
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31372e302f32342d3234203d3e2034383131.roa
File: 3137352e3130322e31372e302f32342d3234203d3e2034383131.roa (raw, json)
Hash identifier: XQjjCavEHR9+Z0Fb8PKx2+wHFGD0DTNHHKbk3Tju8ng=
Subject key identifier: DD:9B:3F:5E:C4:4D:DB:60:A0:44:D0:7D:05:73:9E:84:A6:85:EF:F5
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 676A4021DEB5CF301B4A83057F7E298A078A31AA
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31372e302f32342d3234203d3e2034383131.roa
Signing time: Thu 07 May 2026 01:42:34 +0000
ROA not before: Thu 07 May 2026 01:37:34 +0000
ROA not after: Thu 06 May 2027 01:42:34 +0000
asID: 4811
IP address blocks: 175.102.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:6a:40:21:de:b5:cf:30:1b:4a:83:05:7f:7e:29:8a:07:8a:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:37:34 2026 GMT
Not After : May 6 01:42:34 2027 GMT
Subject: CN=DD9B3F5EC44DDB60A044D07D05739E84A685EFF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fd:13:a0:a6:94:62:43:32:91:d7:1f:5c:13:
37:2e:b3:62:ca:d6:a4:d5:e1:d7:e6:7a:7a:2d:83:
98:0c:09:3b:da:77:f4:4a:41:d1:df:92:9c:60:e6:
8a:f4:09:f8:ac:fa:02:9d:1b:6a:90:3b:ec:1e:cb:
5c:f7:44:8f:45:1f:0a:24:a3:0a:e8:1e:e0:2e:7b:
ce:f0:23:49:81:ee:36:a2:6a:18:6a:94:d8:7e:6a:
c5:14:60:a6:f1:0d:e4:3d:8a:7f:2a:0a:87:8e:dd:
6e:96:4d:a1:39:be:a0:64:89:9f:fa:00:6a:62:bf:
f5:6c:8a:73:5b:c6:59:c4:12:1b:b4:90:8d:31:04:
af:1a:ef:20:c5:de:9f:83:b5:30:80:42:2f:f4:cd:
1e:a9:f4:8c:5a:ae:ce:c8:12:08:16:df:fc:e0:fb:
b1:52:2e:a5:26:8c:5d:26:66:47:e3:a3:a8:9a:59:
eb:90:9f:8c:c9:32:1c:f8:0a:37:e3:ed:d7:8e:b6:
bb:c4:8a:b7:df:65:d8:5e:e7:df:46:a9:e1:40:0a:
39:31:ae:9d:50:1c:d5:cf:bd:fb:04:b6:d2:3d:65:
69:fd:51:b5:4c:ab:51:96:3a:1a:4f:36:66:d7:66:
d9:50:33:e0:6e:af:9f:00:b7:06:5e:3c:05:58:12:
c5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:9B:3F:5E:C4:4D:DB:60:A0:44:D0:7D:05:73:9E:84:A6:85:EF:F5
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e31372e302f32342d3234203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.17.0/24
Signature Algorithm: sha256WithRSAEncryption
84:d2:5e:43:60:d2:45:a7:74:34:04:e2:79:51:03:05:55:34:
6e:8b:9f:d3:11:52:0a:2d:e9:7a:70:e6:11:3e:e7:48:f8:a3:
af:90:d4:49:8f:40:8c:00:bf:cf:5e:47:dc:9d:5f:15:12:0a:
2f:dd:75:d4:65:a1:79:b8:9c:6a:93:b5:f6:0c:02:d2:0e:52:
2c:74:8a:6a:01:ed:61:dd:a6:d9:c4:54:12:7d:cf:7b:07:4b:
69:16:6a:09:e1:ab:6c:8a:31:d1:94:d2:30:09:7c:f8:59:e6:
9b:1f:39:ec:7e:a6:c9:2f:35:eb:26:a2:6e:a7:a3:30:ca:a9:
c0:ec:ad:75:48:61:64:4a:7b:c3:71:9f:3c:92:11:c1:64:80:
c4:a8:53:fa:f8:fb:f5:75:7e:fa:84:9c:0a:20:b3:6b:30:5d:
32:68:70:7c:4a:1d:26:ba:ad:67:1d:33:ac:6e:c9:81:3c:9b:
29:c4:59:68:c6:bd:5d:52:e5:93:bc:26:2e:9d:c0:d9:71:2d:
f2:9f:78:2b:6c:d8:1a:1e:76:12:f3:2f:ad:46:08:4a:bc:33:
04:3c:68:bb:11:cb:76:44:30:23:c8:bf:62:35:ce:26:d7:11:
5a:04:8f:82:dd:f3:67:2a:f5:84:d2:da:a3:88:1a:f7:98:cc:
c7:48:64:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:55 2026 by rpki-client