
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133362e302f32312d3231203d3e203435303836.roa
File: 3137352e3130322e3133362e302f32312d3231203d3e203435303836.roa (raw, json)
Hash identifier: xSfk+boX1Bi11f33puNKWKqCYc8AxFAx0m93EuNIPkw=
Subject key identifier: 52:31:9F:FE:B9:0D:77:6F:55:8C:7D:42:9E:88:B3:BE:01:A9:EF:DE
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 6A67A8676BC4C7D954D960669018689E5B30F169
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133362e302f32312d3231203d3e203435303836.roa
Signing time: Tue 28 Apr 2026 03:02:33 +0000
ROA not before: Tue 28 Apr 2026 02:57:33 +0000
ROA not after: Tue 27 Apr 2027 03:02:33 +0000
asID: 45086
IP address blocks: 175.102.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:67:a8:67:6b:c4:c7:d9:54:d9:60:66:90:18:68:9e:5b:30:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 02:57:33 2026 GMT
Not After : Apr 27 03:02:33 2027 GMT
Subject: CN=52319FFEB90D776F558C7D429E88B3BE01A9EFDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:31:ca:04:7a:f8:e7:f2:62:e6:4f:11:f9:
02:41:68:bd:a7:40:f6:64:3a:f8:b3:58:b3:ac:f0:
27:b0:af:e8:38:d1:1c:dc:c0:1c:95:d5:44:77:5b:
bd:7b:93:e8:d5:ce:53:a5:76:3c:ef:00:85:f3:80:
79:ce:38:61:da:64:1b:af:31:ae:7e:41:c1:59:cf:
68:32:74:c2:da:ef:db:53:64:6b:ff:b0:d1:ab:17:
b8:fa:7b:ed:0b:df:a6:de:98:f2:2d:fa:6d:8e:be:
e6:9a:fb:20:4e:ec:96:f3:11:a7:37:df:f0:bd:a7:
4e:a5:1f:01:3e:97:c7:e4:44:f2:90:fc:61:06:d8:
f9:29:e1:69:49:d0:18:86:51:24:e6:b7:ba:27:9a:
9c:8a:a9:f3:94:11:ac:d7:a6:00:fb:8a:25:b7:f2:
89:0f:1b:34:66:8b:c4:7f:ce:76:ec:98:51:cd:ee:
fb:d8:c0:8a:72:0b:b0:e3:73:d4:74:b4:89:ab:e6:
35:0a:16:ff:39:b0:66:33:63:bf:c6:60:33:ed:71:
11:0d:17:f0:ec:a5:87:d5:0e:10:65:ae:fc:cb:db:
10:4f:8d:1b:00:70:76:1b:52:15:1b:03:fc:2b:68:
ef:97:80:5a:27:d2:e9:34:1f:34:ad:0d:51:c0:20:
58:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:31:9F:FE:B9:0D:77:6F:55:8C:7D:42:9E:88:B3:BE:01:A9:EF:DE
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3133362e302f32312d3231203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.136.0/21
Signature Algorithm: sha256WithRSAEncryption
39:d9:ae:ba:69:b1:a6:94:94:33:65:bb:27:33:43:7c:9a:f3:
d4:3f:2d:3a:65:94:14:ba:b7:a0:5c:20:43:e8:9a:70:1f:94:
b0:9c:83:34:0c:17:00:a4:fe:8d:21:78:32:59:16:7f:7c:43:
cf:f5:80:d5:0b:90:21:23:a7:6e:4e:c4:25:54:e0:c3:b4:48:
c8:8b:ac:c1:83:37:b5:30:f2:fc:81:73:37:87:0a:e9:b7:dd:
95:8f:33:e6:e9:1d:c7:1a:6a:c0:df:05:cc:95:bc:ef:81:8d:
74:43:38:fb:52:4f:bd:ca:49:1d:9f:10:dc:d7:f6:ab:d1:3d:
c2:8b:4b:6a:0b:6f:7d:cd:a9:b5:7d:75:13:a2:5b:23:3d:b4:
b4:c3:d8:35:64:17:d0:e8:4e:c1:a2:5d:86:76:cd:24:9b:6a:
47:93:a4:ec:26:3e:df:d6:7a:a3:0c:f9:f9:d4:07:a1:87:f8:
1c:e4:26:c8:79:6f:4c:56:bb:a0:18:da:28:25:f8:85:71:b4:
14:4f:4f:cd:4b:44:78:78:1b:b9:f9:ea:6a:4b:14:cb:67:a7:
d3:03:ea:ca:f3:91:17:d5:92:57:87:c3:9f:44:0b:e6:1a:5c:
f5:33:74:1e:59:8a:21:9d:49:7b:e8:cd:65:e7:5a:b4:49:e9:
74:04:96:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:54:29 2026 by rpki-client