
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa
File: 3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa (raw, json)
Hash identifier: Mv7KdKpRBUy/xmVKXsQdUwpE7dWcV5ZwrJIq0u38QqE=
Subject key identifier: AA:74:AE:D5:9D:70:0D:F8:A8:58:74:78:2D:37:1E:65:E4:BA:80:8B
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 533091123ECD2C7628C4A45C36B071C7CAC4935F
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:25:28 +0000
ROA not before: Thu 07 May 2026 02:20:28 +0000
ROA not after: Thu 06 May 2027 02:25:28 +0000
asID: 131522
IP address blocks: 175.102.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:30:91:12:3e:cd:2c:76:28:c4:a4:5c:36:b0:71:c7:ca:c4:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:20:28 2026 GMT
Not After : May 6 02:25:28 2027 GMT
Subject: CN=AA74AED59D700DF8A85874782D371E65E4BA808B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fe:c2:e7:a0:66:dc:b8:e7:fe:46:a9:f1:60:
1b:f9:ef:c8:22:08:ac:30:fb:f1:b8:a7:4d:2f:91:
ff:55:fb:27:43:ce:61:3a:b5:ea:b0:bc:b5:4a:6e:
bb:c7:8d:a6:7b:7d:eb:f0:ee:13:c0:89:2f:18:a7:
1d:aa:cd:e9:b4:c2:a6:3c:e3:b4:4e:46:56:21:fe:
8d:97:21:0b:68:98:47:cf:e5:bb:d7:4c:ee:67:9b:
38:d9:f0:e2:1b:36:35:20:8b:61:3d:be:80:c1:ef:
c1:a2:5e:f1:94:af:17:17:b1:a0:cb:64:1f:da:5d:
10:10:ee:9b:d4:bc:70:12:0e:1f:88:dc:b5:0a:aa:
e9:59:af:b3:e4:0a:ac:be:77:71:c0:b1:e9:a6:a2:
ad:48:b9:87:53:95:a1:cb:d0:18:f5:8c:b3:ff:36:
da:2f:6c:c7:ed:88:8e:72:74:36:29:f9:ed:ea:cb:
c6:13:95:14:c5:d8:74:4e:2f:d4:44:d4:19:27:7f:
ca:58:ec:a0:75:b6:8d:3f:2a:a0:8e:63:d2:e9:31:
da:4f:00:65:77:55:67:99:27:4d:7d:57:73:18:7b:
bb:43:27:b8:32:4c:33:32:15:7a:f4:54:09:63:94:
2a:05:8d:41:1b:4f:40:94:40:a0:71:36:f8:5a:53:
3a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:74:AE:D5:9D:70:0D:F8:A8:58:74:78:2D:37:1E:65:E4:BA:80:8B
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3138382e302f32342d3234203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.188.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:e0:b5:96:73:9d:89:5c:45:e4:4f:e1:77:3c:2f:37:73:43:
13:46:82:eb:5a:b0:db:80:69:0a:55:e6:46:e3:55:44:fc:a1:
35:c3:b4:93:5d:a6:f8:50:20:f3:15:f6:9a:91:87:91:cb:b4:
77:a4:74:0f:14:ab:78:3a:79:9a:f1:99:f6:e0:17:99:de:29:
67:55:5a:fe:ea:f2:11:6e:7b:51:c5:7c:3d:5f:92:ad:90:0c:
4e:81:13:79:bf:77:d8:6e:30:73:0d:59:74:35:66:3f:91:e6:
6a:f6:f4:d8:83:7a:00:09:6d:42:a8:3c:da:88:2b:fd:89:65:
0e:e4:38:21:dc:6d:60:87:26:d9:9d:2e:09:1e:9d:14:76:99:
7b:78:1a:34:06:1c:e8:67:ed:d1:4b:b1:b5:ae:8a:70:6f:0e:
8e:20:00:eb:6d:e3:1a:8a:69:44:10:1e:c7:55:f1:2e:0d:ac:
2b:95:54:e4:f8:68:67:1c:ed:a9:91:b0:f0:8e:0a:7e:0c:ce:
75:4c:b1:cd:79:88:c2:50:7a:f2:a0:7e:73:e0:a4:50:6c:25:
88:51:26:f5:3d:5b:a6:7d:33:fa:12:56:45:25:ab:40:88:2e:
e5:46:02:88:88:cf:9b:52:aa:3a:69:91:dd:bf:06:71:6f:a3:
74:72:87:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:58:46 2026 by rpki-client