
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e34382e302f32322d3232203d3e203435303836.roa
File: 3137352e3130322e34382e302f32322d3232203d3e203435303836.roa (raw, json)
Hash identifier: cP1bx240Z4AmzBU2dWult3quCpLyAxSQjo3Q2RHMvfI=
Subject key identifier: DD:87:CF:BB:78:B4:D4:D0:F2:A9:01:56:97:7D:60:5B:7F:92:4C:BA
Certificate issuer: /CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Certificate serial: 6167163AF4F6787CAF65E395B2249ED70307CD07
Authority key identifier: 06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e34382e302f32322d3232203d3e203435303836.roa
Signing time: Tue 28 Apr 2026 03:14:19 +0000
ROA not before: Tue 28 Apr 2026 03:09:19 +0000
ROA not after: Tue 27 Apr 2027 03:14:19 +0000
asID: 45086
IP address blocks: 175.102.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 07:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:67:16:3a:f4:f6:78:7c:af:65:e3:95:b2:24:9e:d7:03:07:cd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061380D3CE8E2B472E9B68A28BCAC5C725B02C09
Validity
Not Before: Apr 28 03:09:19 2026 GMT
Not After : Apr 27 03:14:19 2027 GMT
Subject: CN=DD87CFBB78B4D4D0F2A90156977D605B7F924CBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4c:2e:d6:11:1c:4a:fb:8c:54:f3:62:d8:5c:
23:79:33:e2:68:a1:c9:67:8c:b8:86:07:05:07:60:
8b:19:c6:a4:f2:6c:50:e9:c5:39:ac:c0:54:2b:47:
58:58:78:48:70:7d:97:60:4d:48:43:37:48:24:1d:
0b:27:42:b1:36:81:2e:bc:24:2b:6a:cc:43:d9:c0:
84:21:23:8f:e4:e2:0d:3d:44:5b:22:05:f3:b1:d8:
50:79:2d:3c:34:17:2b:12:1e:60:ef:9e:dc:de:2f:
d0:10:57:4e:2f:65:8b:2c:23:c4:43:bb:26:c4:32:
3b:9b:28:b9:c8:ac:56:d9:a8:08:7b:f1:4d:18:7a:
3f:9d:d4:1e:57:f6:9f:c9:bf:5a:e3:96:1e:1e:42:
39:0e:be:0a:3a:70:7b:7e:79:c9:d9:f5:3c:08:bf:
eb:b6:9b:43:c0:b1:e8:1f:2d:5e:3a:ec:45:34:58:
2a:b3:d9:3c:e2:de:ef:91:de:34:90:43:8a:6c:0b:
89:fb:c2:e6:fd:1c:00:16:04:8d:a4:12:18:54:2a:
91:3b:bd:d7:de:61:fd:0a:61:d9:13:09:72:08:66:
3a:b5:5a:ef:69:ed:2d:21:40:87:34:7c:61:de:1b:
b1:0d:52:6c:07:10:c7:2d:7f:4c:86:6b:16:4e:8c:
de:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:87:CF:BB:78:B4:D4:D0:F2:A9:01:56:97:7D:60:5B:7F:92:4C:BA
X509v3 Authority Key Identifier:
keyid:06:13:80:D3:CE:8E:2B:47:2E:9B:68:A2:8B:CA:C5:C7:25:B0:2C:09
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/061380D3CE8E2B472E9B68A28BCAC5C725B02C09.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100967882713464835/0/3137352e3130322e34382e302f32322d3232203d3e203435303836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.48.0/22
Signature Algorithm: sha256WithRSAEncryption
