
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32302e302f32322d3232203d3e203536303139.roa
File: 3137352e32352e32302e302f32322d3232203d3e203536303139.roa (raw, json)
Hash identifier: vAyJMycTWlZeKKPc2K9qUzu4GBH2cQJ8HKVDpUL+I7A=
Subject key identifier: CA:25:53:9E:B6:89:E5:52:15:96:F0:C0:1B:9C:57:03:C4:5C:66:C3
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 1604D4E954F5D1304D84C8F28F4F1B8B232C5321
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32302e302f32322d3232203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:41:54 +0000
ROA not before: Tue 14 Apr 2026 06:36:54 +0000
ROA not after: Tue 13 Apr 2027 06:41:54 +0000
asID: 56019
IP address blocks: 175.25.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:04:d4:e9:54:f5:d1:30:4d:84:c8:f2:8f:4f:1b:8b:23:2c:53:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:36:54 2026 GMT
Not After : Apr 13 06:41:54 2027 GMT
Subject: CN=CA25539EB689E5521596F0C01B9C5703C45C66C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:3a:2f:cd:58:75:82:a3:a9:3c:89:36:e8:
c8:d1:b9:8b:4d:71:1a:e6:f5:d7:d4:78:60:a7:65:
cb:7a:3b:3e:a3:83:d9:3d:14:eb:92:29:29:e3:23:
81:06:09:72:d8:c9:67:3f:c3:74:a3:94:c3:b8:85:
d9:ba:cd:85:f2:53:4b:e3:d4:49:30:b7:56:3e:80:
e3:9f:42:b7:49:00:f7:dd:10:66:27:e7:52:2f:92:
6a:76:14:db:0f:6f:55:a0:ad:40:85:40:1a:a6:a2:
a3:29:86:e5:ff:a6:a5:9a:e5:35:08:8a:e2:15:2c:
ab:16:79:21:c8:dc:9f:b3:4d:f3:b4:84:7c:a0:43:
79:72:3b:b3:14:fa:eb:e9:b8:b1:58:2b:0b:72:99:
bf:ea:6b:1f:54:81:06:87:ac:7b:d9:4a:90:aa:38:
5e:f9:10:7a:1a:4d:3d:b6:ea:2a:1c:ba:ea:cc:2a:
b6:69:23:5f:3d:db:5c:c2:b3:fa:26:98:d7:87:c6:
e5:47:80:f1:68:3e:ac:17:47:2e:e0:c8:bb:cf:9b:
8e:7a:76:55:5d:39:e4:6b:35:58:60:2d:b3:61:58:
2c:9f:14:71:d5:ce:1d:41:7f:cc:29:0b:8e:74:c6:
38:1e:ea:70:5f:8c:9e:37:ac:74:08:6b:4f:40:06:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:53:9E:B6:89:E5:52:15:96:F0:C0:1B:9C:57:03:C4:5C:66:C3
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32302e302f32322d3232203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.20.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:37:92:ce:d7:8b:55:76:1e:92:76:82:95:40:86:28:4f:0d:
c5:ed:6f:11:4e:b6:2d:3d:78:b3:5f:74:d4:22:b3:47:5f:42:
f1:8b:01:e4:04:88:b0:29:b0:d2:9b:e3:55:ab:8b:e1:68:27:
d9:59:39:b6:f6:e1:0f:4d:91:b6:e3:94:5d:fd:89:40:0f:9a:
6c:7f:60:c4:1c:02:a2:30:4b:b9:28:cb:19:bd:02:6f:17:43:
5d:76:bf:41:30:f7:ce:40:c1:35:31:1a:4c:90:d1:7f:ec:70:
41:1a:71:09:51:a1:95:77:69:bf:2e:c4:24:57:d5:ee:36:66:
ef:dd:db:6b:0c:2e:47:50:6d:5f:ad:6b:e7:a1:75:1b:54:a8:
88:c0:92:b5:8a:25:4f:21:5c:e7:3d:03:c5:4a:db:49:24:97:
9e:61:54:18:ed:9e:d5:74:1d:5c:0f:76:bb:14:f9:f2:c5:e1:
64:d8:59:ee:7f:ee:67:54:6d:fc:94:44:c5:ec:5e:ba:05:44:
b6:0c:df:99:b3:15:57:44:13:77:e5:d1:33:1d:b8:48:ff:4e:
90:60:a3:ee:a0:8d:3d:ad:df:82:a8:59:c1:3c:f5:42:db:0b:
6a:3d:82:5a:ad:cf:c3:41:28:44:5a:6a:fc:0b:64:3e:39:d0:
83:d5:ba:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:00 2026 by rpki-client