
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa
File: 3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: q2jBiKi3B6gE56tu3YSIdwEAAMgHoXGdRV6isO3ywiE=
Subject key identifier: 49:53:97:A1:A5:EE:FB:E4:AA:53:0E:C6:9E:94:4E:F4:C3:6D:F1:F5
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 54FECE27EDD7FD902AB1649D43031B883BE95448
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa
Signing time: Thu 07 May 2026 01:49:43 +0000
ROA not before: Thu 07 May 2026 01:44:43 +0000
ROA not after: Thu 06 May 2027 01:49:43 +0000
asID: 4811
IP address blocks: 175.102.134.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:fe:ce:27:ed:d7:fd:90:2a:b1:64:9d:43:03:1b:88:3b:e9:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:44:43 2026 GMT
Not After : May 6 01:49:43 2027 GMT
Subject: CN=495397A1A5EEFBE4AA530EC69E944EF4C36DF1F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:8d:1e:95:73:7f:c2:ce:34:c6:d9:92:b4:41:
3d:6e:08:d4:69:2c:f3:c3:85:ad:e0:73:c6:ad:6a:
f6:c2:d9:61:29:4c:b1:77:ec:30:24:db:91:d6:43:
a7:08:e1:d4:45:ff:8b:a9:60:5f:e6:28:f2:59:7a:
9e:32:c0:46:32:1b:e7:84:ea:c5:e2:7e:75:4a:d7:
e9:e5:6e:c8:12:d6:a8:a8:85:6f:b2:7f:55:a4:b3:
7e:29:dd:01:cc:27:34:ef:ae:6c:55:a3:e7:3b:91:
7b:6e:97:3e:66:ed:41:26:7f:e4:9c:f4:14:2b:af:
1e:c0:38:2d:9d:cb:b4:2b:9d:61:40:21:71:22:ed:
d1:33:89:0e:aa:d7:27:7b:ca:2c:a0:df:4f:96:74:
9b:37:db:29:fb:37:31:27:05:07:4e:2a:47:af:9d:
8e:af:c6:04:1e:a6:1f:bd:53:c8:4f:19:eb:c7:44:
a1:aa:7a:9b:bf:23:b8:19:fa:58:12:35:6d:49:44:
60:fc:b4:44:6e:a8:4c:53:76:44:13:36:bf:96:16:
30:86:8e:36:81:ee:9c:c9:27:a4:0e:d1:65:8e:5c:
7d:05:b4:4c:a6:41:e3:c2:59:4c:fa:25:0d:41:48:
ef:9f:fb:a8:4b:f0:47:45:5f:48:fc:a1:85:1f:37:
91:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:53:97:A1:A5:EE:FB:E4:AA:53:0E:C6:9E:94:4E:F4:C3:6D:F1:F5
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.134.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:c5:2f:d3:ab:90:e1:f4:98:c9:14:37:d3:8e:1d:a3:f8:ea:
13:9f:c2:14:7a:32:83:7e:19:51:83:57:52:ee:52:d7:24:f1:
92:cb:b8:2c:9e:7a:87:11:00:fe:dd:0c:fa:4f:c4:97:e2:1d:
7b:4c:28:db:ca:26:2b:b0:96:dd:5c:92:ad:75:5c:94:b1:d8:
b3:6f:92:91:19:72:88:ad:ec:fb:f0:45:07:93:6d:ba:85:5b:
14:35:2d:d4:0e:63:9a:c8:0d:ce:89:25:fa:96:9c:fd:a3:d6:
09:ff:19:42:8c:80:55:55:c8:e3:5f:00:7c:eb:53:99:cd:0c:
9d:49:69:17:5b:50:26:96:4f:9b:65:5e:b8:f5:70:b3:7c:29:
cf:66:96:95:b4:07:63:5d:bf:b3:e4:ca:06:6a:37:d9:46:5b:
27:5a:5d:2b:23:e0:c1:9c:ef:2b:ce:64:b1:eb:ba:d9:5d:94:
ec:07:80:52:a3:cc:e6:6d:be:bc:95:d4:e6:2d:2d:d8:d4:ec:
b6:9e:e7:a6:18:6f:f4:d8:af:a2:85:cd:80:ef:c2:3a:ea:ef:
f7:ef:55:7c:b0:b7:72:ae:ba:98:d8:17:27:2a:f1:94:b8:a3:
d6:3b:a4:c9:57:34:0e:04:5c:e4:19:f7:73:7a:2f:56:1b:e6:
71:11:27:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 11:34:51 2026 by rpki-client