
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e2034383038.roa
File: 3137352e32352e34302e302f32312d3231203d3e2034383038.roa (raw, json)
Hash identifier: x0MKY6E8JEqhKR81jD+T+X8yRp1xzS9JhXhkei/PvIo=
Subject key identifier: 45:4B:63:5C:E2:17:C3:9C:74:50:5B:DA:2F:2D:F7:E6:CE:8A:3B:1D
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 56B754571AFE8D9F0F7150D058D2EE735DD5C5C5
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e2034383038.roa
Signing time: Tue 14 Apr 2026 06:46:50 +0000
ROA not before: Tue 14 Apr 2026 06:41:50 +0000
ROA not after: Tue 13 Apr 2027 06:46:50 +0000
asID: 4808
IP address blocks: 175.25.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b7:54:57:1a:fe:8d:9f:0f:71:50:d0:58:d2:ee:73:5d:d5:c5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:41:50 2026 GMT
Not After : Apr 13 06:46:50 2027 GMT
Subject: CN=454B635CE217C39C74505BDA2F2DF7E6CE8A3B1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c4:c3:f1:27:d3:30:1a:bc:1f:39:d4:93:b1:
46:b2:4a:ab:5a:9a:a9:61:01:6b:97:bf:36:4c:4d:
5f:5c:32:05:75:96:cf:ed:04:03:fc:e0:21:3e:b2:
86:43:6f:06:9d:41:a4:77:87:48:f9:04:1f:10:3f:
00:e4:e4:88:02:8b:eb:33:9c:6f:d3:42:3b:28:16:
93:02:43:b6:d5:11:93:14:f3:08:8e:62:1e:eb:f9:
fc:34:9c:c1:b6:f0:c8:2f:53:98:11:fe:c7:b7:c6:
68:ae:de:70:9f:08:11:d8:dd:60:7c:f4:4f:49:1f:
99:84:d7:77:e2:d0:06:85:14:7f:a7:52:66:69:4e:
ce:24:48:8f:0b:e3:b2:3a:3d:5f:d0:17:eb:44:1b:
91:cd:72:8f:f3:2d:e8:af:d7:55:70:b6:bd:5a:e9:
2d:3c:87:f7:64:6c:67:a9:c6:86:9e:59:02:ec:32:
7d:47:30:6b:e4:2b:ad:43:ec:5b:1e:fc:bc:bb:cc:
0c:f1:d9:d4:57:a4:20:74:b3:5f:96:01:6c:91:34:
95:30:00:e7:e0:09:a9:4b:29:ed:06:e9:95:0b:9e:
a6:f5:70:bd:fc:88:f2:f3:d1:46:80:4c:f8:bd:70:
1d:25:63:71:26:d1:8e:89:94:b3:78:23:e1:e5:b7:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:63:5C:E2:17:C3:9C:74:50:5B:DA:2F:2D:F7:E6:CE:8A:3B:1D
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e34302e302f32312d3231203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.40.0/21
Signature Algorithm: sha256WithRSAEncryption
72:ab:f5:c3:ab:a0:6a:73:a2:42:b0:3a:ba:15:e4:c0:c4:30:
82:1e:45:bd:66:b6:f2:97:6b:36:bf:db:15:d4:16:ca:ff:7d:
36:ed:db:d6:f2:9e:9e:29:5c:93:c5:19:16:53:39:de:f3:ec:
ed:21:15:8e:8f:49:30:02:eb:ea:d6:ad:8f:18:76:b3:e6:7f:
5c:2e:b0:b8:7e:cc:a8:3d:e3:c9:03:9d:41:41:6e:79:d5:97:
04:4a:14:0b:c8:ec:fa:a1:59:dc:d4:58:a7:ef:2e:d5:a1:af:
61:4c:c2:67:37:24:9f:a6:a8:0c:30:36:d7:ee:1e:77:e2:7f:
77:99:6e:63:88:ac:14:c7:f0:09:1e:b4:a8:40:8b:9c:79:18:
c5:35:5e:40:b0:c9:d8:d8:2c:b6:73:10:17:ee:34:d5:5f:3a:
f3:30:31:01:f3:dc:dc:fd:6a:01:15:9b:aa:f2:50:31:a0:09:
1a:78:65:4b:44:84:b5:38:1e:0b:4d:bc:3d:25:ea:29:e9:8f:
cc:96:82:33:26:0a:b5:5d:08:8f:8c:63:b5:e1:50:ed:f8:86:
a9:b8:1b:d4:76:6d:9a:94:52:4e:c8:cb:4a:c9:5b:94:08:cd:
8d:18:fa:29:3e:86:3e:a7:a6:1d:2f:c0:7c:bf:8d:f8:86:9d:
a4:bc:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:02:58 2026 by rpki-client