
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32302e302f32342d3234203d3e203137363231.roa
File: 3137352e3130322e32302e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: fwfzpae9Q16Ky0J2T0S03xDe/JnLWAeSU/5/SURxEF4=
Subject key identifier: CD:27:7B:7A:10:4B:F9:0D:9F:EE:D0:12:A1:1F:4E:31:97:E6:DD:D2
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 18ECF574B611B365417C5D8CE82E96A5FC777B35
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32302e302f32342d3234203d3e203137363231.roa
Signing time: Thu 07 May 2026 01:43:20 +0000
ROA not before: Thu 07 May 2026 01:38:20 +0000
ROA not after: Thu 06 May 2027 01:43:20 +0000
asID: 17621
IP address blocks: 175.102.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:ec:f5:74:b6:11:b3:65:41:7c:5d:8c:e8:2e:96:a5:fc:77:7b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:38:20 2026 GMT
Not After : May 6 01:43:20 2027 GMT
Subject: CN=CD277B7A104BF90D9FEED012A11F4E3197E6DDD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:5f:89:b7:db:73:e2:ce:1c:e7:32:25:f5:
8a:c4:36:3c:84:66:2b:2f:13:9a:e5:8f:0d:7f:8c:
a6:a9:da:6a:f5:d9:55:58:d8:39:df:f2:b7:ea:6f:
23:42:0d:c5:07:e4:18:60:a8:fc:20:9a:4f:a5:5f:
83:c9:90:ce:52:09:d5:fa:2e:7d:d9:17:83:e1:1a:
3e:73:aa:98:38:e6:2f:88:88:ba:ad:47:37:ec:07:
b8:0e:99:df:80:f6:7c:44:c8:40:96:e9:41:c0:d1:
e8:91:ed:4d:62:d4:26:d1:50:ce:f0:b3:c1:0a:0b:
fa:43:2f:dc:62:54:9c:b0:3e:ff:de:46:26:a8:89:
ff:f0:e1:41:93:5b:8c:b5:87:c8:ad:18:75:1b:90:
2d:05:8d:44:35:7d:12:ee:33:06:83:7f:2e:97:41:
50:95:a7:de:1b:1a:f8:06:fd:66:ec:c4:d0:2e:59:
35:c9:94:9e:e4:62:53:01:80:a3:b2:3f:81:13:67:
39:8a:1c:b2:53:09:b8:24:80:ff:e5:18:25:34:b1:
2f:9f:85:b3:6c:ef:35:db:22:92:3b:ce:26:3b:bb:
1c:e4:1a:27:60:5c:1e:6c:c8:79:1e:7d:17:8e:80:
53:14:17:55:72:70:d6:58:86:07:8a:e9:f6:4d:d3:
4e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:27:7B:7A:10:4B:F9:0D:9F:EE:D0:12:A1:1F:4E:31:97:E6:DD:D2
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32302e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.20.0/24
Signature Algorithm: sha256WithRSAEncryption
20:3b:29:5c:99:33:56:e1:86:e4:54:a1:5f:13:8f:4a:92:c8:
0c:b5:74:ee:9e:6e:28:56:2d:6a:ee:3c:6d:2c:27:f7:0b:88:
39:54:4c:5e:cf:20:4f:fb:08:d2:cc:da:47:f2:bb:33:b4:13:
a4:bd:34:f0:d5:94:e5:cd:f0:3e:75:a3:5a:66:5e:57:c6:f1:
6e:4e:0e:55:d2:9a:dc:29:ed:e0:72:f8:ba:42:3c:64:11:bc:
a4:c2:85:b8:7b:b0:c4:86:21:56:d5:c6:e5:f2:19:c3:94:6e:
79:00:29:91:1c:18:e3:cb:a8:87:27:16:74:79:ff:b3:4b:a1:
0d:b6:47:b0:87:e0:40:6c:e3:5d:c2:74:8f:74:fa:be:fe:89:
cd:49:db:36:81:c2:2a:1b:e0:9e:13:d8:ca:0d:a7:3c:20:fc:
01:a5:9d:5f:ab:66:b7:37:b8:c2:f5:84:12:fd:3b:32:3d:71:
0d:a5:e8:38:78:fa:34:4c:51:51:af:2d:f8:05:35:91:fd:a8:
c3:aa:55:53:24:0d:59:46:96:c7:a8:fc:18:d5:e5:67:6d:56:
c6:8a:20:cf:d6:91:d9:32:a5:ab:c3:63:f9:fd:21:cc:e8:14:
01:f8:e6:ca:a7:c5:82:f5:be:93:5a:57:00:64:48:70:b0:30:
d6:f1:a4:96
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:25:22 2026 by rpki-client