
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203233373234.roa
File: 3137352e32352e31362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: YPasVe3K3ht2mnfxR8Yo1hyHz55y4WAhHj8Of8R6/3k=
Subject key identifier: FB:1D:0A:C5:4E:E9:84:6D:F7:F0:5C:8D:9B:39:D9:07:8B:9D:24:6F
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 2672915D50AAF11E9FCF15E57E9754AD0B2FDBF6
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203233373234.roa
Signing time: Tue 14 Apr 2026 06:46:50 +0000
ROA not before: Tue 14 Apr 2026 06:41:50 +0000
ROA not after: Tue 13 Apr 2027 06:46:50 +0000
asID: 23724
IP address blocks: 175.25.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:72:91:5d:50:aa:f1:1e:9f:cf:15:e5:7e:97:54:ad:0b:2f:db:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:41:50 2026 GMT
Not After : Apr 13 06:46:50 2027 GMT
Subject: CN=FB1D0AC54EE9846DF7F05C8D9B39D9078B9D246F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:83:c2:01:16:65:88:3d:21:ca:80:9b:ea:42:
28:62:2d:27:d9:86:d0:75:40:3a:47:db:ae:69:b5:
7c:ab:6c:33:e8:07:c6:c8:2c:73:cb:ce:f1:e8:b5:
ed:be:31:19:5a:e2:b6:9c:d3:7d:d1:68:51:e1:2c:
c4:bc:9e:00:7e:0d:80:c8:80:e0:e4:e5:1b:90:b4:
a6:cd:a2:20:88:b4:31:45:bd:92:e0:a1:34:fc:67:
90:01:d6:b7:de:f4:65:14:1e:6a:20:3f:92:1f:af:
d8:d0:72:c0:b3:28:b5:5c:20:87:78:b7:b4:70:6e:
20:b0:b5:a4:17:3e:e7:90:12:9a:28:55:38:2e:1f:
4a:e7:c5:2f:a2:73:2e:15:03:90:70:f7:84:70:67:
e2:9d:62:fe:68:a5:25:5b:f4:41:bc:1c:98:81:97:
fc:e8:99:56:d0:67:c6:c3:24:e7:c4:f2:5a:63:fc:
0f:df:b1:ef:ee:eb:af:9f:d4:3d:d1:05:1d:74:40:
73:29:d5:8f:0b:58:17:02:c1:3e:bd:30:9e:13:85:
c5:3e:e5:0e:1d:b1:07:dd:11:54:10:b9:35:23:d2:
92:ea:2d:f4:f2:ce:30:c4:a4:3c:c0:fb:8b:0e:1a:
b1:c7:d0:d8:c6:99:1d:08:a1:5d:ba:01:2d:66:37:
04:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1D:0A:C5:4E:E9:84:6D:F7:F0:5C:8D:9B:39:D9:07:8B:9D:24:6F
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31362e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.16.0/21
Signature Algorithm: sha256WithRSAEncryption
14:db:51:56:1b:58:b1:e4:de:fc:ea:0a:a7:ff:58:a0:f4:b1:
3f:f4:d1:04:d4:9d:9c:c5:6c:bf:33:aa:2a:e6:bf:c5:26:2e:
85:41:9a:cc:28:eb:a3:07:75:01:20:ee:a6:ee:d4:8c:40:f3:
24:5b:4c:fe:e1:cb:df:41:95:9b:61:53:54:36:4e:29:1e:26:
4f:cd:27:26:7c:f9:90:a9:df:8e:a2:f1:48:5d:3d:47:e2:a7:
3f:cc:34:12:16:7f:fd:de:96:82:48:3e:35:43:ed:96:c3:db:
cb:a4:49:12:5e:5c:50:6a:c9:8b:81:38:a0:3b:9f:14:c3:3c:
e7:81:f3:c6:ec:f3:8a:2d:9d:9a:af:db:f1:81:aa:e1:7c:fa:
ed:37:9f:e1:ae:de:3c:8c:85:81:08:6b:d1:ee:37:28:c5:39:
5f:dc:de:35:61:20:74:33:69:76:51:da:9c:35:7c:c3:28:65:
9d:83:97:23:c1:0c:96:61:d1:e6:6e:dc:ed:7f:4a:e6:3d:12:
01:2c:e5:60:ed:7f:ab:a1:2b:09:e6:ba:d2:49:19:6f:9c:30:
27:53:90:e2:6e:3e:9a:80:04:5f:be:a3:86:bc:da:cb:61:7e:
b3:c1:be:47:52:2f:a9:0e:40:6f:e1:0d:45:73:79:5b:66:84:
c3:ef:ec:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:11 2026 by rpki-client