
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32322d3232203d3e203536303139.roa
File: 3137352e32352e33322e302f32322d3232203d3e203536303139.roa (raw, json)
Hash identifier: gUz35MfD0Ykeu8KDIaw7WlEEJ3AFopj7w+xtSkl+rGA=
Subject key identifier: 2B:B1:32:DF:D0:57:8B:EF:BB:50:E5:37:75:23:3A:40:9E:C2:B8:F9
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 6C66214A00ACA2E06CAB0D68B888435A730F0565
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32322d3232203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:46:50 +0000
ROA not before: Tue 14 Apr 2026 06:41:50 +0000
ROA not after: Tue 13 Apr 2027 06:46:50 +0000
asID: 56019
IP address blocks: 175.25.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:66:21:4a:00:ac:a2:e0:6c:ab:0d:68:b8:88:43:5a:73:0f:05:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:41:50 2026 GMT
Not After : Apr 13 06:46:50 2027 GMT
Subject: CN=2BB132DFD0578BEFBB50E53775233A409EC2B8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:02:ab:b5:4f:ad:17:55:01:a1:9a:5a:fb:48:
1c:d8:f4:cc:3a:08:b9:6b:de:db:4e:ae:48:53:49:
73:5e:ee:2c:d9:e6:2b:17:ba:b4:3c:d2:bf:80:d3:
29:b6:0a:59:e3:00:53:f8:39:30:2e:d2:39:33:98:
b1:20:e7:ce:b3:1c:c7:a4:f6:76:a1:cd:bb:66:21:
46:64:75:85:84:3b:6b:7a:95:c0:4d:88:7f:65:82:
91:a3:1e:94:e1:47:b2:de:4b:b0:14:d0:4a:27:9e:
bd:09:a8:5f:c4:83:36:86:29:22:1a:44:66:a3:d4:
b5:64:da:d0:82:67:14:04:78:ef:38:2e:c3:cc:63:
2e:fb:97:80:b1:6d:2d:fb:e2:4d:ee:3b:ec:24:c7:
9c:46:c1:85:48:8c:23:8f:40:81:31:3d:21:4c:47:
42:cc:10:dd:12:82:3c:68:50:14:b5:da:c3:36:70:
41:76:7f:45:5c:ab:68:22:5a:d0:3a:cf:b8:3e:75:
db:00:a5:46:16:e6:24:1f:e1:21:8e:44:9d:7c:81:
90:cd:40:07:c8:ca:16:70:55:00:54:9b:56:47:bf:
93:cf:6b:48:f2:13:0b:52:15:c8:22:6f:43:b4:90:
d1:38:b8:e5:27:eb:dc:3e:52:0f:d3:54:25:71:c4:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B1:32:DF:D0:57:8B:EF:BB:50:E5:37:75:23:3A:40:9E:C2:B8:F9
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e33322e302f32322d3232203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.32.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:ab:89:47:5c:b6:95:e0:59:10:05:d2:cd:4f:c8:fd:c4:97:
34:54:77:9c:04:2e:2e:16:49:0f:e4:03:84:83:75:6b:aa:77:
ec:3b:3c:5d:5f:25:86:fb:16:b1:3c:5c:5d:66:bb:c3:e6:c5:
75:b6:01:8a:b7:13:56:fd:ab:e0:8b:f8:ab:27:c5:1b:23:24:
28:0b:70:8c:d7:45:2d:f8:13:54:ab:aa:cd:48:f8:60:07:e6:
ae:c4:0b:70:54:63:13:e2:4c:af:e1:ca:94:00:7f:68:ea:02:
7e:19:cc:b0:d7:8f:cd:0d:c8:e7:a4:6e:9d:88:1c:45:14:1d:
1f:1a:d3:22:f8:24:7f:1c:c4:67:12:75:84:47:25:a8:09:b1:
3f:17:c1:51:03:de:08:6c:6d:3e:e7:93:03:71:95:39:bd:21:
e2:e3:64:5e:0c:71:86:99:fb:ca:22:c5:72:ae:f7:bd:00:e5:
04:40:45:39:16:4c:87:c7:b8:2d:ff:6a:12:76:28:f7:38:a5:
5e:1e:f9:85:30:f6:13:dc:09:5d:9b:a5:1b:c6:21:38:1b:d3:
cb:87:cb:86:5c:83:86:b1:53:c1:f1:a4:fd:38:6c:41:d8:fd:
28:73:10:ba:b2:00:04:f6:71:df:d0:a7:32:f0:0b:f5:6f:37:
02:5f:55:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:41:50 2026 by rpki-client