
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32352e302f32342d3234203d3e203137363231.roa
File: 3137352e3130322e32352e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: 1aenDgjHABAcWcqox6VeR1h253y4XN8dpoWrUxq2n+4=
Subject key identifier: 86:D5:F5:AD:1C:42:9C:0C:8C:E4:24:E3:FB:37:BE:65:1C:21:A1:9F
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 558AE2797F40457DC16DDF312440FA8E223871A4
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32352e302f32342d3234203d3e203137363231.roa
Signing time: Thu 07 May 2026 01:43:19 +0000
ROA not before: Thu 07 May 2026 01:38:19 +0000
ROA not after: Thu 06 May 2027 01:43:19 +0000
asID: 17621
IP address blocks: 175.102.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:8a:e2:79:7f:40:45:7d:c1:6d:df:31:24:40:fa:8e:22:38:71:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: May 7 01:38:19 2026 GMT
Not After : May 6 01:43:19 2027 GMT
Subject: CN=86D5F5AD1C429C0C8CE424E3FB37BE651C21A19F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2f:82:4f:a4:26:bd:65:16:c7:de:f0:f2:b0:
bb:4b:0b:c0:b1:55:3a:55:a0:b5:ca:0e:08:06:3c:
25:17:66:3a:a3:e0:6d:40:5c:09:15:be:3b:19:c7:
33:66:3a:39:96:36:09:a2:25:db:7c:4e:45:00:db:
a0:27:dd:72:d0:58:0d:4b:af:44:ae:df:e2:7c:e0:
56:3c:12:18:10:bb:2d:32:e9:bd:37:c2:73:87:f4:
a0:84:c8:3c:9b:47:eb:1d:d0:28:33:84:b6:19:99:
ca:c0:bf:dd:9e:93:de:a7:16:13:de:9b:c4:b4:8c:
7f:dc:5e:30:61:1c:fa:ab:08:4c:ec:22:b9:d4:bd:
71:6d:e0:ea:3b:17:47:d5:4f:0b:64:40:4a:c3:ed:
28:28:ce:94:26:cd:51:4f:ca:f9:20:74:cb:ae:f2:
89:ee:52:a1:8e:b1:a2:62:5e:03:a8:e5:41:bd:96:
66:9b:c2:74:d3:fb:95:93:44:0d:09:65:0e:14:45:
3a:c7:72:18:0c:03:94:6b:75:6f:ef:27:33:7a:24:
38:f2:a5:aa:cd:93:be:c8:0b:af:3a:27:ad:9c:94:
5d:d2:8b:39:ae:35:bb:19:78:da:73:28:6a:a9:72:
33:ab:e5:2e:de:d1:97:b8:bb:44:8c:8c:6b:b4:66:
c1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D5:F5:AD:1C:42:9C:0C:8C:E4:24:E3:FB:37:BE:65:1C:21:A1:9F
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32352e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.25.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:cf:5e:66:aa:01:a2:02:6d:bd:44:0d:0f:91:b2:3b:4d:e1:
0f:52:7b:8f:af:bb:a9:0e:89:41:52:9c:43:4b:ba:1c:c1:bd:
c4:12:a3:dd:aa:b9:f7:c3:c4:93:93:71:d8:3e:c5:fd:fa:14:
55:4d:19:97:d1:6b:3b:1c:8a:60:91:b8:6a:ba:98:49:9c:05:
75:75:75:7f:f6:40:c3:78:10:54:48:9f:79:c1:22:40:7b:b6:
ca:ce:22:bb:da:17:99:16:c4:c5:01:c7:a4:90:97:e1:63:f9:
bb:7e:12:21:cb:32:fd:90:35:28:d8:b3:0e:6b:27:d4:cc:83:
cb:f3:09:12:1f:a7:6a:cd:11:d0:b7:0f:c9:37:e5:43:22:b3:
f7:80:24:99:46:30:22:0e:fd:77:4b:93:5d:3b:e1:81:40:e2:
51:05:81:60:ea:92:42:c9:dc:13:ba:98:6b:35:46:da:48:43:
20:c7:05:6e:be:4c:e9:f3:ff:7b:27:3b:9d:b1:06:49:71:5b:
15:59:87:b2:96:74:83:e7:51:f6:a7:0b:d9:4f:b0:af:1e:e1:
93:f0:1f:df:3f:b6:8b:4e:37:23:ea:ac:b6:86:53:c0:a8:91:
fe:f9:eb:94:54:f5:ae:48:16:b3:dc:ff:46:81:cd:e0:17:b5:
e2:3d:ce:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 16:19:55 2026 by rpki-client