
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32392e302f32342d3234203d3e203435303836.roa
File: 3137352e3130322e32392e302f32342d3234203d3e203435303836.roa (raw, json)
Hash identifier: s6HWE7w+jQi4b3ozLQWNYf8v2dmOxFc/3N4V67Y8XjM=
Subject key identifier: 08:C5:5F:71:8B:EF:37:2A:6B:27:E6:5C:AC:47:41:4E:2D:17:B2:B2
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 3BDADB1CD08824B0204AA78531466626715580FB
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32392e302f32342d3234203d3e203435303836.roa
Signing time: Tue 28 Apr 2026 03:01:22 +0000
ROA not before: Tue 28 Apr 2026 02:56:22 +0000
ROA not after: Tue 27 Apr 2027 03:01:22 +0000
asID: 45086
IP address blocks: 175.102.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:da:db:1c:d0:88:24:b0:20:4a:a7:85:31:46:66:26:71:55:80:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 02:56:22 2026 GMT
Not After : Apr 27 03:01:22 2027 GMT
Subject: CN=08C55F718BEF372A6B27E65CAC47414E2D17B2B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:47:82:19:0b:69:ea:fc:ac:d5:17:95:b0:e3:
1d:d5:2d:be:2c:22:7c:95:3b:44:35:ec:ef:f8:2c:
81:38:9e:88:01:23:de:fc:a6:af:5c:c8:0d:e9:94:
e3:12:5a:47:f4:24:9d:8e:42:58:8c:5e:21:ec:34:
66:91:6d:96:eb:62:08:ff:03:f7:21:38:a6:71:a5:
0d:26:8e:be:b2:22:ef:f6:b0:cb:5d:5c:c6:6c:ef:
8f:b0:3a:0c:fc:47:f2:21:a0:75:ee:f0:16:e7:55:
f1:fe:fb:74:56:a6:58:64:b6:06:3c:ac:77:96:84:
20:9e:4c:6c:08:30:81:02:64:8e:02:04:58:04:59:
12:27:3e:18:2e:0c:9b:ed:b1:66:d4:b4:3b:02:36:
c5:c9:7e:3d:66:57:52:e9:5b:9d:ca:b0:1a:70:be:
6d:96:18:2d:aa:97:40:c3:00:4e:8a:1a:ad:19:dd:
b2:4f:3e:fa:4a:37:33:3b:18:1e:a4:29:b4:9a:14:
61:04:1b:78:3e:e5:82:d6:68:71:a8:86:ae:48:61:
3e:53:1e:52:16:f7:10:94:15:b7:f4:65:54:86:b8:
24:d5:9d:53:cd:d4:d7:b0:c5:09:5c:7a:48:0f:99:
7f:52:f4:07:4e:32:8f:14:a3:45:cd:26:ab:d3:87:
c4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C5:5F:71:8B:EF:37:2A:6B:27:E6:5C:AC:47:41:4E:2D:17:B2:B2
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e32392e302f32342d3234203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.29.0/24
Signature Algorithm: sha256WithRSAEncryption
15:b9:c5:89:b2:7c:eb:bb:18:04:ac:be:7b:ad:0f:96:f5:07:
11:20:55:52:2a:8b:50:a1:6a:54:48:7b:be:27:6d:a8:5e:a1:
48:ed:0b:d5:c2:08:2b:28:6c:18:71:bb:d2:ee:42:89:0f:70:
9b:15:68:23:a7:08:8b:5d:d2:69:e5:5c:cb:15:6d:c0:2c:8d:
d3:d8:13:3b:6a:fd:b0:41:d8:88:65:25:82:2e:86:c4:f1:b1:
33:8a:6b:ee:99:bf:c8:d1:48:f6:3c:7d:a8:9f:1e:0a:60:1e:
d6:b4:af:7e:f1:34:f2:62:bb:c9:2d:f0:37:f7:f0:49:6d:63:
76:f4:d9:4a:3a:ac:e5:9f:98:b5:43:09:14:ee:42:b1:43:a2:
c7:c5:03:a3:b9:7a:7b:cb:9c:ec:33:d7:af:30:f8:01:28:f0:
55:f1:70:ff:ce:53:a7:da:20:60:13:e8:68:54:ca:c8:46:4f:
80:08:9c:de:5a:4e:20:33:71:cd:9d:17:f5:3f:01:8c:49:89:
59:f5:11:0b:d5:d1:cb:5d:df:bb:05:bf:c0:22:f1:fc:d2:51:
94:62:af:e9:86:b8:97:f3:e1:71:81:87:75:dd:f0:db:df:54:
99:dd:85:84:b8:87:af:50:89:04:46:c9:de:90:0f:6b:30:7f:
0b:0d:12:16
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUO9rbHNCIJLAgSqeFMUZmJnFVgPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy
NUIwMkMwOTAeFw0yNjA0MjgwMjU2MjJaFw0yNzA0MjcwMzAxMjJaMDMxMTAvBgNV
BAMTKDA4QzU1RjcxOEJFRjM3MkE2QjI3RTY1Q0FDNDc0MTRFMkQxN0IyQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER4IZC2nq/KzVF5Ww4x3VLb4s
InyVO0Q17O/4LIE4nogBI978pq9cyA3plOMSWkf0JJ2OQliMXiHsNGaRbZbrYgj/
A/chOKZxpQ0mjr6yIu/2sMtdXMZs74+wOgz8R/IhoHXu8BbnVfH++3RWplhktgY8
rHeWhCCeTGwIMIECZI4CBFgEWRInPhguDJvtsWbUtDsCNsXJfj1mV1LpW53KsBpw
vm2WGC2ql0DDAE6KGq0Z3bJPPvpKNzM7GB6kKbSaFGEEG3g+5YLWaHGohq5IYT5T
HlIW9xCUFbf0ZVSGuCTVnVPN1NewxQlcekgPmX9S9AdOMo8Uo0XNJqvTh8S1AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUCMVfcYvvNyprJ+ZcrEdBTi0XsrIwHwYDVR0j
BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD
NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwMDk2Nzg4MjcxMzQ2NDgzNS8wLzMxMzczNTJlMzEz
MDMyMmUzMjM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzNTMwMzgzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAK9mHTANBgkqhkiG9w0BAQsFAAOCAQEAFbnFibJ867sYBKy+e60PlvUH
ESBVUiqLUKFqVEh7vidtqF6hSO0L1cIIKyhsGHG70u5CiQ9wmxVoI6cIi13SaeVc
yxVtwCyN09gTO2r9sEHYiGUlgi6GxPGxM4pr7pm/yNFI9jx9qJ8eCmAe1rSvfvE0
8mK7yS3wN/fwSW1jdvTZSjqs5Z+YtUMJFO5CsUOix8UDo7l6e8uc7DPXrzD4ASjw
VfFw/85Tp9ogYBPoaFTKyEZPgAic3lpOIDNxzZ0X9T8BjEmJWfURC9XRy13fuwW/
wCLx/NJRlGKv6Ya4l/PhcYGHdd3w299Umd2FhLiHr1CJBEbJ3pAPazB/Cw0SFg==
-----END CERTIFICATE-----
Generated at Wed May 13 15:40:24 2026 by rpki-client