
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31382e302f32332d3233203d3e203536303139.roa
File: 3137352e32352e31382e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier: IfdwLNFLi8/iCojoYKK2o8L3LNDkqT+5U6lOd4NYjT0=
Subject key identifier: CE:4C:09:C2:6D:9D:42:B6:8E:C6:6E:3D:78:4C:5A:E5:C8:1F:9B:E7
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 39F66804AFA58C6878C4541FBD97A6A7F9081E04
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31382e302f32332d3233203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:46:50 +0000
ROA not before: Tue 14 Apr 2026 06:41:50 +0000
ROA not after: Tue 13 Apr 2027 06:46:50 +0000
asID: 56019
IP address blocks: 175.25.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:f6:68:04:af:a5:8c:68:78:c4:54:1f:bd:97:a6:a7:f9:08:1e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:41:50 2026 GMT
Not After : Apr 13 06:46:50 2027 GMT
Subject: CN=CE4C09C26D9D42B68EC66E3D784C5AE5C81F9BE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:50:db:22:c0:24:70:0a:7e:e2:f5:2e:d6:
cb:17:eb:97:f7:d6:53:d5:99:b6:47:d8:0c:6b:41:
e2:a7:7e:c9:49:ac:43:61:7a:fd:74:cb:81:2b:ba:
63:e8:01:62:bd:a0:50:0f:9c:fc:98:71:ad:55:e0:
96:73:78:41:1f:fa:5d:98:18:e4:45:fa:7d:a0:45:
13:b2:f5:c3:2b:c8:4a:40:04:f9:d9:81:85:c6:82:
c8:f7:c4:da:10:05:78:7e:ba:94:a9:55:49:f7:1a:
e5:2e:70:d3:78:cd:36:41:b5:00:19:55:15:67:db:
81:6e:b4:e9:ac:34:aa:7a:10:a7:48:70:b7:d6:01:
c3:4b:f6:3c:71:35:c1:ac:a3:c3:1f:fe:a9:53:7b:
76:56:db:63:16:1d:8a:d0:03:dd:93:af:f6:bf:dd:
f1:6a:48:dc:6f:63:80:02:1b:f3:24:b9:66:23:7e:
14:5e:a8:74:af:6c:13:44:cd:4b:16:dd:5d:c6:46:
b3:e1:15:9b:0b:d6:dc:24:bb:3d:82:61:18:d0:ff:
f3:2d:b1:96:e4:92:8b:60:da:c7:60:03:16:b6:eb:
7d:ce:5e:2b:70:22:4c:e6:06:08:29:0a:5c:09:11:
27:4b:6f:74:e0:47:83:8e:dd:90:7b:18:be:db:67:
92:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4C:09:C2:6D:9D:42:B6:8E:C6:6E:3D:78:4C:5A:E5:C8:1F:9B:E7
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e31382e302f32332d3233203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.18.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:3a:4c:64:f4:0b:81:1f:bd:fe:60:f2:57:26:48:e8:d0:cd:
3d:39:41:05:a8:97:71:7e:5b:67:88:68:93:e4:b3:62:55:67:
d5:89:cd:97:d8:f1:a4:da:0d:c1:ba:a9:16:07:63:67:cd:46:
a9:0b:b1:c7:f7:8e:68:e1:1c:3e:33:a7:56:cb:7d:85:1c:08:
99:02:ff:ad:43:a8:d7:8c:dd:35:50:a9:05:1d:ef:0e:c1:8f:
51:2d:80:03:99:fa:a4:4d:42:5d:b2:ad:e0:ce:f4:c6:56:65:
72:43:b3:47:c0:c3:f6:b5:39:34:56:cc:28:7c:a0:37:1b:c8:
b3:23:51:82:48:21:1d:73:10:b8:a8:c0:cc:f2:2b:7d:8c:07:
cf:f8:f6:7a:0e:4a:4d:46:a3:05:bb:2a:f5:b6:a7:91:24:13:
84:4d:3f:02:a8:c8:41:ee:b1:04:80:3a:9d:4b:c2:ab:f5:1e:
4d:e4:ea:2e:76:9e:3a:8e:7c:09:c2:92:b7:80:b2:b7:88:ce:
b6:6d:f8:b5:51:e6:cc:96:61:41:d5:25:d0:3c:84:a2:76:4c:
f7:87:c3:3b:89:2d:4b:6c:9d:46:02:f4:17:0b:d4:df:5d:0e:
7e:ba:f8:c8:ea:b5:36:0a:3c:f1:af:67:f1:8d:0f:16:3d:45:
3d:c0:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:55 2026 by rpki-client