
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e35362e302f32312d3231203d3e20313331353232.roa
File: 3137352e3130322e35362e302f32312d3231203d3e20313331353232.roa (raw, json)
Hash identifier: mTH7vZtQItipGv7adN5EuaX+j41fef5ijUHMj3zMEfs=
Subject key identifier: E3:CF:81:75:3B:4B:8D:87:9E:19:C1:68:40:1B:C7:C3:C1:C4:C2:60
Certificate issuer: /CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Certificate serial: 68259DD2D4CC97FDD97A6ABB844C796D992ABA5D
Authority key identifier: 65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e35362e302f32312d3231203d3e20313331353232.roa
Signing time: Thu 07 May 2026 02:18:42 +0000
ROA not before: Thu 07 May 2026 02:13:42 +0000
ROA not after: Thu 06 May 2027 02:18:42 +0000
asID: 131522
IP address blocks: 175.102.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:26:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:25:9d:d2:d4:cc:97:fd:d9:7a:6a:bb:84:4c:79:6d:99:2a:ba:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65806DD85601F327B2E3F4DC2F345E815E61DB23
Validity
Not Before: May 7 02:13:42 2026 GMT
Not After : May 6 02:18:42 2027 GMT
Subject: CN=E3CF81753B4B8D879E19C168401BC7C3C1C4C260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0e:db:ac:0f:66:b3:dd:d5:94:c2:56:12:07:
68:80:82:c0:d6:8c:cb:f1:a0:68:11:84:88:05:04:
2e:d1:07:bc:7b:31:3a:72:3c:01:8e:dd:85:cf:11:
1f:16:8e:c7:29:06:ba:00:6f:55:8d:81:1f:27:57:
4c:13:0f:16:df:4c:20:84:b2:df:88:39:e3:6f:79:
11:ee:a2:b6:56:24:bd:53:a0:a1:84:4b:f2:d8:6c:
20:bd:05:17:3d:46:d5:81:dc:5b:7d:5b:76:c4:61:
64:90:9c:b5:44:79:07:da:04:fb:56:f5:90:f2:9e:
88:eb:40:1e:4e:59:d3:d2:ed:fb:00:a4:1b:e2:9a:
ed:50:97:a9:32:39:27:00:7d:92:0c:b3:d2:38:7c:
62:57:8c:70:e3:7f:bc:3f:9a:d8:23:34:9d:30:e1:
20:37:58:85:40:16:4e:0c:04:b8:88:c0:43:52:3b:
d8:fa:f4:81:33:da:5d:43:f8:82:6c:ec:c4:1d:9c:
cd:3c:1d:fc:10:5f:b6:6b:64:91:1b:40:d6:de:8b:
49:e1:8d:05:39:34:b1:e7:37:be:11:28:70:77:d4:
6b:75:3c:46:55:84:0c:24:a9:1a:e1:cb:26:59:52:
dd:73:b5:49:88:bd:d6:f3:67:fb:1f:5e:57:a4:68:
90:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:CF:81:75:3B:4B:8D:87:9E:19:C1:68:40:1B:C7:C3:C1:C4:C2:60
X509v3 Authority Key Identifier:
keyid:65:80:6D:D8:56:01:F3:27:B2:E3:F4:DC:2F:34:5E:81:5E:61:DB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/65806DD85601F327B2E3F4DC2F345E815E61DB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/65806DD85601F327B2E3F4DC2F345E815E61DB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104592295958675461/0/3137352e3130322e35362e302f32312d3231203d3e20313331353232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.102.56.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:49:07:ec:a9:60:d7:a8:30:02:de:93:bb:fa:ce:c9:97:4a:
08:a7:4a:31:b0:6c:8c:e1:e4:2b:f9:dc:f7:33:90:f5:71:f5:
4a:67:e9:39:1f:2d:dd:6d:19:ab:a0:28:31:cd:9e:4a:7d:7c:
da:cd:5e:ee:a7:03:0c:1d:2d:ae:90:8e:ca:57:9f:31:62:f6:
39:e2:71:8a:70:65:65:4f:73:de:3e:58:0b:b4:3d:d8:d6:1f:
f8:24:39:84:ab:95:ed:f6:6a:47:93:9a:6b:9d:c5:2d:67:0e:
6a:c5:6b:ad:3b:95:c6:e9:2b:e6:db:a4:53:47:c0:36:e0:cb:
c0:00:03:3e:af:c6:7c:72:36:c5:7a:60:ec:d2:69:6d:a2:dd:
5e:e1:3b:6a:a7:a4:e2:4c:82:91:b5:e0:66:6b:13:d7:af:c3:
20:d1:6e:3a:55:77:7b:39:72:3e:00:5e:49:74:1b:3b:db:87:
98:cb:87:80:d0:44:92:86:42:31:e8:36:73:ed:79:c2:0d:b7:
3b:48:01:6f:a1:95:b9:a6:3d:f8:48:d6:b1:c9:9f:31:5f:17:
9b:0f:44:ef:e2:af:cf:0b:5c:b0:b7:9e:e5:24:37:5b:72:87:
e9:1f:12:7a:da:ef:08:53:78:6c:94:26:a7:ab:8e:24:1d:bc:
02:e6:f6:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:40 2026 by rpki-client