
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e203137363231.roa
File: 3137352e3130322e3133322e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: JjT0+oTzzwelO0afp/kL+pmPUt8k5Goo5AbLXsxBsAY=
Subject key identifier: 33:5D:86:57:77:F9:BD:62:24:D8:4D:47:42:5D:F2:67:8B:E9:7C:F0
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 6CFF97A9196932024ED8A03216FEB306F40C5AD6
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e203137363231.roa
Signing time: Thu 07 May 2026 01:47:46 +0000
ROA not before: Thu 07 May 2026 01:42:46 +0000
ROA not after: Thu 06 May 2027 01:47:46 +0000
asID: 17621
IP address blocks: 175.102.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ff:97:a9:19:69:32:02:4e:d8:a0:32:16:fe:b3:06:f4:0c:5a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:42:46 2026 GMT
Not After : May 6 01:47:46 2027 GMT
Subject: CN=335D865777F9BD6224D84D47425DF2678BE97CF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:10:5f:8a:09:e8:7e:76:1b:09:a6:af:b7:bb:
80:42:68:19:4d:9d:75:91:98:f0:b7:3b:9a:b9:d6:
18:7a:b6:87:cd:a1:e7:a6:4d:de:e8:82:66:7e:65:
25:e9:2a:b8:5a:ba:24:cf:33:0a:68:db:f4:0d:3e:
08:06:e6:43:93:ed:d1:fc:52:67:74:4d:41:0b:81:
b8:34:56:bb:8e:1e:ac:50:ea:56:74:c9:72:4f:3d:
ef:9b:30:fc:38:39:53:13:86:a8:6f:12:32:0d:08:
e0:17:cb:46:b7:70:60:49:0f:de:22:25:96:ca:3c:
74:fa:62:7e:d1:e7:3f:11:fb:73:f2:ca:ac:f6:8a:
01:73:de:1c:52:8a:d2:47:a5:ee:56:0a:50:07:d4:
d6:3b:56:13:c7:39:be:74:d1:19:d9:63:27:f0:bc:
78:d6:dd:5e:2c:8f:48:83:17:ff:3f:4f:fe:c7:8d:
af:47:fb:9b:92:aa:80:32:3d:0a:ad:fa:62:45:e9:
87:5e:07:b2:61:33:df:19:1b:f1:03:20:34:96:56:
55:a5:c2:7a:84:7b:cb:90:91:31:cc:ab:09:0b:3c:
be:ea:3a:46:d8:77:29:9c:ac:a8:3f:a9:20:aa:5e:
f4:05:f9:cd:48:6c:5f:55:d1:e3:89:5c:15:39:37:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:5D:86:57:77:F9:BD:62:24:D8:4D:47:42:5D:F2:67:8B:E9:7C:F0
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133322e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.132.0/24
Signature Algorithm: sha256WithRSAEncryption
66:7b:b8:bf:f2:29:a7:29:3e:a6:0d:7a:ce:8f:a5:0c:6a:74:
bb:fe:5e:11:44:1f:5f:30:a5:5f:f2:ff:71:4d:bf:26:22:48:
da:9c:8d:0f:c1:04:24:51:1a:a9:a5:51:ea:91:29:14:02:8e:
93:5a:4b:27:45:fa:84:9a:62:ab:97:e5:6f:26:ed:7e:7e:09:
4f:6d:25:12:ed:97:55:70:0d:4e:70:d9:7c:1b:a2:48:a8:c7:
a6:59:81:9e:7f:04:38:54:a2:fe:bd:85:5d:b6:db:fc:c4:52:
05:d9:41:f2:31:f0:3e:e4:d4:9a:63:07:77:d8:76:07:61:a6:
2c:a7:d0:9f:af:cb:1c:5f:8e:83:5a:f4:65:19:7f:ec:8c:8f:
0e:34:7b:d3:65:8f:93:68:7e:f1:39:1b:65:b4:f9:8d:3b:5b:
90:2d:98:47:4b:f5:01:b1:3f:21:8c:0c:47:bf:e1:32:c8:d7:
04:61:b7:68:c3:be:c8:38:cc:f6:9e:6a:cc:1f:f6:30:db:2b:
8a:da:10:1d:0e:ba:62:29:f1:71:95:ad:25:66:aa:f2:48:af:
37:a4:65:a9:30:57:8c:fe:1f:9d:cb:88:80:db:17:ea:74:e6:
0d:0b:b5:92:21:48:d1:7f:ff:50:eb:46:d0:b4:32:90:8f:93:
f1:e4:10:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:14:04 2026 by rpki-client