
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35382e302f32332d3233203d3e203536303139.roa
File: 3137352e32352e35382e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier: ZT00yr8rJAX8hLmiDE1c9QTZRFYz0IDW0+DjJh5JBtA=
Subject key identifier: 68:A7:BD:23:D7:3C:C2:18:9C:E6:BA:FF:82:79:09:E3:31:5C:47:04
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 0DBB35E7E5149BD6FA2207272B6AE963157D77A9
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35382e302f32332d3233203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:41:55 +0000
ROA not before: Tue 14 Apr 2026 06:36:55 +0000
ROA not after: Tue 13 Apr 2027 06:41:55 +0000
asID: 56019
IP address blocks: 175.25.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bb:35:e7:e5:14:9b:d6:fa:22:07:27:2b:6a:e9:63:15:7d:77:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:36:55 2026 GMT
Not After : Apr 13 06:41:55 2027 GMT
Subject: CN=68A7BD23D73CC2189CE6BAFF827909E3315C4704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d8:9a:a4:73:a9:78:db:83:0f:83:d0:47:f7:
7d:08:10:aa:24:07:f7:9d:a2:24:22:d0:6c:72:fe:
c0:15:c4:71:d4:9d:d8:08:15:58:55:7f:16:8c:42:
36:9b:33:75:6e:3d:5d:4f:49:4a:bc:68:07:c3:8b:
0d:99:d6:ee:2a:ab:29:d3:08:2b:2c:e9:c0:24:cf:
15:3d:28:1a:20:98:37:8f:9d:fd:87:e9:ac:3e:23:
43:e3:fe:4a:c4:c2:23:79:92:f5:1d:d4:61:0d:3c:
93:4d:15:1e:34:be:8c:01:c4:52:4b:76:b8:fe:f2:
6c:c4:a1:6d:0f:5b:03:cf:51:8b:a1:bd:42:da:78:
93:71:e4:ef:b5:4d:8d:0f:ab:cc:81:00:44:e4:a7:
75:92:a7:9f:4c:2f:6b:21:48:42:6c:e6:31:c9:9e:
69:4c:47:36:a5:da:39:53:ca:31:13:ee:2c:2d:e4:
9e:15:eb:e9:cc:64:5c:85:85:43:85:0c:f4:c7:01:
ac:aa:0c:8b:74:40:9d:3b:78:53:bc:57:25:24:09:
54:c7:d6:bd:bb:aa:ca:f6:38:0f:a7:cc:5b:dc:a1:
b7:d7:65:b6:04:ef:d2:2d:4c:18:f5:c0:b4:6a:6f:
ed:7e:4f:d8:bb:f8:c5:3d:33:ab:8e:a1:df:5f:76:
7a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A7:BD:23:D7:3C:C2:18:9C:E6:BA:FF:82:79:09:E3:31:5C:47:04
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e35382e302f32332d3233203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.58.0/23
Signature Algorithm: sha256WithRSAEncryption
03:7d:b0:6a:16:0f:85:d3:e0:6a:0b:09:fa:4d:6c:11:39:f6:
1d:58:e0:4b:58:52:5a:b6:41:3f:c6:16:ba:ad:8e:76:27:c2:
a8:64:a4:fa:47:63:68:2d:c7:2e:26:a2:99:85:ec:0f:15:e2:
a9:f2:17:a1:30:7f:e8:a6:b0:f8:78:2f:e9:89:55:ac:0b:06:
d5:91:33:16:36:07:16:1f:07:44:0d:58:ab:af:df:c8:72:09:
85:16:65:a7:51:1e:35:99:fb:a0:71:c3:94:c8:75:5f:7f:88:
28:1c:b5:e2:65:49:77:eb:44:67:c0:3d:f3:2d:7a:e9:3d:9f:
a4:2d:8a:55:27:95:6b:70:06:e6:93:ae:20:39:a8:32:c7:5c:
19:b0:49:db:67:30:0f:fd:86:db:2e:6b:3e:08:c9:78:e1:ea:
ca:40:bc:91:c7:c8:64:48:f4:c8:69:1f:ab:b8:be:28:e2:70:
00:37:ca:ae:56:01:fc:c1:9b:df:1c:ae:e8:c2:ff:67:d1:f1:
25:a7:c0:f9:c5:67:94:9d:19:f7:90:26:b4:56:3e:16:a3:4a:
80:57:e0:9d:60:60:4c:25:0c:75:28:6e:74:02:6a:40:92:64:
c1:2c:b7:15:ef:2d:02:54:25:a1:10:41:30:ef:7d:d9:61:e6:
e7:5f:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:32:17 2026 by rpki-client