
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32362e302f32332d3233203d3e203536303139.roa
File: 3137352e32352e32362e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier: /hc133flGNXp64+zVImI83qVq1YUrHXwo6UMOXQVhwo=
Subject key identifier: D0:0E:1A:F6:DE:B1:15:DD:99:8E:45:4E:BA:62:24:69:E4:88:1B:1A
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 0DABC6789DD117EE445B5E59EE970DD08C74AC1B
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32362e302f32332d3233203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:41:54 +0000
ROA not before: Tue 14 Apr 2026 06:36:54 +0000
ROA not after: Tue 13 Apr 2027 06:41:54 +0000
asID: 56019
IP address blocks: 175.25.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:ab:c6:78:9d:d1:17:ee:44:5b:5e:59:ee:97:0d:d0:8c:74:ac:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:36:54 2026 GMT
Not After : Apr 13 06:41:54 2027 GMT
Subject: CN=D00E1AF6DEB115DD998E454EBA622469E4881B1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:85:8b:b7:d0:33:7b:ef:17:a2:0e:b8:68:
b4:03:16:49:28:d8:43:a7:c6:02:ae:fb:03:32:72:
d3:64:5c:04:43:5e:61:8d:10:15:1f:10:46:41:ba:
a0:fa:06:00:b8:40:8a:90:ac:02:32:cb:6d:b2:2d:
9b:a6:f8:6a:41:06:16:c7:85:22:29:dd:67:c2:9d:
9b:44:b4:18:63:76:46:42:92:3b:f4:c0:6b:02:45:
9f:61:45:82:5b:6a:4d:11:75:86:a7:ae:46:01:c0:
2e:48:aa:98:22:7f:7d:72:ab:95:cf:9a:d0:f5:4c:
ab:5c:65:ca:2d:56:41:19:4d:8f:cc:c7:53:f5:f7:
b0:aa:61:9c:0c:1d:ca:4b:69:38:01:e3:2a:7b:6e:
bf:97:95:60:61:2f:11:2a:2c:a2:f1:b7:23:a9:ca:
f7:43:61:ff:6e:af:40:5e:42:59:c0:80:62:a3:40:
6d:b9:ce:98:3e:95:82:95:51:19:eb:36:3e:1e:e9:
86:6a:c8:b1:10:db:50:ba:33:28:d5:d8:40:46:fa:
65:a5:72:16:a8:a1:31:09:90:e9:b4:c4:e4:bb:88:
50:42:61:98:98:73:ff:04:6b:6f:be:25:d1:4d:c2:
38:9e:d2:62:21:81:21:80:35:38:a3:21:0b:d0:f2:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:0E:1A:F6:DE:B1:15:DD:99:8E:45:4E:BA:62:24:69:E4:88:1B:1A
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e32362e302f32332d3233203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.26.0/23
Signature Algorithm: sha256WithRSAEncryption
5f:0c:29:42:97:cc:7d:ca:d8:d8:3f:1b:e0:de:bd:33:d5:e8:
a4:98:54:a6:a4:bd:be:61:ed:95:0a:50:62:b6:52:b6:d6:e5:
7a:04:6b:af:a8:a3:34:60:74:80:d0:6b:82:d7:57:ec:47:7d:
b6:48:7c:03:c0:db:c5:c7:bf:0e:40:8f:78:7c:68:11:2f:03:
4b:02:0b:08:e4:23:7b:f4:40:48:3c:6a:68:8b:13:82:47:b2:
b4:d4:51:ab:51:72:76:5a:3c:34:9d:3f:18:db:42:76:e8:60:
0f:c2:94:6b:af:aa:cb:eb:b9:14:f1:ee:a6:80:43:99:11:7e:
01:a6:b4:19:8e:68:b1:63:ac:b6:c9:aa:8a:e0:92:7b:53:2b:
48:ea:b7:23:c4:f8:7e:bb:5f:88:d5:db:40:e3:1a:3c:4b:9b:
32:ff:bd:d1:09:be:36:9c:9e:17:28:27:2b:71:76:29:aa:35:
6b:98:05:a0:1e:46:04:2d:93:21:03:f3:fb:cc:0c:c2:8d:e5:
8b:58:7d:fe:12:50:c8:c4:16:a7:53:7b:99:7c:79:8e:07:90:
42:e9:cb:d3:83:92:b9:e8:3d:4f:b1:c9:13:a1:af:bf:79:92:
5e:cf:87:e3:76:1c:24:63:70:85:ff:d3:15:5f:b8:0f:00:73:
3c:f1:02:60
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDavGeJ3RF+5EW15Z7pcN0Ix0rBswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB
MEMwNjY4MDAeFw0yNjA0MTQwNjM2NTRaFw0yNzA0MTMwNjQxNTRaMDMxMTAvBgNV
BAMTKEQwMEUxQUY2REVCMTE1REQ5OThFNDU0RUJBNjIyNDY5RTQ4ODFCMUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGs4WLt9Aze+8Xog64aLQDFkko
2EOnxgKu+wMyctNkXARDXmGNEBUfEEZBuqD6BgC4QIqQrAIyy22yLZum+GpBBhbH
hSIp3WfCnZtEtBhjdkZCkjv0wGsCRZ9hRYJbak0RdYanrkYBwC5Iqpgif31yq5XP
mtD1TKtcZcotVkEZTY/Mx1P197CqYZwMHcpLaTgB4yp7br+XlWBhLxEqLKLxtyOp
yvdDYf9ur0BeQlnAgGKjQG25zpg+lYKVURnrNj4e6YZqyLEQ21C6MyjV2EBG+mWl
chaooTEJkOm0xOS7iFBCYZiYc/8Ea2++JdFNwjie0mIhgSGANTijIQvQ8nKZAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU0A4a9t6xFd2ZjkVOumIkaeSIGxowHwYDVR0j
BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5
MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1
MmUzMjM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzEzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAa8ZGjANBgkqhkiG9w0BAQsFAAOCAQEAXwwpQpfMfcrY2D8b4N69M9XopJhU
pqS9vmHtlQpQYrZSttblegRrr6ijNGB0gNBrgtdX7Ed9tkh8A8Dbxce/DkCPeHxo
ES8DSwILCOQje/RASDxqaIsTgkeytNRRq1Fydlo8NJ0/GNtCduhgD8KUa6+qy+u5
FPHupoBDmRF+Aaa0GY5osWOstsmqiuCSe1MrSOq3I8T4frtfiNXbQOMaPEubMv+9
0Qm+NpyeFygnK3F2Kao1a5gFoB5GBC2TIQPz+8wMwo3li1h9/hJQyMQWp1N7mXx5
jgeQQunL04OSueg9T7HJE6Gvv3mSXs+H43YcJGNwhf/TFV+4DwBzPPECYA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:22:10 2026 by rpki-client