
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3139362e302f32342d3234203d3e2034383437.roa
File: 3137352e3130322e3139362e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: iCFQEPDvT0HQUO5MAuyLHyPpwNqncM3+KCkBD5qi/YM=
Subject key identifier: BF:0E:9E:2B:97:25:DF:81:F0:90:ED:D6:48:87:6F:BB:1F:E1:4C:E1
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 11594241A423748A6225D9BF641BC943C8E58341
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3139362e302f32342d3234203d3e2034383437.roa
Signing time: Thu 07 May 2026 02:26:25 +0000
ROA not before: Thu 07 May 2026 02:21:25 +0000
ROA not after: Thu 06 May 2027 02:26:25 +0000
asID: 4847
IP address blocks: 175.102.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:59:42:41:a4:23:74:8a:62:25:d9:bf:64:1b:c9:43:c8:e5:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:21:25 2026 GMT
Not After : May 6 02:26:25 2027 GMT
Subject: CN=BF0E9E2B9725DF81F090EDD648876FBB1FE14CE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:66:fa:a1:f5:70:bd:5c:d0:39:0a:10:fa:
ca:13:d0:80:e9:26:9c:df:ef:51:6f:d1:11:c9:dc:
9f:47:07:ba:88:cc:38:68:5a:b1:02:88:0a:dc:a3:
0d:6b:a6:ec:bb:0b:f3:9c:0a:e5:30:58:01:bd:ef:
e8:2a:99:c3:0f:fa:5f:ad:83:89:37:25:f9:95:4b:
cc:f7:4b:cd:7c:7a:1e:65:a5:14:33:b7:7c:fd:59:
d2:86:f0:c0:68:ae:08:24:57:4e:24:48:57:ff:68:
ed:b3:1b:b9:26:b8:d2:3a:76:b1:e7:6b:6a:6e:b6:
81:f6:89:b7:20:91:d7:ce:9a:74:12:9a:3e:ca:78:
34:73:80:3c:d0:7e:fd:74:ed:d8:9e:5d:b6:b0:53:
2d:b1:68:af:4c:b1:3c:2a:14:da:07:a5:00:3a:0a:
4a:29:2c:43:1c:ee:a9:2d:17:a1:48:03:9f:de:6a:
0b:3c:eb:0b:d5:93:4a:15:fd:16:f1:de:50:72:cb:
30:a6:ef:2d:fc:19:1c:ea:59:05:bd:3d:b1:de:4f:
29:c1:b4:c4:8b:a3:42:87:ef:17:da:dc:6e:4a:bb:
a3:1c:63:93:62:e9:cb:93:14:19:57:3f:b3:65:b1:
f6:26:34:bc:78:c6:fa:12:81:83:1a:03:3b:54:c9:
40:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:0E:9E:2B:97:25:DF:81:F0:90:ED:D6:48:87:6F:BB:1F:E1:4C:E1
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e3139362e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.196.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:91:00:35:23:97:68:f6:fa:89:68:0d:cb:77:c6:92:09:16:
5a:d4:9a:0d:56:fc:46:c0:95:64:e8:56:27:f4:64:44:2b:b9:
86:15:7f:32:00:bf:ca:c8:1c:97:18:33:af:c4:fe:d5:dd:82:
dc:fc:d2:81:83:b4:b0:3a:ed:31:e7:35:5f:92:56:29:20:9c:
c6:a3:1b:60:d6:64:60:8b:72:a0:cd:e9:ea:5d:ad:ee:2f:01:
26:b7:a3:ff:a1:c1:14:4a:76:56:ca:3a:ac:b9:f2:70:49:5e:
95:dd:a3:91:20:00:b0:88:3d:de:72:48:bb:b3:46:4d:1a:86:
0a:59:2f:b2:89:44:c0:ed:90:d8:7b:98:3a:2c:46:2a:08:e5:
14:c9:6c:6f:cc:35:e1:83:91:8a:6b:de:4a:91:da:db:ee:35:
f7:04:d1:cd:1c:82:98:38:11:79:b7:09:d0:de:f7:3f:53:35:
dd:6a:14:ca:c0:40:0c:5a:af:36:d5:21:89:a3:d2:3d:cb:5a:
fb:13:e7:dc:8c:ec:eb:03:78:a4:b3:10:7e:70:3f:ff:37:27:
cc:0c:a9:9f:17:97:ba:cd:08:a8:e3:8b:36:dd:52:8d:8c:64:
b5:b0:ec:d7:66:6a:ee:08:a2:31:d1:37:3d:cc:bf:66:1a:dc:
0d:99:8d:c4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:57:53 2026 by rpki-client