
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1100991880549629955/0/3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa
File: 3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa (raw, json)
Hash identifier: nfHPWryodoQGAWIQEwiQs1RdM4fk6gLb4mCgk+4BsD4=
Subject key identifier: 8D:E0:DC:7A:53:19:96:E2:33:2B:00:6C:56:65:E2:B2:D6:CC:44:51
Certificate issuer: /CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Certificate serial: 75F65643B05D004336258B96544E8B7F65A99C52
Authority key identifier: 06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa
Signing time: Mon 27 Apr 2026 03:50:23 +0000
ROA not before: Mon 27 Apr 2026 03:45:23 +0000
ROA not after: Mon 26 Apr 2027 03:50:23 +0000
asID: 4847
IP address blocks: 157.119.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Apr 2026 04:39:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:f6:56:43:b0:5d:00:43:36:25:8b:96:54:4e:8b:7f:65:a9:9c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD
Validity
Not Before: Apr 27 03:45:23 2026 GMT
Not After : Apr 26 03:50:23 2027 GMT
Subject: CN=8DE0DC7A531996E2332B006C5665E2B2D6CC4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:13:d1:1f:f1:90:97:d1:91:7b:4f:f9:0f:
83:5b:a9:b5:16:63:b9:96:26:1a:f5:fa:7a:36:e8:
8f:35:a7:ca:c3:78:25:35:b8:89:19:e5:30:a5:ce:
ca:ab:6a:a1:a8:45:97:44:a8:55:60:98:ad:7a:7d:
12:06:ee:c0:49:c2:e2:77:46:13:19:5b:bb:27:27:
b3:8a:39:3f:8f:03:b8:f9:43:a6:d3:d3:71:bd:33:
4f:3d:52:8c:db:b2:6c:5f:27:7a:c9:5e:03:b8:24:
04:43:ef:fa:fb:06:b6:3c:eb:e3:d2:dc:52:75:bd:
b0:62:1b:5c:bb:aa:83:44:f7:cc:54:04:ad:5a:88:
79:9c:0f:fb:60:53:bb:57:63:07:5c:9c:50:db:d3:
dc:de:4e:72:e2:0b:de:05:5d:ab:5c:cc:43:fb:cc:
28:cb:4a:ab:07:3a:e6:9c:2b:a8:ad:8d:01:18:c9:
6b:c6:d4:77:95:08:a5:22:00:02:31:b5:43:55:e8:
05:a2:22:05:aa:af:bb:a1:96:71:02:86:04:ec:17:
98:9a:9d:51:5a:97:29:95:37:99:12:55:fd:31:8c:
9c:2c:ec:e9:ed:01:55:e1:11:67:f1:3d:9f:62:25:
26:29:ff:30:4b:ae:1c:31:be:96:f0:18:83:a4:04:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:E0:DC:7A:53:19:96:E2:33:2B:00:6C:56:65:E2:B2:D6:CC:44:51
X509v3 Authority Key Identifier:
keyid:06:06:77:FF:DB:8F:A3:C6:C6:DC:2F:18:ED:F7:BE:DA:06:5F:B8:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/060677FFDB8FA3C6C6DC2F18EDF7BEDA065FB8AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1100991880549629955/0/3135372e3131392e3137322e302f32322d3232203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.119.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:15:7a:31:fb:ea:a1:a2:72:94:4f:ea:58:3a:a2:25:58:29:
78:57:66:a6:01:f1:73:37:4f:f1:db:95:0f:a3:ad:66:62:c8:
47:e4:00:9e:30:c9:2f:c5:2d:3a:4b:ca:80:2c:3b:9b:02:e9:
12:a5:1c:df:b1:80:c2:4e:42:b4:8e:95:32:cf:bf:83:64:5d:
86:d2:45:03:9e:05:a3:07:e5:45:78:05:8c:16:50:30:57:e7:
22:d9:c5:5b:3a:de:3a:77:63:38:83:8e:e7:5d:09:37:57:83:
b2:c0:3c:aa:b3:e4:6e:19:32:2b:cd:93:11:c4:e4:bb:66:b3:
80:ff:02:7b:01:46:bf:55:e4:44:30:75:0c:47:01:d9:6d:74:
24:d0:96:5d:c7:87:b2:4d:ed:00:26:63:0b:dd:98:da:d9:3b:
97:eb:49:54:7f:c1:7f:e0:e3:4b:00:34:eb:4d:2f:26:90:e2:
60:fc:80:35:4e:5c:03:24:03:e1:4b:6b:90:76:60:4a:84:ec:
ea:68:09:65:e5:72:d4:c6:de:08:3d:a9:6c:51:67:aa:fc:0b:
2e:51:60:3f:13:13:1a:4c:d6:45:6a:71:40:c6:81:4c:21:39:
5b:a0:eb:2c:e9:e5:b3:7b:8d:e2:b7:d5:ad:2d:66:1d:36:ad:
7b:2f:4f:28
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:46:36 2026 by rpki-client