
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS58466.roa
File: AS58466.roa (raw, json)
Hash identifier: r7bGmLBfvhXYayeMtM0xTPcAHPRkmPDxrEy0xZn8OrU=
Subject key identifier: 97:B4:50:93:52:4F:11:2D:95:DE:BA:EE:9D:5E:D5:BD:85:50:A2:4F
Certificate issuer: /CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Certificate serial: 0A78E43508B175F31BCF6848959CED3D9C8F5458
Authority key identifier: 16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS58466.roa
Signing time: Wed 20 May 2026 07:07:51 +0000
ROA not before: Wed 20 May 2026 07:02:51 +0000
ROA not after: Wed 19 May 2027 07:07:51 +0000
asID: 58466
IP address blocks: 117.51.168.0/22 maxlen: 22
117.51.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 14:34:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:78:e4:35:08:b1:75:f3:1b:cf:68:48:95:9c:ed:3d:9c:8f:54:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16576756F0B03BF75ECD6BC449A3BEF7A7D14B40
Validity
Not Before: May 20 07:02:51 2026 GMT
Not After : May 19 07:07:51 2027 GMT
Subject: CN=97B45093524F112D95DEBAEE9D5ED5BD8550A24F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:87:c4:b8:f7:9c:64:f7:26:26:83:fc:62:70:
8e:4f:96:75:f4:45:7e:86:b1:b0:81:01:84:09:3c:
57:fe:61:de:06:2b:da:4e:64:a1:ee:71:ad:01:7c:
86:6a:92:86:2e:25:9f:16:89:e8:b9:0b:fa:92:5c:
84:fc:9e:36:1f:08:0d:c8:0f:7c:9b:f9:ef:e7:a2:
9f:e0:46:d6:a6:7e:0d:6c:24:36:99:e4:77:d6:82:
26:2b:55:e2:a7:e5:1c:ab:5f:c8:f5:f6:ad:2c:38:
48:22:1c:f7:a3:72:7a:a9:9d:cb:26:c9:15:90:2e:
4f:94:dc:55:b2:c7:80:12:02:ed:23:e2:b9:d3:f6:
67:21:d7:a6:f2:76:75:32:84:9a:a3:20:6f:f0:9d:
4b:83:1a:29:91:d7:83:1a:ec:f2:d0:39:98:b2:9d:
be:fa:5e:1b:4c:b8:66:de:25:36:9e:44:c5:11:64:
73:0d:de:a3:82:bf:33:b3:b4:7b:44:83:89:66:01:
f8:09:83:ed:b3:48:4c:8b:e1:80:56:8e:a2:24:37:
33:d0:4e:5f:02:9a:ee:8a:3c:d2:72:b2:9c:23:70:
d3:a5:22:71:06:ef:a0:c7:6b:eb:ed:39:78:e1:46:
ff:ec:69:ff:0d:60:a5:28:54:07:ec:32:f2:13:e3:
74:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B4:50:93:52:4F:11:2D:95:DE:BA:EE:9D:5E:D5:BD:85:50:A2:4F
X509v3 Authority Key Identifier:
keyid:16:57:67:56:F0:B0:3B:F7:5E:CD:6B:C4:49:A3:BE:F7:A7:D1:4B:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/16576756F0B03BF75ECD6BC449A3BEF7A7D14B40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099602636367200259/0/AS58466.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.51.168.0/21
Signature Algorithm: sha256WithRSAEncryption
8c:c8:e8:97:4d:fa:00:f7:89:7d:8d:9d:75:2c:a9:06:84:45:
92:7f:6a:67:4a:96:98:2d:3f:1d:34:17:d0:1e:58:8d:e8:95:
48:ec:d1:b7:81:c3:33:f4:fa:6b:91:43:3f:ae:5a:ab:9a:ae:
03:38:07:4c:55:32:85:72:11:2a:00:fd:31:31:dc:3c:19:1b:
64:ac:12:f4:b2:9d:bd:74:58:c0:e2:27:0e:a0:e5:e8:a9:80:
9f:5f:d3:e4:c4:37:97:79:63:fc:42:4c:a0:0b:2c:2e:02:66:
fe:a0:31:0d:de:d8:1f:0c:34:10:e4:ef:77:73:1a:39:9d:53:
3e:cd:0f:92:ea:61:e1:76:78:8d:d1:4a:e0:76:dd:83:36:a8:
e4:d8:94:be:2a:0a:0d:98:d0:b9:29:09:ab:b8:55:0e:3e:58:
bf:6f:61:f4:e2:db:47:c0:05:b0:e0:ae:6b:4e:42:99:fd:0c:
45:c4:7d:e7:92:e6:ae:a0:96:78:f2:7b:11:9d:3d:1a:f2:78:
44:8a:03:b2:6b:2c:bf:4b:4b:a7:83:a2:b3:3c:f9:b8:6a:ea:
79:50:ae:75:97:1f:bb:52:c4:9f:67:e7:94:9d:6f:89:20:89:
31:b3:93:73:64:81:28:2f:71:e6:15:ac:92:15:fe:4e:18:4f:
29:38:b5:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 05:07:16 2026 by rpki-client