
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32312d3231203d3e203233373234.roa
File: 3137352e32352e33322e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: xOxtVzSqRN0fTepow7kTyMGA9m40oFUwadlMGk+s6Sk=
Subject key identifier: 5F:6F:8A:BF:E4:92:1F:FF:9A:BB:AE:ED:D3:66:C7:3D:9F:A5:A7:E3
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 3ACE19D7F0AA4F3BB62D4CC5264759FA95986D33
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32312d3231203d3e203233373234.roa
Signing time: Tue 14 Apr 2026 06:41:54 +0000
ROA not before: Tue 14 Apr 2026 06:36:54 +0000
ROA not after: Tue 13 Apr 2027 06:41:54 +0000
asID: 23724
IP address blocks: 175.25.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:ce:19:d7:f0:aa:4f:3b:b6:2d:4c:c5:26:47:59:fa:95:98:6d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:36:54 2026 GMT
Not After : Apr 13 06:41:54 2027 GMT
Subject: CN=5F6F8ABFE4921FFF9ABBAEEDD366C73D9FA5A7E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f4:6d:e5:48:25:39:70:4e:5a:0b:70:d7:e8:
da:d0:a3:3a:24:d4:bb:17:78:a9:5d:d5:36:b5:29:
85:b7:d8:7e:e9:9f:8f:06:1d:41:61:a6:5b:64:97:
1f:53:d6:4f:ad:8e:ca:df:68:28:fe:60:04:54:40:
08:04:8f:ea:af:00:4c:d8:4b:0e:61:94:53:32:65:
b2:02:4c:f5:8f:1c:a3:d1:91:9d:aa:9b:9a:c9:ba:
9d:2e:c6:63:23:e5:3e:4e:86:5d:41:ed:62:6f:19:
cf:4c:45:79:33:ce:0e:8d:84:e2:eb:6a:9c:9e:eb:
09:81:a3:f4:2c:a0:71:38:84:79:5d:d7:0b:7d:a3:
a1:fb:05:55:15:93:2b:81:c7:2d:76:66:6d:c5:62:
7c:99:7e:60:70:4f:ed:7c:41:89:f8:4d:9b:09:59:
60:52:25:ae:49:30:b9:8f:81:9b:e7:04:d7:e7:fd:
9c:ce:bd:50:22:c7:d8:38:12:f0:65:c6:8f:36:14:
10:e0:97:d5:7b:b5:d3:48:9e:19:2f:95:e2:94:7f:
7c:bf:02:8a:4a:d8:63:6e:bb:27:6b:f2:4b:6d:3a:
fa:94:56:40:2c:fe:af:ab:2e:56:c3:5a:71:64:a8:
d9:ca:fd:7c:0d:5c:51:7b:94:b4:56:f0:a9:fe:0b:
cb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:6F:8A:BF:E4:92:1F:FF:9A:BB:AE:ED:D3:66:C7:3D:9F:A5:A7:E3
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.32.0/21
Signature Algorithm: sha256WithRSAEncryption
51:5c:00:5c:c1:50:d9:c0:84:57:de:f5:7c:df:8f:24:23:9c:
89:87:31:30:4a:e3:3e:bc:9f:2f:1d:01:76:25:de:a0:72:8e:
68:2f:8a:9a:6c:00:a4:db:f5:cd:16:aa:95:51:3b:bd:16:b4:
4a:b8:4c:aa:a8:53:81:84:c6:6d:a7:e4:b2:5e:39:94:48:c3:
c5:da:cc:d7:73:c4:1e:91:cb:8d:e7:0b:69:97:c4:ed:e2:78:
a0:27:d7:4d:fc:ff:68:d9:23:50:b5:bd:48:d8:84:a3:ce:3d:
ee:5a:bb:85:19:4a:9e:d8:61:c6:54:9d:77:9b:fb:dc:ce:f4:
22:98:7a:6b:60:cc:64:be:94:b1:ad:de:31:5b:96:3c:0b:6b:
45:f2:5b:94:dd:f6:c2:2f:ba:7a:13:10:53:cf:f7:42:53:bd:
4b:c3:c9:1c:2f:b9:41:b3:fd:0b:c0:30:84:11:34:41:96:f3:
d0:ae:81:ea:97:d5:a0:5e:e4:07:07:dd:74:d1:f3:d0:19:e0:
82:5d:b6:6a:97:b4:8e:1d:a8:e9:1b:ea:55:41:96:6e:eb:cb:
1c:48:99:62:4f:8c:9b:de:31:d0:2d:6b:8d:6f:99:5c:90:6a:
72:eb:17:b8:fe:f7:34:ac:43:f3:db:01:1e:fe:98:09:b3:6a:
19:c2:56:8f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOs4Z1/CqTzu2LUzFJkdZ+pWYbTMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBB
MEMwNjY4MDAeFw0yNjA0MTQwNjM2NTRaFw0yNzA0MTMwNjQxNTRaMDMxMTAvBgNV
BAMTKDVGNkY4QUJGRTQ5MjFGRkY5QUJCQUVFREQzNjZDNzNEOUZBNUE3RTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr9G3lSCU5cE5aC3DX6NrQozok
1LsXeKld1Ta1KYW32H7pn48GHUFhpltklx9T1k+tjsrfaCj+YARUQAgEj+qvAEzY
Sw5hlFMyZbICTPWPHKPRkZ2qm5rJup0uxmMj5T5Ohl1B7WJvGc9MRXkzzg6NhOLr
apye6wmBo/QsoHE4hHld1wt9o6H7BVUVkyuBxy12Zm3FYnyZfmBwT+18QYn4TZsJ
WWBSJa5JMLmPgZvnBNfn/ZzOvVAix9g4EvBlxo82FBDgl9V7tdNInhkvleKUf3y/
AopK2GNuuydr8kttOvqUVkAs/q+rLlbDWnFkqNnK/XwNXFF7lLRW8Kn+C8v9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUX2+Kv+SSH/+au67t02bHPZ+lp+MwHwYDVR0j
BBgwFoAUURedZ1w8tWotRKpg+iuTMKDAZoAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjI3NjU5ODY5ODYwNjU5NS8wLzUxMTc5RDY3NUMzQ0I1NkEyRDQ0QUE2MEZBMkI5
MzMwQTBDMDY2ODAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExNzlENjc1QzNDQjU2QTJENDRBQTYwRkEyQjkzMzBBMEMwNjY4MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2Mjc2NTk4Njk4NjA2NTk1LzAvMzEzNzM1MmUzMjM1
MmUzMzMyMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzIzMzM3MzIzNC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA68ZIDANBgkqhkiG9w0BAQsFAAOCAQEAUVwAXMFQ2cCEV971fN+PJCOciYcx
MErjPryfLx0BdiXeoHKOaC+KmmwApNv1zRaqlVE7vRa0SrhMqqhTgYTGbafksl45
lEjDxdrM13PEHpHLjecLaZfE7eJ4oCfXTfz/aNkjULW9SNiEo8497lq7hRlKnthh
xlSdd5v73M70Iph6a2DMZL6Usa3eMVuWPAtrRfJblN32wi+6ehMQU8/3QlO9S8PJ
HC+5QbP9C8AwhBE0QZbz0K6B6pfVoF7kBwfddNHz0Bnggl22ape0jh2o6RvqVUGW
buvLHEiZYk+Mm94x0C1rjW+ZXJBqcusXuP73NKxD89sBHv6YCbNqGcJWjw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:45 2026 by rpki-client