
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e36342e302f31382d3138203d3e203536303035.roa
File: 34322e35312e36342e302f31382d3138203d3e203536303035.roa (raw, json)
Hash identifier: dHU2sHku/nckzGYBrBL4jizp3vrmA7ZLgOsROt5SAI4=
Subject key identifier: 42:D4:CF:33:BF:7E:C4:4E:C5:D2:B5:E5:2A:64:A1:9A:6F:3D:2E:A5
Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Certificate serial: 50D1E11F9688F05B8290C2D0F50BB5E3AA4E9AD6
Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e36342e302f31382d3138203d3e203536303035.roa
Signing time: Sat 09 May 2026 09:24:36 +0000
ROA not before: Sat 09 May 2026 09:19:36 +0000
ROA not after: Sat 08 May 2027 09:24:36 +0000
asID: 56005
IP address blocks: 42.51.64.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:47:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:d1:e1:1f:96:88:f0:5b:82:90:c2:d0:f5:0b:b5:e3:aa:4e:9a:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4
Validity
Not Before: May 9 09:19:36 2026 GMT
Not After : May 8 09:24:36 2027 GMT
Subject: CN=42D4CF33BF7EC44EC5D2B5E52A64A19A6F3D2EA5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:fc:4d:ba:37:41:37:b6:65:f9:72:bc:fe:65:
11:8e:33:bb:71:41:3c:3d:64:63:84:e1:ac:60:8f:
1f:82:3e:a6:1f:f5:a0:74:5c:e3:2b:cb:37:21:b0:
55:c8:96:1b:50:64:7d:b6:4e:25:fa:bc:1b:be:f4:
78:fa:59:24:7b:24:78:b5:bd:c1:0e:04:28:85:10:
67:8e:f4:d4:d3:50:99:09:9b:23:12:69:50:ff:b5:
58:c3:43:9f:e1:ee:dd:1f:4c:a3:83:db:47:73:49:
ae:35:61:57:7a:5c:a7:98:8e:45:99:5a:03:e4:26:
fd:9c:26:0e:a4:5c:65:05:79:b8:f9:5d:19:68:f3:
50:fd:ba:98:8d:a0:89:09:36:99:67:69:79:e7:f3:
11:64:d8:c1:23:d6:fe:a0:3a:fe:07:3d:f0:b5:e2:
7b:8c:b6:7e:da:70:55:94:ea:75:6d:f0:1b:07:61:
91:42:7a:d3:3d:f1:16:32:29:45:6e:c2:79:b9:1c:
a2:f5:45:c0:7b:82:98:9a:df:a2:a5:dd:09:32:5b:
a2:6c:63:54:63:b8:6d:d1:27:e5:44:a9:7c:74:c6:
2e:f0:fe:c3:bd:54:cc:fc:7b:81:c3:47:af:78:ae:
70:8b:f3:e9:3c:d7:8b:9d:16:97:d9:77:ea:cb:1e:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D4:CF:33:BF:7E:C4:4E:C5:D2:B5:E5:2A:64:A1:9A:6F:3D:2E:A5
X509v3 Authority Key Identifier:
keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e36342e302f31382d3138203d3e203536303035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.51.64.0/18
Signature Algorithm: sha256WithRSAEncryption
17:59:93:c4:0e:89:ed:6b:19:be:66:50:eb:8e:6e:da:97:0d:
de:2c:40:d4:35:cc:ea:6e:93:0f:a1:78:01:d3:59:3c:ee:99:
68:60:b0:44:c1:4c:30:fc:66:23:c8:cb:1e:75:c4:1d:a3:8a:
98:48:99:a9:82:a4:19:4c:26:c7:82:01:50:d1:3c:db:f9:80:
ad:e3:b9:e9:77:25:93:c6:ea:87:55:9b:ad:01:23:fd:6b:dc:
7c:17:7b:2e:45:1c:d7:66:99:26:9b:95:d5:33:5c:a6:e5:05:
01:ae:1f:00:cd:4f:c4:91:50:9a:63:54:32:87:2a:24:bc:ca:
1c:dc:fe:6e:f8:aa:88:06:3e:bf:8d:12:c0:e9:24:60:ff:7e:
81:67:3c:de:f7:d9:ba:57:9a:8d:44:9a:50:44:c3:e7:9f:03:
84:4f:c2:3b:46:57:0b:8a:3b:d8:40:cc:9e:bb:73:e8:9f:4e:
60:60:2a:c4:17:e3:72:b9:53:45:78:d0:40:a3:ae:de:31:17:
56:1d:43:ce:98:15:9b:57:60:e5:75:7e:85:c5:f3:b5:b2:d2:
c9:1c:92:76:7a:27:71:4b:1d:86:27:43:6b:73:fe:43:4e:b9:
ae:7c:23:83:9b:7d:06:23:58:cc:91:c4:b2:70:53:f2:06:87:
2b:89:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:30:17 2026 by rpki-client