
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32342d3234203d3e2034383131.roa
File: 3137352e3130322e3133342e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: ntrz9Z+FpP/F0BPDPoYr1I199C3IPYeN1QBnN0bxRiM=
Subject key identifier: A0:39:FD:4D:E0:15:7D:C3:A0:E4:EC:0B:AC:6B:F2:00:EB:C5:BD:32
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 41F63CABD0867F94DE6F25215A12054DB300D063
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32342d3234203d3e2034383131.roa
Signing time: Thu 07 May 2026 01:49:11 +0000
ROA not before: Thu 07 May 2026 01:44:11 +0000
ROA not after: Thu 06 May 2027 01:49:11 +0000
asID: 4811
IP address blocks: 175.102.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:f6:3c:ab:d0:86:7f:94:de:6f:25:21:5a:12:05:4d:b3:00:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:44:11 2026 GMT
Not After : May 6 01:49:11 2027 GMT
Subject: CN=A039FD4DE0157DC3A0E4EC0BAC6BF200EBC5BD32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:f8:8b:75:d9:34:ee:cd:b8:4e:4a:fb:3d:fd:
58:ef:01:49:3e:8f:91:36:d4:f7:ed:6e:9a:65:d7:
ea:14:70:35:c7:81:37:b9:6f:80:50:99:94:70:f1:
1d:84:e9:98:37:3f:2e:ca:4a:e2:68:bd:8a:42:64:
fc:d2:c1:8e:ad:35:d4:a8:dd:14:08:ea:44:2b:ab:
67:62:2f:ef:6b:8d:ca:97:fc:4d:60:8a:39:12:10:
a2:f1:0a:08:2d:89:67:65:0c:02:3e:3b:39:0a:2e:
fa:33:b8:3e:23:36:e9:e4:52:a3:bc:bc:b9:bf:89:
57:19:e8:13:f4:59:fa:bf:a1:31:ba:3d:36:09:d6:
48:a7:61:43:43:cd:68:a5:a2:85:3a:7c:d5:9e:a3:
03:33:65:53:62:d3:41:d2:68:3b:a1:b0:87:ca:91:
4e:ff:59:79:0e:99:91:0a:fb:44:58:77:6a:c4:01:
ca:e7:09:cb:d8:ed:c6:b7:d3:16:cd:ba:8b:f8:29:
8a:7f:02:8b:58:2d:af:db:0a:77:14:72:40:de:87:
49:b6:16:f4:89:b5:78:53:2a:0a:44:51:9e:bc:20:
57:f2:2b:58:65:f9:d8:42:87:67:b1:12:d9:72:16:
d0:ab:ee:b8:05:5c:43:e1:5c:e2:81:ed:b9:57:99:
09:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:39:FD:4D:E0:15:7D:C3:A0:E4:EC:0B:AC:6B:F2:00:EB:C5:BD:32
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133342e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.134.0/24
Signature Algorithm: sha256WithRSAEncryption
26:6f:b9:fc:d1:32:85:b2:66:24:cb:dc:38:97:d8:ef:54:82:
83:34:1c:8a:13:46:f4:af:2c:5c:f0:89:be:98:3f:fd:a6:e8:
7b:ee:f7:e8:61:69:6c:f7:d6:4a:e2:95:91:e7:b2:13:dd:57:
6c:55:ea:49:45:06:ce:46:02:62:84:8e:ed:81:94:ad:85:58:
34:cb:03:92:de:56:1a:03:25:df:46:5e:97:74:cd:1f:4a:8e:
76:32:7e:9d:44:94:d6:5c:4e:dd:5f:53:16:74:b1:43:8f:4e:
79:96:6e:6b:d4:c2:63:69:af:09:04:ee:6d:59:c8:a8:5a:61:
64:6d:f4:15:10:47:e0:cf:b8:a3:e9:06:3c:6c:f2:d8:81:9d:
d7:19:e0:13:d1:f2:ff:8b:02:10:02:02:65:ce:6a:11:c1:a7:
82:5a:68:d1:ad:d9:3c:b9:76:b8:25:98:f7:65:a4:c3:c0:c1:
ed:d5:e8:3c:2d:2c:59:54:23:11:fc:52:3b:b5:cb:03:bf:3b:
fc:94:10:5c:85:25:ca:ba:51:af:14:20:d1:31:a2:9f:65:8d:
0e:23:7e:ef:b4:00:b5:d3:9e:2c:dc:65:02:21:24:0a:2a:d8:
98:f8:f9:93:33:40:9f:68:1c:ac:09:28:d0:73:29:43:a5:6b:
a7:c8:22:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:53:03 2026 by rpki-client