
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e36302e302f32332d3233203d3e203536303139.roa
File: 3137352e32352e36302e302f32332d3233203d3e203536303139.roa (raw, json)
Hash identifier: QsKNek03kkxh3dGUpVVFdMZ3xCwwPcP5SJMqgTeq1H8=
Subject key identifier: 33:81:41:D9:7D:9B:67:61:3C:5C:BA:09:9D:3C:C2:04:6B:49:5F:7C
Certificate issuer: /CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Certificate serial: 48BA27CD838876B1ED7CD046E24CB55D5F618182
Authority key identifier: 51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e36302e302f32332d3233203d3e203536303139.roa
Signing time: Tue 14 Apr 2026 06:41:54 +0000
ROA not before: Tue 14 Apr 2026 06:36:54 +0000
ROA not after: Tue 13 Apr 2027 06:41:54 +0000
asID: 56019
IP address blocks: 175.25.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 09:09:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ba:27:cd:83:88:76:b1:ed:7c:d0:46:e2:4c:b5:5d:5f:61:81:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51179D675C3CB56A2D44AA60FA2B9330A0C06680
Validity
Not Before: Apr 14 06:36:54 2026 GMT
Not After : Apr 13 06:41:54 2027 GMT
Subject: CN=338141D97D9B67613C5CBA099D3CC2046B495F7C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4f:4f:37:20:00:a1:ea:43:3e:17:c0:cc:f0:
ee:51:7d:4b:03:ab:46:2b:a6:32:c9:d5:03:3a:04:
51:d8:44:1a:d2:2a:1f:9e:bc:9c:a7:06:ad:73:99:
28:ba:8a:8b:90:c2:43:93:cc:66:c7:31:61:e4:87:
2d:85:7b:0c:b0:2b:6d:bd:91:e7:c4:f8:da:27:cb:
35:89:59:be:3e:46:70:4c:dd:87:40:9c:2f:f9:c9:
18:37:dd:8b:a1:70:39:85:e5:ba:fd:d1:cf:75:4f:
f5:9c:2a:26:67:ee:93:66:4a:50:85:f2:06:a8:18:
be:d5:e3:79:18:c9:74:26:14:35:0c:11:a6:d0:67:
6e:ff:75:99:cc:a3:fa:92:53:f7:f7:c5:e3:c6:13:
31:75:ee:86:56:f0:95:41:6e:a7:47:03:be:cf:8b:
69:7e:8f:e0:bc:2a:05:7a:59:90:b8:0e:df:84:93:
75:a8:cf:e4:06:69:eb:ac:14:45:85:6c:90:4d:74:
1d:b8:0c:7b:66:6d:e3:3f:1f:15:d8:ff:76:0d:fd:
2e:43:83:9e:5e:29:48:16:54:e7:f7:53:b1:7c:7c:
8b:c3:1d:06:e1:bc:52:f4:2e:62:e2:d5:74:e8:b0:
6d:f8:ff:d5:ee:59:d5:71:8f:a7:32:08:56:e1:53:
2d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:81:41:D9:7D:9B:67:61:3C:5C:BA:09:9D:3C:C2:04:6B:49:5F:7C
X509v3 Authority Key Identifier:
keyid:51:17:9D:67:5C:3C:B5:6A:2D:44:AA:60:FA:2B:93:30:A0:C0:66:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/51179D675C3CB56A2D44AA60FA2B9330A0C06680.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51179D675C3CB56A2D44AA60FA2B9330A0C06680.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096276598698606595/0/3137352e32352e36302e302f32332d3233203d3e203536303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
175.25.60.0/23
Signature Algorithm: sha256WithRSAEncryption
37:30:e9:c5:b2:bd:89:f3:32:a3:f0:62:e2:4d:2d:e0:58:ea:
43:fc:4b:f0:a7:d3:fd:5a:2b:91:d7:f3:4c:25:c9:6d:38:bb:
51:7d:da:90:23:d2:19:c5:2b:97:51:7b:c0:9e:6b:12:9e:f8:
3b:66:4e:1b:76:69:2b:1a:b3:a6:0c:7c:a8:65:9e:47:19:73:
4f:16:c8:92:ba:52:88:a3:39:ee:98:66:0e:2e:0e:6b:a0:43:
2a:43:ef:e3:72:ca:b3:c9:43:ef:b7:45:50:51:da:b6:61:d5:
c5:ba:f2:61:3a:a3:be:00:ae:93:8e:ea:c0:59:10:4d:cf:e1:
86:55:6e:82:0f:cb:1a:b4:15:f4:10:76:a7:64:b9:fe:f8:bf:
1b:a4:5d:e5:15:ee:71:e3:94:b1:d1:32:72:70:97:19:66:85:
c9:b9:ae:c3:b2:da:5c:f0:1e:a4:46:11:85:97:e0:7e:63:bd:
f6:b6:45:e3:e5:53:12:fb:37:c4:d9:bc:5a:0d:b5:be:a4:59:
98:87:ca:5d:47:81:bd:18:fe:1f:a7:a8:67:c5:68:e6:6c:7e:
70:32:45:ba:62:d6:6d:83:0a:59:2b:bf:df:e9:09:3f:2a:31:
3f:4b:b2:be:e9:10:40:a9:bb:34:ee:e0:75:18:74:63:c7:34:
54:3d:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:12 2026 by rpki-client