88:eb:d4:58:65:12:4c:bc:16:53:db:38:b2:77:32:f6:ec:4b:
93:e1:f7:6f:ac:48:36:73:07:97:03:3b:4a:dd:60:3d:98:35:
18:e2:a0:cb:d0:8a:b9:3e:c7:7f:d1:09:c9:1b:99:b2:0f:7e:
79:c5:b4:fa:1a:e9:d2:2b:70:d7:4c:a4:76:43:f5:33:f9:1a:
34:43:c1:70:2d:da:18:50:a9:6a:fb:ae:0f:3e:7c:78:9d:0a:
d5:9d:65:d9:56:12:2b:f9:4d:a2:dd:27:5a:92:32:15:9c:76:
db:c3:04:64:2c:cf:d7:ba:d5:ec:95:2a:d3:dc:55:b8:e6:f6:
f3:c5:17:62:89:a8:0f:7c:7e:12:64:49:87:29:b6:a8:ea:b0:
19:f9:5d:ea:ec:49:19:a1:10:0e:a9:01:6e:5c:97:74:76:8c:
60:75:b2:4c:df:da:61:e0:98:a0:15:d4:83:0c:ed:0c:07:e2:
07:fb:56:e2:5e:d7:b4:96:5c:3b:3c:9f:5c:0e:4e:ce:39:ea:
14:d7:51:33:9f:fe:51:fd:13:f2:fc:fc:dd:8c:31:fe:13:0d:
f0:d1:01:d1:c5:a6:34:57:3e:d4:00:7b:21:97:65:fc:8f:f9:
e8:68:6b:1b:e6:f0:93:2c:39:09:9c:a0:8a:85:7c:c9:53:e0:
fa:95:da:ca
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYWcWOvT2eHyvZeOVsiSe1wMHzQcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1Qzcy
NUIwMkMwOTAeFw0yNjA0MjgwMzA5MTlaFw0yNzA0MjcwMzE0MTlaMDMxMTAvBgNV
BAMTKEREODdDRkJCNzhCNEQ0RDBGMkE5MDE1Njk3N0Q2MDVCN0Y5MjRDQkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgTC7WERxK+4xU82LYXCN5M+Jo
oclnjLiGBwUHYIsZxqTybFDpxTmswFQrR1hYeEhwfZdgTUhDN0gkHQsnQrE2gS68
JCtqzEPZwIQhI4/k4g09RFsiBfOx2FB5LTw0FysSHmDvntzeL9AQV04vZYssI8RD
uybEMjubKLnIrFbZqAh78U0Yej+d1B5X9p/Jv1rjlh4eQjkOvgo6cHt+ecnZ9TwI
v+u2m0PAsegfLV467EU0WCqz2Tzi3u+R3jSQQ4psC4n7wub9HAAWBI2kEhhUKpE7
vdfeYf0KYdkTCXIIZjq1Wu9p7S0hQIc0fGHeG7ENUmwHEMctf0yGaxZOjN45AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU3YfPu3i01NDyqQFWl31gW3+STLowHwYDVR0j
BBgwFoAUBhOA086OK0cum2iii8rFxyWwLAkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
MDk2Nzg4MjcxMzQ2NDgzNS8wLzA2MTM4MEQzQ0U4RTJCNDcyRTlCNjhBMjhCQ0FD
NUM3MjVCMDJDMDkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMDYxMzgwRDNDRThFMkI0NzJFOUI2OEEyOEJDQUM1QzcyNUIwMkMwOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTEwMDk2Nzg4MjcxMzQ2NDgzNS8wLzMxMzczNTJlMzEz
MDMyMmUzNDM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzQzNTMwMzgzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAq9mMDANBgkqhkiG9w0BAQsFAAOCAQEAiOvUWGUSTLwWU9s4sncy9uxL
k+H3b6xINnMHlwM7St1gPZg1GOKgy9CKuT7Hf9EJyRuZsg9+ecW0+hrp0itw10yk
dkP1M/kaNEPBcC3aGFCpavuuDz58eJ0K1Z1l2VYSK/lNot0nWpIyFZx228MEZCzP
17rV7JUq09xVuOb288UXYomoD3x+EmRJhym2qOqwGfld6uxJGaEQDqkBblyXdHaM
YHWyTN/aYeCYoBXUgwztDAfiB/tW4l7XtJZcOzyfXA5OzjnqFNdRM5/+Uf0T8vz8
3Ywx/hMN8NEB0cWmNFc+1AB7IZdl/I/56GhrG+bwkyw5CZygioV8yVPg+pXayg==
-----END CERTIFICATE-----
Generated at Wed May 13 17:56:51 2026 by rpki-client