
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138372e302f32342d3234203d3e20313331353232.roa
File: 3137352e3130322e3138372e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier: adGO+H9+622O9VYvfqcuyp+rNig7f6P+FJQKHeeNzC4=
Subject key identifier: DC:01:F1:D7:E8:CF:54:AA:EB:F5:8C:AD:F4:85:AF:5B:2D:1D:87:5D
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 7176889D60B8AA28A7289ACC3CCB5A696387F876
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138372e302f32342d3234203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:25:28 +0000
ROA not before: Thu 07 May 2026 02:20:28 +0000
ROA not after: Thu 06 May 2027 02:25:28 +0000
asID: 131522
IP address blocks: 175.102.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:76:88:9d:60:b8:aa:28:a7:28:9a:cc:3c:cb:5a:69:63:87:f8:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:20:28 2026 GMT
Not After : May 6 02:25:28 2027 GMT
Subject: CN=DC01F1D7E8CF54AAEBF58CADF485AF5B2D1D875D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a8:2b:a9:b6:5d:f8:5b:69:a9:03:91:4a:33:
0b:ef:bb:80:56:73:f9:bc:85:24:11:98:d9:0e:9d:
df:a3:aa:5f:58:d9:75:45:55:3d:c0:ff:42:54:0b:
95:b8:3c:3c:00:22:f7:38:01:ba:cb:dd:77:36:cc:
bc:44:d4:1f:b7:e0:b6:b0:d0:9d:15:95:eb:c6:15:
16:d1:16:c6:81:e6:d9:49:13:06:e9:4b:38:b7:2f:
5c:77:2b:10:0c:9e:ce:58:93:1b:af:93:e5:1a:67:
22:ae:c4:47:87:50:77:92:1d:15:43:ae:8d:05:b9:
97:3e:15:8c:fe:6b:e9:7d:19:df:54:f8:fe:1c:54:
35:73:72:b5:50:06:10:54:9a:40:96:97:4a:65:d6:
75:2b:56:63:5f:c9:f0:a5:77:86:c6:0f:fd:7d:b1:
9d:b9:c3:9e:51:0e:7d:26:d6:a9:9a:cf:83:1c:27:
68:8d:54:83:67:89:20:6a:89:54:50:f4:6f:05:79:
cb:9e:21:c3:f5:bc:25:fb:c5:ea:4b:49:c5:df:db:
d3:ab:6d:bd:60:18:c5:db:88:68:a6:c5:4b:c2:5a:
6e:77:50:6b:a6:bd:73:d2:62:b7:ae:9c:c8:8c:6b:
1d:7a:42:3a:3a:64:03:b3:06:7f:13:ab:63:b8:6c:
1a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:01:F1:D7:E8:CF:54:AA:EB:F5:8C:AD:F4:85:AF:5B:2D:1D:87:5D
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138372e302f32342d3234203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.187.0/24
Signature Algorithm: sha256WithRSAEncryption
41:28:92:df:ac:e8:f9:42:6f:ab:91:38:51:ae:9e:d9:8b:9a:
66:51:41:62:90:5f:eb:48:c1:be:14:bc:86:1c:f2:e0:2e:d1:
e0:20:c4:1a:e1:16:e4:db:40:a3:9d:23:7e:d2:bd:af:e4:a1:
8c:4d:f5:a4:7f:50:e8:d0:dc:dc:bc:29:0d:40:19:ef:67:19:
aa:35:f8:b9:15:d0:0d:41:c6:54:0e:df:2d:1f:02:25:1e:06:
9e:77:e4:b1:98:b0:48:ad:d0:3a:6d:9e:b2:f3:10:0f:c7:0e:
a4:2b:5e:3d:e4:9f:73:12:7d:cf:17:2e:33:4d:91:60:40:93:
04:ec:7f:45:de:14:07:11:e2:b4:45:cf:ff:1b:0d:37:c3:45:
f8:ea:fb:a9:ce:06:5a:b4:f1:c5:e6:84:02:e1:93:12:8c:f1:
ee:23:f8:bb:23:08:9a:b4:12:e4:12:f6:22:c5:07:88:1a:e2:
a1:08:7b:36:ec:9a:c5:09:66:d4:08:a6:27:2e:60:3c:52:53:
75:93:59:93:ea:d7:09:84:03:3b:e5:39:18:c8:9c:34:c4:08:
b4:26:9d:7e:cc:12:50:cd:27:95:90:ee:3a:8e:01:41:99:fb:
d9:49:a5:3c:7c:7d:2f:5c:dd:e1:35:3e:86:01:0d:7e:73:19:
e1:b6:6f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:56:52 2026 by rpki-client