
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32332d3233203d3e203536303139.roa
File: 3137352e32352e32342e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier: g0n75Oq/n805cVKpjNxKbDfk/gjdOVurC0iiXhtSuDQ=
Subject key identifier: BA:CF:10:6C:3C:28:68:CE:B3:73:AD:4F:3A:00:F9:52:D2:7A:3C:06
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 2BD068DCA9EA09791741A6D571880E6D26A4E642
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32332d3233203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:46:50 +0000
ROA not before: Tue 14 Apr 2026 06:41:50 +0000
ROA not after: Tue 13 Apr 2027 06:46:50 +0000
asID: 56019
IP address blocks: 175.25.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:d0:68:dc:a9:ea:09:79:17:41:a6:d5:71:88:0e:6d:26:a4:e6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:41:50 2026 GMT
Not After : Apr 13 06:46:50 2027 GMT
Subject: CN=BACF106C3C2868CEB373AD4F3A00F952D27A3C06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:06:b6:9f:b8:b0:ce:3e:ff:e6:f1:7b:48:
57:fe:6d:46:0f:b4:76:c7:67:dd:1d:c0:da:05:5a:
49:6b:8e:94:45:f8:ea:6a:5e:99:7f:3b:21:60:c2:
41:5e:44:eb:8e:57:dc:87:f1:ad:ab:9e:5b:0c:a1:
c5:23:b8:0c:af:63:df:f1:84:f6:d1:f9:84:6c:ea:
cb:0d:a0:83:8c:a1:c8:02:6f:e8:0b:32:66:64:d0:
e7:74:d3:ae:b2:e8:32:98:12:9f:91:52:4f:eb:35:
5f:1c:0e:c4:40:c1:d6:23:f6:0e:ba:62:2e:a6:e5:
4a:8d:53:17:c5:e9:cd:bb:6f:0e:f4:cc:5c:87:77:
06:9f:bf:d2:4a:b7:53:f4:33:bb:b7:ab:cf:85:de:
30:f5:10:9f:1c:15:48:a0:46:22:27:53:43:40:7f:
d9:2d:12:6a:81:da:a0:bb:23:24:7b:79:90:00:81:
69:b9:c7:b4:5b:f8:29:1b:df:ca:e2:50:f2:3e:dd:
7f:27:a7:0a:68:1a:4e:98:94:73:ad:15:58:9e:b4:
f0:a5:d7:0d:80:3c:ed:da:c4:da:1d:f6:67:c6:44:
1e:62:77:ae:37:dd:56:33:15:47:cd:a6:e4:e4:1d:
8a:88:97:81:69:52:9c:89:44:83:c2:6b:13:6d:7f:
a2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:CF:10:6C:3C:28:68:CE:B3:73:AD:4F:3A:00:F9:52:D2:7A:3C:06
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32342e302f32332d3233203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.24.0/23
Signature Algorithm: sha256WithRSAEncryption
65:1e:6c:e1:f5:f5:32:42:4b:9c:dd:df:47:05:2e:56:5f:d4:
95:aa:77:69:41:2e:10:68:61:93:43:16:f2:db:fa:eb:d5:09:
62:5c:e8:25:ef:74:60:e7:69:56:78:78:3b:89:94:b4:5a:f0:
49:bd:48:78:dd:f1:38:24:2c:25:99:f3:a1:d3:38:46:e0:02:
e8:24:9b:cd:bc:ed:38:80:75:f9:b5:77:a0:a2:56:3c:65:f5:
bc:a8:f2:f0:0d:f9:e2:12:6f:78:0b:63:bf:36:9f:52:b9:7c:
d4:5f:06:d9:17:2b:d9:0a:61:72:33:ce:49:18:09:43:e2:2b:
ee:1e:a7:e4:32:01:82:81:2e:35:42:c4:17:82:3f:de:5d:c3:
19:50:45:da:0c:a6:df:06:76:7c:9b:02:de:8d:4f:44:be:94:
a4:c9:df:c6:f3:47:d6:ec:dc:71:2e:d9:e1:34:d7:de:9c:ff:
b3:10:db:73:60:68:2a:5d:72:e4:a4:d9:63:03:30:b5:c6:1e:
1e:91:1e:50:7c:e4:b4:f4:94:8a:46:bc:fa:bf:6d:99:91:fd:
89:9c:a3:08:b7:7c:52:d1:cc:0b:5d:f4:e6:a6:1a:54:d2:54:
95:63:fa:b5:5e:86:f0:2f:3b:d5:a2:0c:4e:2f:08:9b:e0:93:
3e:fa:a3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:19:12 2026 by rpki-client