
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133332e302f32342d3234203d3e203435303836.roa
File: 3137352e3130322e3133332e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier: hOpw5CoxDH8LMXcNb1t1PAcMcksZcmEE7nmq0Jkc/fY=
Subject key identifier: 73:19:38:44:2F:D0:52:8A:78:06:71:04:B6:4D:FD:94:50:B5:65:A1
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 4FA8FEE7B41622689549CE5807218FB5974A5166
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133332e302f32342d3234203d3e203435303836.roa
Signing time: Thu 07 May 2026 01:47:46 +0000
ROA not before: Thu 07 May 2026 01:42:46 +0000
ROA not after: Thu 06 May 2027 01:47:46 +0000
asID: 45086
IP address blocks: 175.102.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:a8:fe:e7:b4:16:22:68:95:49:ce:58:07:21:8f:b5:97:4a:51:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:42:46 2026 GMT
Not After : May 6 01:47:46 2027 GMT
Subject: CN=731938442FD0528A78067104B64DFD9450B565A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cd:79:d7:03:6e:fe:19:d1:c0:35:03:d9:f5:
8a:f6:61:3e:3d:27:cd:75:a7:ba:72:68:36:8f:1a:
bd:a5:b5:62:85:98:b5:be:07:cd:20:8b:f6:59:ea:
1f:67:98:d3:9d:cb:eb:5c:04:5f:c8:0c:b6:d5:f3:
a8:dc:de:b0:ad:bb:69:9f:b5:c3:0e:44:0e:1e:61:
25:8b:0f:2c:6e:3c:26:2b:b5:6a:da:c8:99:9e:b0:
36:6d:1b:ba:03:ea:c7:da:58:ce:a3:87:3e:57:06:
2c:6b:4f:cb:6b:1a:a4:d5:64:26:1b:9f:f8:b8:b5:
86:ec:19:f3:6f:2f:13:5e:bd:7a:d6:c6:5d:dd:82:
39:13:34:ac:11:93:95:52:a5:31:36:70:92:bd:5e:
ff:7c:3b:cd:cd:83:db:02:22:cd:65:bc:e1:98:f8:
c4:e2:86:ed:bb:24:05:5a:e8:e8:aa:11:a5:46:2f:
2d:82:9c:31:0d:44:3f:93:17:66:a9:aa:f0:b4:14:
3f:dc:23:6b:56:28:bf:2d:d5:88:bc:6a:20:3a:5f:
61:60:95:8a:d2:38:30:a1:c6:a3:11:6d:cf:90:60:
f7:a9:cf:0c:47:35:a3:ff:97:4d:0d:b5:d0:56:4a:
0d:36:4f:3a:b5:28:16:d2:8f:d9:c8:0a:da:0d:d9:
80:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:38:44:2F:D0:52:8A:78:06:71:04:B6:4D:FD:94:50:B5:65:A1
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133332e302f32342d3234203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.133.0/24
Signature Algorithm: sha256WithRSAEncryption
35:1b:43:c8:1a:89:98:ae:ec:b7:2e:8b:88:eb:60:9b:16:1c:
25:e1:c0:4b:cd:2b:6d:47:50:04:d4:8a:d6:9b:c6:22:c3:b5:
6a:0f:ae:a5:9d:3f:45:57:42:2e:f9:56:23:8e:8d:ec:ed:8b:
a3:75:ba:3b:10:c3:23:ea:f2:07:5a:a8:a7:10:36:0d:d4:32:
81:82:ec:ed:fe:2c:33:ad:7a:69:fd:03:bc:6a:3f:5e:e0:0a:
66:05:df:51:5d:54:dd:33:e4:e2:b2:f9:76:46:b0:64:8f:d3:
66:18:f8:9e:8b:a0:d1:bf:fb:e7:06:01:c6:18:50:95:eb:cd:
64:c7:e5:25:20:4d:73:3e:e2:f0:9c:2f:ec:1d:7b:be:e4:a6:
f4:d9:2f:a9:46:25:c7:6b:91:5a:ab:a8:d3:f8:e2:a9:80:f3:
0f:30:5e:06:94:e4:67:65:66:05:9d:26:89:f2:c0:cd:6c:0c:
df:38:f1:be:dd:2f:c6:5b:74:dd:54:0d:d9:d3:f2:c4:ba:1f:
87:15:10:bd:ac:d9:dd:77:6f:2a:d4:f1:90:75:27:e9:30:50:
dc:b0:c2:ab:85:1c:f2:07:5d:7b:e9:de:fd:3d:36:58:b9:51:
11:b9:e2:ad:4e:2a:6e:56:21:01:5e:3c:c4:69:6c:b2:6e:40:
d8:18:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:08:10 2026 by rpki-client