5904EF05939E0604FD5FB9D1B7AA49
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203538343636.roa
Signing time: Thu 07 May 2026 05:15:50 +0000
ROA not before: Thu 07 May 2026 05:10:50 +0000
ROA not after: Thu 06 May 2027 05:15:50 +0000
asID: 58466
IP address blocks: 117.51.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:31:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:ac:17:ce:1e:59:04:ef:05:93:9e:06:04:fd:5f:b9:d1:b7:aa:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 7 05:10:50 2026 GMT
Not After : May 6 05:15:50 2027 GMT
Subject: CN=3158E0BC310E7531A629B0DFCE828AA43C4558DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e0:da:f4:bf:9c:19:02:b9:30:57:43:4a:c0:
98:d5:17:8c:53:8f:cc:6b:eb:f2:57:ae:5b:24:7c:
27:11:0d:9f:ea:26:5e:c2:ad:04:69:ca:62:92:60:
c3:30:bc:23:15:56:ec:d8:fc:17:19:0d:18:61:f5:
e7:19:3e:f2:ab:99:f6:cc:a3:35:de:16:d2:a4:d2:
f7:0a:7c:d5:dc:dd:a4:96:ef:62:00:85:16:71:3a:
07:23:d7:60:73:d8:79:39:c1:90:71:c1:23:72:2a:
66:39:7d:cb:c4:9f:a5:88:2c:99:40:5b:4c:cc:41:
a7:2a:2a:ef:98:5a:c0:41:9f:23:2f:bb:26:e1:52:
6d:f8:3e:04:0d:14:34:3e:b2:63:3e:7f:99:cf:60:
7a:a3:3f:d2:6e:10:0b:b0:6d:34:10:66:03:40:20:
fb:4b:09:e5:3a:96:77:d6:a6:78:3c:e7:71:d5:cd:
a7:a4:70:f4:47:ba:03:a5:82:ce:59:bf:20:c2:88:
ae:53:a2:02:8b:bf:cd:84:e6:ea:fb:3c:d3:4b:db:
36:db:6c:ae:67:ad:4e:87:9d:bf:28:27:67:af:31:
c1:97:df:00:e4:a2:a0:ec:bb:5b:b8:da:4c:09:5a:
93:2f:7c:2d:f8:42:58:12:81:9e:d0:06:d5:d6:a3:
6a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:58:E0:BC:31:0E:75:31:A6:29:B0:DF:CE:82:8A:A4:3C:45:58:DB
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/3131372e35312e3137322e302f32322d3232203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.172.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:fa:b2:70:b8:6c:c7:7b:8f:b1:df:0a:f9:da:22:84:5f:93:
ad:57:dc:f8:22:79:93:b4:14:ac:72:7f:cb:9f:94:c7:87:00:
df:d8:75:74:cc:1d:e8:45:ef:3a:80:af:02:f0:86:38:e9:c3:
c4:61:98:80:c8:22:5a:10:b9:57:05:ce:f4:28:66:21:60:c9:
4f:33:c9:09:06:1c:19:8a:91:91:cc:86:09:bc:79:0f:c8:c0:
22:82:02:ea:a3:0f:4e:29:4f:6a:f6:18:37:7f:ce:7d:64:df:
84:77:bb:3c:43:07:f1:65:0b:46:52:6d:43:db:7a:4a:36:6d:
f7:5a:f2:01:c0:31:a7:2d:c9:fb:bf:be:d2:68:6c:4c:92:01:
fe:ad:46:81:67:44:17:65:47:15:57:4e:58:10:93:4b:96:0b:
f2:1f:7e:92:cd:ac:65:bc:c8:3f:4d:44:cf:7d:ee:ff:7d:00:
48:0d:76:1f:69:c7:d1:7f:5a:89:63:40:27:76:3a:d1:9e:d8:
e4:91:fd:af:04:6f:b7:b7:7e:1b:1f:2c:4d:89:67:f0:27:6c:
7c:de:5e:89:11:eb:b7:f0:45:66:f8:8b:d5:ab:8c:ef:e2:5c:
d6:6d:42:fe:7c:6e:8c:fc:8f:f6:78:16:47:e4:15:ee:d9:92:
ff:00:5f:57
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:59:10 2026 by rpki-client