
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138302e302f32342d3234203d3e20313331353232.roa
File: 3137352e3130322e3138302e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier: kdGbXiPz0U/8oNn2Cupk7nNzs6YmTL0aaTZrJytR/xs=
Subject key identifier: 7F:B1:0D:3A:BB:42:9D:88:A1:AF:45:8D:89:A3:08:D8:D5:91:CA:75
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 66F36B742A5BDC073A864933E20E8269B7818523
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138302e302f32342d3234203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:23:01 +0000
ROA not before: Thu 07 May 2026 02:18:01 +0000
ROA not after: Thu 06 May 2027 02:23:01 +0000
asID: 131522
IP address blocks: 175.102.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:f3:6b:74:2a:5b:dc:07:3a:86:49:33:e2:0e:82:69:b7:81:85:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:18:01 2026 GMT
Not After : May 6 02:23:01 2027 GMT
Subject: CN=7FB10D3ABB429D88A1AF458D89A308D8D591CA75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a9:2f:f9:e9:ed:e9:6a:1e:4f:d8:b8:fb:9b:
2a:8b:af:37:ef:8f:74:2a:20:5c:f4:4f:f1:09:c8:
35:59:31:f0:2f:4d:6f:be:df:b5:73:d6:ac:7d:ce:
17:f3:6d:5b:ad:de:a2:7d:af:b7:a8:ab:0c:c2:c6:
4e:18:7b:01:69:84:d1:4e:04:06:2e:62:70:cc:cc:
85:7c:41:7e:f1:9c:16:20:1b:cf:91:8c:b0:f0:bb:
f5:a8:20:d0:b6:d8:8f:9f:7b:6d:6c:9e:43:28:44:
fd:71:36:c7:db:e0:0a:65:f9:05:78:54:2c:43:ec:
9b:87:69:3b:3d:11:b4:d4:a6:c7:3a:8c:21:b1:71:
34:05:d3:81:f9:04:93:e6:9b:ad:51:84:f0:d4:b9:
ac:66:20:66:30:0e:8a:6d:da:fa:d0:d3:43:54:23:
3d:5f:80:0a:78:1e:06:c1:e1:76:77:d9:a4:84:a9:
c2:4e:0a:4c:24:07:16:30:21:6a:6e:14:16:f1:ec:
90:cd:a5:ee:59:ba:a3:38:a8:4a:1e:34:b5:c4:fd:
ab:e6:dd:51:49:d7:21:cd:66:12:45:60:d8:01:81:
54:e3:8c:8f:0d:be:43:1e:1d:c8:b5:d4:fb:1f:92:
dd:9f:22:4a:6a:62:6f:b7:45:63:46:25:ef:15:c3:
7a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B1:0D:3A:BB:42:9D:88:A1:AF:45:8D:89:A3:08:D8:D5:91:CA:75
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138302e302f32342d3234203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.180.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:36:71:e5:00:4c:a9:26:6d:7d:f4:5d:81:0e:1c:7f:5c:20:
05:40:fb:e0:69:27:27:d3:2d:49:9e:42:6f:3c:f0:8e:93:d3:
2b:1e:f1:a0:88:0a:37:37:b2:c4:d5:1a:83:30:a3:f5:98:f5:
51:6e:18:f0:e1:13:b1:88:54:37:d1:ba:07:35:cf:22:95:43:
4b:37:10:9a:b6:ec:36:35:f0:4f:3e:a2:1f:d6:82:c1:8c:5c:
d6:5e:d1:ee:26:eb:d2:db:b3:d0:5d:26:a7:f5:a9:f3:2c:5c:
e9:90:f1:0a:d5:88:2b:4e:4b:44:cc:1e:34:93:f8:76:5c:02:
6e:e6:4c:85:4d:78:b6:50:00:98:16:a4:c7:a4:ca:bb:db:b5:
68:a1:ae:cc:94:ae:b1:84:83:0a:88:73:e4:f2:f2:60:47:4d:
8f:34:e7:c7:92:ac:fd:b7:ea:5b:9d:19:84:13:31:7c:2e:ca:
86:fa:fd:f6:c3:41:a3:8e:b6:b7:85:f2:1a:96:a0:c7:ea:88:
13:8e:0c:b7:37:3d:41:6d:78:3d:b9:d1:85:e7:0f:95:5f:04:
69:54:7c:b1:23:c0:ba:df:1c:9a:18:2a:a3:dd:dc:91:b2:7e:
d9:4a:62:d2:63:cf:bb:b1:38:9b:b3:50:29:da:7a:c5:b1:73:
bf:b7:43:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:37:11 2026 by rpki-client