
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35362e302f32322d3232203d3e2034383038.roa
File: 3137352e32352e35362e302f32322d3232203d3e2034383038.roa (raw, json)
Hash identifier: mFjcPDm2IyiNegnnwaw7VABBKuvMrogWBrF5Ir1kEUQ=
Subject key identifier: 46:8E:DB:4B:A9:7D:0A:0A:11:19:51:00:94:0E:54:8E:66:7B:DA:A1
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 69385417D7FD1A9EC12C03E9C1DA074C6AA51173
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35362e302f32322d3232203d3e2034383038.roa
Signing time: Tue 14 Apr 2026 06:46:50 +0000
ROA not before: Tue 14 Apr 2026 06:41:50 +0000
ROA not after: Tue 13 Apr 2027 06:46:50 +0000
asID: 4808
IP address blocks: 175.25.56.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:38:54:17:d7:fd:1a:9e:c1:2c:03:e9:c1:da:07:4c:6a:a5:11:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:41:50 2026 GMT
Not After : Apr 13 06:46:50 2027 GMT
Subject: CN=468EDB4BA97D0A0A11195100940E548E667BDAA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:86:51:55:ad:cc:c9:4e:86:1f:80:54:9b:d7:
0f:13:af:da:d4:b3:4e:93:fb:1e:9f:09:ec:a4:d9:
78:0a:dc:0a:7f:dc:d5:73:dd:16:02:2f:6d:e5:37:
62:a1:5b:59:1c:8b:02:31:ee:2d:9f:d0:5f:87:dc:
c6:62:a1:79:34:e3:03:51:c0:d1:84:15:37:5c:91:
6f:b7:0a:69:6d:06:2f:f1:de:4a:c2:ae:ce:f8:10:
7e:b3:36:39:b7:c1:dc:00:76:18:e3:24:1c:4e:c3:
1a:0c:ce:67:2e:0a:7a:2d:aa:81:b3:d7:6e:a6:92:
b8:e4:44:dd:ab:1b:c9:06:89:fb:ec:f5:93:0b:a6:
c5:a5:ab:9f:00:04:08:a2:b6:32:bb:a2:90:66:80:
48:0f:7f:3e:7b:97:5c:16:84:98:46:a0:9b:fa:1d:
e1:c7:83:d9:99:a3:8f:98:2a:fb:da:8c:14:3f:fc:
1b:1e:55:18:58:25:a9:6a:8f:30:96:40:d9:a3:83:
e9:6d:92:2a:37:dd:53:89:24:f6:ae:b8:8a:39:36:
3a:b2:c3:4d:d2:e6:99:72:1d:ea:a5:94:32:4e:a1:
e3:dd:c1:ac:d2:bd:5e:ea:7d:62:f6:4f:ba:a4:17:
74:56:4c:18:1c:9e:97:66:1a:66:95:f4:76:1d:46:
93:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8E:DB:4B:A9:7D:0A:0A:11:19:51:00:94:0E:54:8E:66:7B:DA:A1
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35362e302f32322d3232203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.56.0/22
Signature Algorithm: sha256WithRSAEncryption
48:ad:9f:f3:fe:f3:37:8d:34:a5:ce:fd:b4:3e:21:d3:9a:db:
51:42:80:cb:5c:79:13:f2:ad:25:8d:bc:bc:24:af:88:fa:dd:
ab:c7:2a:4e:ca:8c:85:b7:73:5a:57:5e:e9:63:89:31:34:96:
ad:3b:a6:ad:22:36:e5:06:63:b7:5d:58:b8:82:bb:5a:f6:f8:
05:db:b9:a3:1b:19:65:d7:f0:6a:02:f8:d7:1d:06:ac:14:d5:
fe:81:51:9f:5d:dd:cb:d0:2c:07:d2:ca:06:e0:c7:ed:6c:72:
ac:48:4f:37:a7:a5:0f:4a:61:f8:be:7b:a0:21:5d:3b:18:fd:
80:79:4e:55:5a:c5:45:fe:d9:89:56:c9:1f:a9:f0:98:7a:67:
9b:33:4a:d1:34:0e:00:13:7b:2f:76:78:69:fc:24:0b:30:24:
58:e9:e4:77:0c:34:da:0f:3f:88:d4:08:69:62:cc:29:fc:b0:
7a:58:c5:5b:11:e3:ee:13:ad:89:a4:58:60:e9:ca:1b:5e:95:
bb:3c:64:71:bc:fd:f6:64:02:ee:e9:61:d1:e5:2b:cb:eb:dd:
2e:1c:32:9c:c7:bf:00:03:2a:fe:f7:ca:a9:96:7c:12:f9:0e:
b0:15:f0:ea:7b:e0:d3:4b:0f:f4:11:3c:14:e1:3f:6b:43:9e:
24:da:04:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:20:06 2026 by rpki-client