
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa
File: 3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier: qmLtyVxaZyfOsLbp/wjiFwlsxVA/0eE36iWtTW7oXYg=
Subject key identifier: 70:65:B3:7C:06:FC:72:93:48:35:58:8B:AE:03:F1:43:EE:0A:18:8E
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 39AC9AE24FB043E99DADE707D0054B952629DA04
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:23:38 +0000
ROA not before: Thu 07 May 2026 02:18:38 +0000
ROA not after: Thu 06 May 2027 02:23:38 +0000
asID: 131522
IP address blocks: 175.102.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ac:9a:e2:4f:b0:43:e9:9d:ad:e7:07:d0:05:4b:95:26:29:da:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:18:38 2026 GMT
Not After : May 6 02:23:38 2027 GMT
Subject: CN=7065B37C06FC72934835588BAE03F143EE0A188E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8f:0b:5c:c2:7d:aa:06:56:90:ba:2d:71:a4:
94:bf:f3:a3:7b:07:16:31:9a:12:ab:3a:b5:b6:0e:
5e:ca:e8:a9:6f:df:83:cd:4b:1d:49:23:d2:3e:d9:
c4:ee:2f:14:5d:d4:1d:78:58:3c:56:4e:bf:1c:03:
d1:1e:a8:88:f8:43:50:29:dc:05:77:90:45:c0:a4:
7b:60:29:9a:93:87:ca:a9:44:8e:1b:23:89:b7:95:
ee:88:64:cd:f1:8b:b3:46:71:3d:f3:f7:47:56:e8:
08:d8:d4:e8:68:cc:86:cc:9b:50:86:1f:16:d4:95:
93:31:5a:7e:9d:0a:c0:83:31:96:9b:09:da:33:44:
81:e4:8b:bf:a5:37:2c:5c:3d:ae:f4:ff:f1:49:f9:
f9:a7:3e:27:2b:bc:b4:bf:9f:92:ef:50:d7:90:e6:
07:d4:11:19:d0:22:fd:93:7f:51:15:2b:b1:e1:54:
9b:4a:c7:7c:ad:de:cb:5e:75:7d:b6:dc:6e:21:c0:
40:15:e2:7a:dc:7e:22:2c:f0:1a:9b:a0:bf:c4:07:
29:67:52:ce:49:64:df:8e:c9:c1:4a:78:66:8e:a8:
bf:1a:aa:a3:ee:4b:87:9c:23:a8:ab:12:df:26:76:
56:fa:1a:b1:a6:2d:d6:1f:a2:7c:e4:e3:bb:bb:a5:
c8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:65:B3:7C:06:FC:72:93:48:35:58:8B:AE:03:F1:43:EE:0A:18:8E
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138342e302f32342d3234203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.184.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8c:fd:ef:3c:54:fd:c2:11:40:09:0a:55:1a:13:0a:19:f3:
02:e2:67:50:d4:ea:91:c6:7d:77:dd:b3:24:11:e1:15:2d:d2:
0c:dc:e1:8c:1b:02:31:a0:7b:8a:45:db:47:b1:5e:f7:a4:db:
c1:ef:77:bb:ee:25:cc:e2:77:d1:68:1b:11:9f:9b:89:f0:c5:
c6:30:39:ad:9c:86:3e:1b:14:c2:1b:71:6c:f2:fc:df:fd:5b:
90:94:3b:35:cb:96:c7:2b:76:d3:91:83:c7:d0:f4:3e:d5:6a:
17:f0:e9:59:14:80:54:9e:5d:8e:c8:80:bc:ae:29:c7:bc:9a:
36:40:8f:47:bc:99:b2:76:bc:27:58:73:5a:61:6a:ce:5f:32:
bb:d3:68:cc:e4:cd:30:d2:54:11:9c:6b:ac:c4:ba:af:a7:17:
3c:5a:50:7a:65:6b:df:54:8b:0f:b5:da:36:00:9f:6c:c7:63:
32:49:58:d6:d4:39:7a:c7:ea:4d:0b:1e:e8:49:55:7b:27:2b:
e1:75:ed:09:f5:81:b2:02:63:01:27:ac:2e:69:b0:f7:32:05:
06:d6:99:1f:e3:37:6a:03:e8:b4:e8:13:08:24:9f:4a:c8:49:
1c:7f:95:f0:86:c1:a7:3d:95:14:af:f8:90:6f:39:f4:ae:0d:
12:37:11:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:13:55 2026 by rpki-client