
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e203233373234.roa
File: 3137352e32352e34302e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: yFejQp/PYotxZfzvtO0mNuaezwy82hdNvYsqnWZ0BK0=
Subject key identifier: 79:DA:AC:2A:E7:78:66:50:C6:F3:74:2B:DD:AB:1D:D0:34:74:7F:B8
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 4E797BF8BDDC6392937C458659396D4A29C531CB
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e203233373234.roa
Signing time: Tue 14 Apr 2026 06:41:54 +0000
ROA not before: Tue 14 Apr 2026 06:36:54 +0000
ROA not after: Tue 13 Apr 2027 06:41:54 +0000
asID: 23724
IP address blocks: 175.25.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:79:7b:f8:bd:dc:63:92:93:7c:45:86:59:39:6d:4a:29:c5:31:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:36:54 2026 GMT
Not After : Apr 13 06:41:54 2027 GMT
Subject: CN=79DAAC2AE7786650C6F3742BDDAB1DD034747FB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d6:2e:64:b2:ab:36:a5:1e:60:9e:ae:77:af:
e4:d5:7a:97:3c:b9:04:e3:ab:08:49:dc:1d:af:39:
1d:95:81:7a:4c:d5:44:c9:eb:6e:a4:29:3c:20:62:
44:6d:ac:45:92:5d:f9:86:31:2b:24:fe:3d:7b:bb:
cf:a1:27:dc:3d:e5:7d:0f:23:ab:d0:5b:d1:11:39:
fa:91:ca:5d:88:ef:e4:1c:db:6f:04:13:f0:e4:33:
b8:aa:b2:5f:3f:6a:f1:5a:90:33:99:a5:ff:64:37:
f2:89:a0:f2:49:7c:96:25:37:ee:06:9d:da:a0:7a:
f4:17:15:f2:2d:0d:6c:89:fd:a1:d5:10:d0:0a:09:
47:dd:f0:fc:bf:69:31:64:ed:b3:ee:20:3c:4f:e2:
23:dd:e3:08:6a:62:cf:6d:c7:0e:d2:43:a0:96:99:
1b:da:9a:ac:8e:9c:d1:2b:da:da:3c:4c:34:b9:42:
b7:7d:27:ac:87:86:38:87:43:ba:d4:6d:fc:5a:65:
6a:18:3e:95:ea:19:8c:08:8f:29:a3:3a:b4:eb:13:
9f:6c:56:45:9b:44:57:67:db:12:b9:8f:2d:07:5e:
13:e5:0b:1f:b7:1a:ff:51:43:89:1e:aa:33:d7:0d:
ed:55:bd:0c:a7:e1:94:9e:73:72:e1:41:51:3f:de:
10:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:DA:AC:2A:E7:78:66:50:C6:F3:74:2B:DD:AB:1D:D0:34:74:7F:B8
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.40.0/21
Signature Algorithm: sha256WithRSAEncryption
18:b1:13:c1:61:54:60:ee:8d:fa:58:9d:89:ca:26:d0:9e:f5:
a3:79:30:82:8e:64:6c:4c:00:33:08:5b:aa:f4:44:f8:e9:9c:
94:ec:6b:43:cc:e7:d1:c0:c4:c2:77:25:2b:22:4e:ca:2d:ee:
b9:f7:6f:e2:4f:3d:42:4a:93:e1:de:ec:e4:2e:05:db:ac:27:
e8:46:7e:c6:92:e2:a7:f0:1c:eb:f9:80:45:20:08:fc:7b:1e:
c6:ba:76:52:c6:28:20:ed:79:53:3b:ed:36:58:86:c6:11:eb:
fe:3b:87:07:1c:cf:e2:10:ce:58:1d:cb:9f:24:17:4e:a4:04:
8d:df:e6:e1:7b:00:2d:1d:2c:68:5c:5d:78:f4:cc:49:70:f6:
e4:4b:ff:2e:90:da:51:1b:01:14:e1:0e:58:25:d7:1f:d1:27:
26:9a:50:f5:45:7d:87:01:0c:6f:76:8f:56:38:f1:53:43:f6:
53:21:aa:86:c2:ab:57:b3:af:0b:21:10:74:b7:a6:dc:a5:15:
fe:3c:16:e9:19:df:5d:18:70:b0:a6:4a:f3:0f:28:e0:51:91:
45:44:63:2f:66:fc:7a:92:89:5f:af:c6:9c:1f:33:7f:8a:e7:
cd:99:21:3e:03:16:8c:38:f6:56:9f:fd:5b:0a:e4:66:c1:8d:
9b:63:09:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:44:56 2026 by rpki-client