
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230352e34302e302f32312d3231203d3e2034383337.roa
File: 31342e3230352e34302e302f32312d3231203d3e2034383337.roa (raw, json)
Hash identifier: MHAIpRaH+GObCNLCEEsYrFQpZGqjp61Un+HGBU+4xj8=
Subject key identifier: 34:ED:7B:24:32:33:6C:0F:6A:38:D8:2B:00:08:42:D2:24:77:F1:70
Certificate issuer: /CN=A9143CB30000/serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Certificate serial: 02A07DCC43FCB69077CE9CB5F213A88344893F57
Authority key identifier: 8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230352e34302e302f32312d3231203d3e2034383337.roa
Signing time: Wed 13 May 2026 02:19:07 +0000
ROA not before: Wed 13 May 2026 02:14:07 +0000
ROA not after: Wed 12 May 2027 02:19:07 +0000
asID: 4837
IP address blocks: 14.205.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a0:7d:cc:43:fc:b6:90:77:ce:9c:b5:f2:13:a8:83:44:89:3f:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9143CB30000, serialNumber=8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925
Validity
Not Before: May 13 02:14:07 2026 GMT
Not After : May 12 02:19:07 2027 GMT
Subject: CN=34ED7B2432336C0F6A38D82B000842D22477F170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:6e:04:fc:e7:d4:16:b2:82:a1:77:57:88:
c7:d3:45:18:16:4f:3b:4d:c0:2e:eb:89:c3:ae:f5:
27:03:3d:e3:81:90:d5:12:69:a4:1b:29:ff:79:3c:
41:9b:08:ef:e6:c4:62:1e:77:85:45:6a:b2:92:93:
ee:27:a8:63:8d:4f:01:76:8f:46:cc:dc:ab:ac:75:
62:82:d0:c8:04:45:81:50:13:56:18:ad:54:45:16:
35:55:33:1a:af:a5:04:c1:9f:ca:b8:bd:f1:60:64:
b4:80:7b:e0:e0:17:d5:6b:67:e5:8b:16:f8:c6:3a:
23:25:c4:50:14:5b:bb:e0:ed:c1:86:e0:52:4d:2c:
8a:c5:39:37:16:15:f9:fb:ef:4b:4a:17:74:14:01:
9b:b6:13:cf:ba:c0:c4:ea:df:ce:ba:5e:16:11:56:
60:4a:78:f1:46:5e:20:17:4b:58:6e:d2:1b:63:5b:
a6:ef:48:40:08:22:69:55:27:93:32:85:07:61:40:
da:f0:93:b3:4c:66:45:8b:53:fe:64:a8:cd:f7:c5:
2e:78:8d:40:80:fa:ee:ea:21:9c:62:78:b3:65:f2:
0c:e9:ae:09:3c:4b:31:3f:eb:8f:c7:e0:c8:1e:c5:
fe:aa:04:c1:6d:5e:db:f6:a3:fb:5b:a4:ea:e4:c8:
df:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:ED:7B:24:32:33:6C:0F:6A:38:D8:2B:00:08:42:D2:24:77:F1:70
X509v3 Authority Key Identifier:
keyid:8A:1B:4E:4A:63:29:5F:18:B4:F0:6F:FF:6A:D0:2C:31:65:BF:99:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/8A1B4E4A63295F18B4F06FFF6AD02C3165BF9925.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ihtOSmMpXxi08G__atAsMWW_mSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096704593695342593/1/31342e3230352e34302e302f32312d3231203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.205.40.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:4b:1b:99:f6:3d:1f:a6:46:c3:d4:e2:08:0c:00:4a:4f:c8:
14:38:3a:11:f5:2b:6c:72:2a:a6:7f:cf:d1:fc:8a:5c:6c:0c:
b2:7b:c8:a2:8d:cb:7c:bb:3f:8d:9e:e4:41:09:b6:1c:d5:fd:
ba:e9:5c:cf:72:9e:31:6a:c4:98:9b:5e:7a:7c:07:d2:71:8b:
6f:50:72:57:92:03:e9:6d:8a:0e:26:e4:fa:5f:55:c6:7b:55:
60:29:d6:1d:ec:9c:bb:10:58:72:9d:d3:78:b5:dd:58:66:f3:
05:d7:6b:43:9d:77:5d:26:96:cf:fc:ed:52:4c:ef:eb:dc:15:
31:1a:19:ce:9a:ff:43:c9:5b:d6:5a:f6:0b:d3:3d:0a:00:0d:
dd:a5:6f:02:29:24:bc:33:5e:6b:64:bf:7a:45:9b:73:5b:31:
0b:34:14:90:e5:aa:b1:9c:59:d7:70:48:6b:6e:35:bd:03:4b:
1e:83:64:16:b6:68:c0:ad:13:b5:d9:10:4e:60:4d:c1:07:64:
43:0c:48:80:7b:61:6d:56:49:e3:e6:fe:f2:0d:5e:0f:99:d1:
7b:ac:38:a7:a2:c6:82:6a:2e:b7:31:15:95:d2:a2:15:6d:79:
91:67:82:67:f5:e1:f8:98:3d:fa:b3:76:95:2a:0f:49:20:76:
a4:21:c0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:38 2026 by rpki-client