
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3137322e302f32322d3232203d3e203435303836.roa
File: 3137352e3130322e3137322e302f32322d3232203d3e203435303836.roa (raw, json)
Hash identifier: adfaVySQes7LJpCfOku+dxn5r2b6aWsMrYdF+3D6Tdo=
Subject key identifier: 9C:F4:F8:1B:DE:88:E4:C9:40:D6:22:0A:38:D9:FC:AF:A9:71:BB:C9
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 5CF47E2B430586BE8C798C6CC72BF1755630E037
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3137322e302f32322d3232203d3e203435303836.roa
Signing time: Tue 28 Apr 2026 03:14:19 +0000
ROA not before: Tue 28 Apr 2026 03:09:19 +0000
ROA not after: Tue 27 Apr 2027 03:14:19 +0000
asID: 45086
IP address blocks: 175.102.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:f4:7e:2b:43:05:86:be:8c:79:8c:6c:c7:2b:f1:75:56:30:e0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 03:09:19 2026 GMT
Not After : Apr 27 03:14:19 2027 GMT
Subject: CN=9CF4F81BDE88E4C940D6220A38D9FCAFA971BBC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7d:e0:c4:ee:d1:78:79:ec:4b:82:89:a9:a3:
25:f9:ef:4f:d6:39:38:5e:a7:b9:21:5a:12:2d:2e:
03:ca:73:92:c6:e9:2e:43:64:87:64:b9:a1:3d:fc:
97:e3:5c:6e:bc:12:2f:d8:e5:08:b2:db:4c:83:ab:
ad:bd:36:ce:d8:96:76:77:fe:63:8b:74:c2:9d:02:
e6:5a:06:e9:32:70:1a:41:0a:cb:cd:54:06:1d:18:
0a:80:28:6b:d8:25:f2:04:7e:2d:1b:ae:2f:58:ab:
2b:75:4a:21:ba:f6:49:7f:75:ad:15:d5:f8:21:50:
66:59:43:4b:32:0b:10:8d:23:62:4a:fb:ca:33:34:
33:86:57:f3:54:48:0b:8c:30:96:88:34:ee:3a:2a:
c0:26:a6:75:d6:7e:75:94:13:d7:ce:c8:07:68:a5:
62:f0:51:cd:c1:01:4c:52:82:55:84:30:0c:0e:ae:
97:1b:0b:6e:e0:3d:ff:98:cf:67:c1:6c:ac:b4:a8:
01:8c:af:a3:aa:e1:21:3a:09:af:90:41:c9:4b:cf:
41:6b:bd:53:9d:b9:6a:d4:59:13:23:8c:b8:d5:6c:
30:64:ad:10:a6:ca:09:bf:ce:d7:a1:39:41:00:38:
ea:d9:01:a6:0e:fe:7c:c7:35:6f:08:84:44:13:89:
a0:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:F4:F8:1B:DE:88:E4:C9:40:D6:22:0A:38:D9:FC:AF:A9:71:BB:C9
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3137322e302f32322d3232203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.172.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:78:cb:0b:cd:d8:ca:4a:26:74:c4:25:44:94:ef:d7:e2:2e:
ce:ea:00:e4:6e:ce:66:d3:d2:ea:39:38:e4:48:61:c3:1e:51:
2d:f7:bc:04:22:41:cb:cd:02:08:46:8a:74:36:46:6e:96:87:
4d:3b:00:d5:4c:b9:cd:44:32:90:ca:ef:78:d6:aa:d4:17:b8:
43:e4:17:d5:5d:f1:c0:b5:12:59:01:ae:9c:37:c4:76:7e:97:
f1:65:00:65:9e:01:eb:8c:2e:b6:9a:a8:79:48:a5:75:2e:30:
81:97:88:9d:b5:9b:6d:a4:ad:67:73:70:77:0a:1d:ff:1b:02:
5a:74:6e:f8:1f:ea:57:78:50:ce:17:70:09:de:c7:57:a0:fc:
b0:44:06:91:f4:9d:a0:1d:23:2f:82:47:e6:b9:40:e1:02:95:
d7:c4:ac:ed:7c:3f:5a:cd:a5:84:68:84:14:3d:e5:f3:58:7a:
92:97:43:bd:b1:7f:2e:0d:46:f4:47:67:db:a1:23:69:17:56:
4b:cc:62:89:62:56:94:9a:c1:c3:92:ab:bd:50:47:68:ab:60:
3b:ca:4e:2d:68:70:5f:01:3d:65:14:e6:b5:e0:18:47:d2:82:
7d:3f:eb:4f:2a:18:e7:c2:23:55:8f:bf:0a:7c:e5:ac:89:57:
ee:49:f5:1b
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUXPR+K0MFhr6MeYxsxyvxdVYw4DcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy
NUIwMkMwOTAeFw0yNjA0MjgwMzA5MTlaFw0yNzA0MjcwMzE0MTlaMDMxMTAvBgNV
BAMTKDlDRjRGODFCREU4OEU0Qzk0MEQ2MjIwQTM4RDlGQ0FGQTk3MUJCQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5feDE7tF4eexLgompoyX570/W
OThep7khWhItLgPKc5LG6S5DZIdkuaE9/JfjXG68Ei/Y5Qiy20yDq629Ns7YlnZ3
/mOLdMKdAuZaBukycBpBCsvNVAYdGAqAKGvYJfIEfi0bri9Yqyt1SiG69kl/da0V
1fghUGZZQ0syCxCNI2JK+8ozNDOGV/NUSAuMMJaINO46KsAmpnXWfnWUE9fOyAdo
pWLwUc3BAUxSglWEMAwOrpcbC27gPf+Yz2fBbKy0qAGMr6Oq4SE6Ca+QQclLz0Fr
vVOduWrUWRMjjLjVbDBkrRCmygm/ztehOUEAOOrZAaYO/nzHNW8IhEQTiaBZAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUnPT4G96I5MlA1iIKONn8r6lxu8kwHwYDVR0j
BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD
NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMDA5Njc4ODI3MTM0NjQ4MzUvMC8zMTM3MzUyZTMx
MzAzMjJlMzEzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNTMwMzgzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAq9mrDANBgkqhkiG9w0BAQsFAAOCAQEASnjLC83YykomdMQlRJTv
1+IuzuoA5G7OZtPS6jk45Ehhwx5RLfe8BCJBy80CCEaKdDZGbpaHTTsA1Uy5zUQy
kMrveNaq1Be4Q+QX1V3xwLUSWQGunDfEdn6X8WUAZZ4B64wutpqoeUildS4wgZeI
nbWbbaStZ3Nwdwod/xsCWnRu+B/qV3hQzhdwCd7HV6D8sEQGkfSdoB0jL4JH5rlA
4QKV18Ss7Xw/Ws2lhGiEFD3l81h6kpdDvbF/Lg1G9Edn26EjaRdWS8xiiWJWlJrB
w5KrvVBHaKtgO8pOLWhwXwE9ZRTmteAYR9KCfT/rTyoY58IjVY+/CnzlrIlX7kn1
Gw==
-----END CERTIFICATE-----
Generated at Wed May 13 15:39:19 2026 by rpki-client