
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3137362e302f32332d3233203d3e203435303836.roa
File: 3137352e3130322e3137362e302f32332d3233203d3e203435303836.roa (raw, json)
Hash identifier: FClwVxIPPREw9ZYBxfcBnICRm+pSxfOdr5nIhFLE3E4=
Subject key identifier: 1C:B1:4E:11:A5:94:F5:E6:B8:89:4A:42:72:78:80:D7:DC:7C:0E:8B
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 082B656CB1C860A9040D6D1FE76FE17B630637E8
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3137362e302f32332d3233203d3e203435303836.roa
Signing time: Tue 28 Apr 2026 03:14:19 +0000
ROA not before: Tue 28 Apr 2026 03:09:19 +0000
ROA not after: Tue 27 Apr 2027 03:14:19 +0000
asID: 45086
IP address blocks: 175.102.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:2b:65:6c:b1:c8:60:a9:04:0d:6d:1f:e7:6f:e1:7b:63:06:37:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 03:09:19 2026 GMT
Not After : Apr 27 03:14:19 2027 GMT
Subject: CN=1CB14E11A594F5E6B8894A42727880D7DC7C0E8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d8:74:67:93:c3:a9:8f:c7:ab:a6:d7:9f:bd:
48:b6:d9:b9:1b:14:22:e4:15:f3:20:ca:7e:8d:9d:
13:d4:91:14:be:3b:f7:b1:08:7f:1b:5c:6e:5e:39:
45:05:6a:bb:e7:68:16:40:84:05:dd:95:c7:3b:4c:
6f:0e:dc:51:c7:47:de:1c:43:46:0e:c0:9d:60:df:
d0:df:d2:44:e6:66:d3:40:d8:bb:e0:95:02:99:d6:
a9:2b:13:a0:9d:5c:1f:59:9c:a4:b5:ce:1b:b6:65:
88:d5:67:0d:03:a0:58:f8:b9:aa:dc:07:70:58:60:
92:4b:34:fc:6b:ff:af:ed:7e:e1:48:55:36:75:9b:
84:d5:c8:9e:39:84:ca:0a:2a:3b:65:da:84:2a:fd:
05:fb:ff:cd:e0:18:de:d9:68:d4:00:4e:9c:fb:e1:
aa:a5:4e:33:e3:98:4d:88:b5:55:0f:8f:3e:de:a1:
b3:02:e2:9a:ab:86:69:0e:c7:c7:d6:ce:c0:2f:d0:
73:21:3e:b6:42:f8:51:d7:8f:73:94:4e:af:e6:1e:
85:1c:d0:1e:fa:d1:d8:67:fe:fd:15:5f:9a:ef:74:
ef:9d:60:ef:54:fc:1b:ce:ff:00:36:c5:f0:30:a1:
8e:ed:f2:be:91:a6:aa:69:90:23:d1:e4:77:f0:df:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B1:4E:11:A5:94:F5:E6:B8:89:4A:42:72:78:80:D7:DC:7C:0E:8B
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e3137362e302f32332d3233203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.176.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:74:1b:30:de:e9:63:7d:7a:96:21:f9:df:96:1a:35:b4:40:
9b:d4:7b:26:66:8e:cb:29:a5:f6:14:fd:0f:cf:96:da:b2:93:
04:b0:30:c2:c6:68:2c:0b:96:cf:97:10:72:59:2b:61:f0:20:
85:16:33:33:6f:bc:db:23:fa:4f:9c:c8:10:2a:f9:fd:cf:bf:
f7:ea:a4:a7:3c:47:5e:37:bd:92:c7:32:cf:71:12:0b:38:c3:
fe:d9:9d:8b:3f:73:38:21:18:a8:c3:8d:28:88:98:4c:34:dc:
f6:5f:e0:33:f7:7c:ef:50:bc:cf:55:f3:57:2c:cd:ec:ce:55:
0d:bd:1f:60:ae:be:a9:16:d1:67:f7:4c:6d:a4:b6:4d:2c:1c:
fc:ac:01:79:a4:e9:b0:35:6f:85:68:59:8c:75:15:ee:15:51:
18:84:30:fb:3a:83:07:ec:0c:a0:77:d3:26:bc:31:98:ae:39:
1f:5f:0b:58:61:48:ba:72:5e:0b:36:cf:76:b0:2f:a0:69:3a:
2f:3a:2c:f0:61:67:88:37:b2:93:22:5a:7b:84:44:21:b6:48:
65:cd:ff:73:3a:4b:f8:27:55:20:a9:e8:45:1f:3b:a6:95:aa:
6c:0f:be:9e:b9:81:df:90:f1:9e:0b:2e:9d:5a:7b:be:b5:75:
21:67:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:40:11 2026 by rpki-client