
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e35342e302f32332d3233203d3e20313331353232.roa
File: 3137352e3130322e35342e302f32332d3233203d3e20313331353232.roa (raw, json)
Hash identifier: Twi7wI0YtvJciCcMPem134HLjQSNomt/5MaLAnLebAI=
Subject key identifier: 64:A7:3F:6E:8D:4F:7B:91:7B:9A:20:E5:1F:F6:28:10:E9:0F:A2:1E
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 165722A99A53443572E04670ED9814F1E9934642
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e35342e302f32332d3233203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:18:42 +0000
ROA not before: Thu 07 May 2026 02:13:42 +0000
ROA not after: Thu 06 May 2027 02:18:42 +0000
asID: 131522
IP address blocks: 175.102.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:57:22:a9:9a:53:44:35:72:e0:46:70:ed:98:14:f1:e9:93:46:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:13:42 2026 GMT
Not After : May 6 02:18:42 2027 GMT
Subject: CN=64A73F6E8D4F7B917B9A20E51FF62810E90FA21E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:69:2c:28:a2:da:60:3f:4a:56:dd:8d:e5:86:
23:eb:c2:11:81:84:18:a6:e8:05:a6:42:66:49:ce:
21:7d:2c:8a:f4:c4:25:f2:37:30:e8:70:e5:c0:5c:
80:cf:2e:d3:eb:da:e7:2e:de:03:86:b9:91:ba:2e:
92:26:9f:cd:46:62:0e:d9:4f:b5:23:98:23:56:98:
37:6c:64:bf:a4:be:59:2f:ee:94:f8:e4:2e:a4:5f:
50:4d:ea:17:70:39:72:26:f2:62:30:c6:f4:e2:25:
dd:61:89:be:ad:d5:57:0b:33:76:e7:7f:9f:2f:16:
25:9c:c9:1a:b1:36:19:ef:62:8b:6f:2e:f6:e2:23:
fe:be:98:07:8d:a3:38:df:48:c3:83:95:cd:ed:8c:
4d:13:37:aa:31:47:c4:8d:d5:0b:47:a2:90:95:7b:
3e:8a:3f:c6:cb:73:1a:38:07:7e:3d:18:37:8f:6e:
fd:53:d0:09:e7:e9:22:2a:96:67:91:b8:08:45:f2:
2a:28:8a:27:1c:4b:7e:a4:1c:32:1a:87:56:c4:43:
5f:58:4e:75:7e:df:b7:e1:5e:0b:48:85:ce:88:39:
95:c3:f3:5f:a5:5b:a8:0c:39:ed:13:9e:2b:42:d0:
40:28:30:a6:e2:e3:41:01:49:2a:ec:33:99:84:0a:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:A7:3F:6E:8D:4F:7B:91:7B:9A:20:E5:1F:F6:28:10:E9:0F:A2:1E
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e35342e302f32332d3233203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.54.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:91:d0:31:96:5d:10:58:ae:fb:eb:bd:05:96:c8:2f:bc:3a:
c9:d1:ca:86:19:2b:cc:c2:4c:b1:54:a0:07:98:4e:0b:41:93:
7f:54:6d:7e:2b:42:de:2b:f9:a9:13:8b:35:bb:e6:f1:1e:f4:
87:51:3d:c5:6f:cc:8e:97:5a:3b:82:64:6f:62:65:34:3c:cd:
9e:23:0c:71:f7:ab:d3:ee:b9:2d:e4:56:03:68:3a:d5:1b:c5:
58:cf:16:a0:cd:ea:41:22:58:ec:8c:00:bb:a6:d7:96:c8:f6:
f6:6a:90:8c:5f:5e:2a:59:c5:e4:87:75:65:27:30:32:b6:36:
ad:58:a8:8e:8e:01:df:96:a7:b9:b5:56:0c:c0:dc:c2:73:a2:
ac:b2:13:fe:0c:27:da:80:3f:2b:38:55:08:8d:b5:d3:fb:3e:
51:a5:18:68:67:0a:e4:15:30:54:df:13:db:0a:30:9b:8d:32:
9f:2f:5b:e9:93:0b:6f:10:d0:df:d5:dd:d8:6c:bd:0b:2e:27:
f9:f2:ac:3c:c4:07:1a:1a:6d:3e:6e:80:fa:ea:f5:d0:d6:f0:
9b:b5:38:79:6e:07:53:a2:04:e9:2e:d9:bb:63:0f:b9:f7:7c:
f4:2c:4e:c3:ab:f3:fa:c1:eb:9c:18:f5:cc:62:eb:ea:32:22:
fa:6f:3a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:41:02 2026 by rpki-client