
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32362e302f32342d3234203d3e203137363231.roa
File: 3137352e3130322e32362e302f32342d3234203d3e203137363231.roa (raw, json)
Hash identifier: ozLx4sdzj+SomxibCF6gakaKMUw47iHXTufwnrBfB68=
Subject key identifier: 25:5D:7D:50:DF:E8:D0:B5:D8:98:98:F9:2B:B1:AA:1C:5B:ED:BF:4D
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 7829C681B28C20E7F396D1E55250F8DE04CC421F
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32362e302f32342d3234203d3e203137363231.roa
Signing time: Tue 28 Apr 2026 03:01:21 +0000
ROA not before: Tue 28 Apr 2026 02:56:21 +0000
ROA not after: Tue 27 Apr 2027 03:01:21 +0000
asID: 17621
IP address blocks: 175.102.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:29:c6:81:b2:8c:20:e7:f3:96:d1:e5:52:50:f8:de:04:cc:42:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 02:56:21 2026 GMT
Not After : Apr 27 03:01:21 2027 GMT
Subject: CN=255D7D50DFE8D0B5D89898F92BB1AA1C5BEDBF4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:dc:aa:b0:9d:83:89:27:0b:cd:d8:bf:e4:70:
a0:ba:5e:2b:7e:01:c6:20:36:2e:bb:2a:c8:f4:ae:
20:b8:03:52:d8:33:a0:70:7c:a7:11:7d:fc:81:a3:
18:29:c3:b1:1d:16:ec:9a:88:a3:96:bd:ec:65:d7:
a3:82:f7:df:34:94:c4:64:df:c4:89:3a:65:6d:60:
e8:c6:9d:98:e5:28:31:53:e7:70:ff:9b:b9:92:de:
24:f7:55:91:ed:c2:60:96:64:cf:9e:b9:02:8a:16:
14:7c:67:4d:df:cd:2f:a3:c3:bc:ea:3e:3c:ed:2a:
29:20:5f:50:bd:67:36:9c:f3:40:0d:fa:6a:2e:37:
b8:88:53:19:73:93:b1:9e:4e:f5:c6:41:c9:60:aa:
52:14:24:2e:d2:d1:4f:a2:5d:66:0e:41:dd:a3:b3:
3e:75:a5:c7:b3:9b:41:d6:8a:94:1c:70:7e:dd:02:
78:bf:30:bd:79:7d:74:36:9a:b4:48:bc:58:40:4f:
93:9a:f4:f5:bb:01:9e:da:44:58:8f:49:f2:bb:ca:
08:e5:86:e5:c6:81:1f:cd:74:2e:74:4d:94:66:64:
52:56:df:cd:c5:2e:75:fc:cc:e8:5b:f5:3f:11:84:
ea:49:b2:b9:b3:42:0b:a6:86:85:b9:f3:5f:da:5c:
81:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5D:7D:50:DF:E8:D0:B5:D8:98:98:F9:2B:B1:AA:1C:5B:ED:BF:4D
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32362e302f32342d3234203d3e203137363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.26.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:b3:45:01:c5:79:31:2d:ed:f2:76:64:65:59:83:66:c6:94:
d2:e1:62:d6:7f:31:f5:95:3b:e5:5f:fe:ed:5a:15:ed:44:fe:
b4:63:bb:d2:7f:ab:04:55:5f:b9:49:46:79:cd:dd:e5:cf:88:
4d:4f:4e:62:9d:93:df:8a:3f:cc:0e:8f:18:f6:77:74:84:1c:
43:05:70:05:66:08:60:a9:46:c8:8e:aa:91:06:02:a1:6a:6f:
df:e0:88:b1:84:c6:5b:75:92:69:54:68:a1:84:82:04:31:74:
45:93:40:1f:c8:0a:df:d9:5d:cb:26:b2:3c:f3:02:ac:e1:89:
a5:c2:49:4a:d9:0e:65:4f:6d:f3:96:dd:93:00:b0:9c:bf:57:
5e:ea:ab:bf:f7:91:96:8c:d3:d6:e7:f6:2d:b1:89:a2:63:28:
08:58:2f:0e:81:11:9b:62:4e:f6:4d:83:28:ec:fa:1d:de:75:
f8:14:69:72:2d:91:7c:43:ba:73:e3:da:33:c5:01:32:59:ce:
0b:6a:58:46:3a:a9:75:d9:86:48:ef:ea:f9:c3:03:32:ef:cd:
b6:83:61:76:9c:8a:c1:35:ad:93:fa:60:3b:ae:2a:5a:27:32:
05:0b:30:64:78:cc:ca:d5:72:e0:b2:51:27:57:d4:6b:aa:d6:
62:af:4f:8a
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:57:58 2026 by rpki-client