
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/34392e3233392e3139322e302f31382d3138203d3e203137383136.roa
File: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (raw, json)
Hash identifier: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=
Subject key identifier: 54:51:2D:2D:D6:2F:17:B2:91:B7:10:FF:E8:82:7A:55:7D:C3:D7:7F
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 18BFC8120CA2DC9A2E052C7C27DA14FAD77ED504
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/34392e3233392e3139322e302f31382d3138203d3e203137383136.roa
Signing time: Thu 30 Apr 2026 02:11:29 +0000
ROA not before: Thu 30 Apr 2026 02:06:29 +0000
ROA not after: Thu 29 Apr 2027 02:11:29 +0000
asID: 17816
IP address blocks: 49.239.192.0/18 maxlen: 18
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:07:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:bf:c8:12:0c:a2:dc:9a:2e:05:2c:7c:27:da:14:fa:d7:7e:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: Apr 30 02:06:29 2026 GMT
Not After : Apr 29 02:11:29 2027 GMT
Subject: CN=54512D2DD62F17B291B710FFE8827A557DC3D77F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:45:20:44:39:c3:a2:05:9c:6b:f3:f6:1e:02:
94:79:75:2d:dc:fc:79:43:56:62:c7:3b:23:f6:46:
13:dd:b1:c5:09:42:8e:57:92:07:e0:19:f7:6f:47:
dc:8b:94:17:fe:f0:f1:28:a8:a5:9f:a0:05:c2:e6:
5e:a3:4a:1b:63:70:04:fc:8a:ef:c3:de:b3:88:be:
3c:a0:7f:84:41:b5:84:26:cb:0a:29:fb:6c:3b:88:
ef:cf:73:85:bd:ea:98:4e:44:81:26:b1:25:42:73:
df:a7:11:73:83:0c:c7:03:0f:e9:3e:b9:6e:7e:c1:
d3:cf:a1:d2:21:98:ec:f5:74:dd:60:b9:7b:3f:9d:
97:91:d7:54:91:c1:e6:e0:43:60:01:2f:57:94:c0:
53:ed:c0:d0:67:a1:cf:be:4e:dd:57:f8:ac:f8:6c:
a0:3b:c9:8f:ef:4d:fb:75:30:1f:4c:63:e2:b8:0b:
21:2f:d2:7a:05:7c:88:da:5f:90:91:96:b4:dd:51:
18:59:26:28:10:fd:5c:bc:8f:64:72:8b:1b:aa:23:
ca:8f:33:6d:77:c0:7a:5b:80:0e:3d:df:72:9e:71:
a3:30:8d:77:3c:64:8f:da:d6:74:a1:34:b9:5c:3b:
71:e3:60:65:de:d0:81:54:36:0e:72:88:cc:e7:1e:
13:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:51:2D:2D:D6:2F:17:B2:91:B7:10:FF:E8:82:7A:55:7D:C3:D7:7F
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/34392e3233392e3139322e302f31382d3138203d3e203137383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
49.239.192.0/18
Signature Algorithm: sha256WithRSAEncryption
06:9a:e6:3b:e9:06:66:22:9c:33:b3:cd:93:13:1a:f9:a7:05:
a4:34:7b:0a:26:7f:57:32:2e:b5:9d:fd:be:e7:7a:d4:c6:1f:
d6:e9:ee:62:fc:69:d6:fd:d3:f1:53:87:10:28:6a:54:97:ec:
7e:5e:16:dc:66:ab:a7:b8:20:11:4a:53:74:cc:af:6d:b3:6d:
e8:ce:9f:61:4a:bf:2d:44:13:df:07:e8:ee:5f:66:cc:47:50:
21:67:00:c9:2f:18:21:79:07:fe:5b:44:22:e0:97:af:cd:7d:
0b:3c:52:8f:41:c8:40:85:fd:04:13:06:4a:bb:b4:db:2e:53:
da:de:a8:f2:b7:0b:8b:4f:c0:99:ef:26:36:67:ed:81:dd:b3:
77:15:5e:d4:b5:a1:2b:40:62:43:b4:ab:4a:45:4c:6b:94:80:
6d:90:a1:30:fc:34:d7:e5:ef:e2:94:f3:69:5a:2e:46:ab:0e:
22:f8:cf:ae:3f:7c:ff:53:e2:dc:90:b5:69:cd:c6:ae:3a:64:
61:63:2c:83:79:1d:20:e5:a1:ed:8a:5d:4e:52:bd:e8:63:8f:
42:4e:1f:7c:19:97:88:33:6b:19:49:ef:da:c6:21:ba:c1:03:
36:2e:45:60:05:29:54:24:f5:e0:82:a9:d8:b0:b4:0e:9d:ba:
c2:24:41:6f
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUGL/IEgyi3JouBSx8J9oU+td+1QQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4
NTY4MDAyNDAeFw0yNjA0MzAwMjA2MjlaFw0yNzA0MjkwMjExMjlaMDMxMTAvBgNV
BAMTKDU0NTEyRDJERDYyRjE3QjI5MUI3MTBGRkU4ODI3QTU1N0RDM0Q3N0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRSBEOcOiBZxr8/YeApR5dS3c
/HlDVmLHOyP2RhPdscUJQo5XkgfgGfdvR9yLlBf+8PEoqKWfoAXC5l6jShtjcAT8
iu/D3rOIvjygf4RBtYQmywop+2w7iO/Pc4W96phORIEmsSVCc9+nEXODDMcDD+k+
uW5+wdPPodIhmOz1dN1guXs/nZeR11SRwebgQ2ABL1eUwFPtwNBnoc++Tt1X+Kz4
bKA7yY/vTft1MB9MY+K4CyEv0noFfIjaX5CRlrTdURhZJigQ/Vy8j2RyixuqI8qP
M213wHpbgA4933KecaMwjXc8ZI/a1nShNLlcO3HjYGXe0IFUNg5yiMznHhP5AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUVFEtLdYvF7KRtxD/6IJ6VX3D138wHwYDVR0j
BBgwFoAUU7DOydAJgWhiZBZBJttvM4VoACQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzA2MDEwNTEzNzk0NjYyNS8wLzUzQjBDRUM5RDAwOTgxNjg2MjY0MTY0MTI2REI2
RjMzODU2ODAwMjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTNCMENFQzlEMDA5ODE2ODYyNjQxNjQxMjZEQjZGMzM4NTY4MDAyNC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NzA2MDEwNTEzNzk0NjYyNS8wLzM0MzkyZTMyMzMz
OTJlMzEzOTMyMmUzMDJmMzEzODJkMzEzODIwM2QzZTIwMzEzNzM4MzEzNi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEBjHvwDANBgkqhkiG9w0BAQsFAAOCAQEABprmO+kGZiKcM7PNkxMa+acF
pDR7CiZ/VzIutZ39vud61MYf1unuYvxp1v3T8VOHEChqVJfsfl4W3Garp7ggEUpT
dMyvbbNt6M6fYUq/LUQT3wfo7l9mzEdQIWcAyS8YIXkH/ltEIuCXr819CzxSj0HI
QIX9BBMGSru02y5T2t6o8rcLi0/Ame8mNmftgd2zdxVe1LWhK0BiQ7SrSkVMa5SA
bZChMPw01+Xv4pTzaVouRqsOIvjPrj98/1Pi3JC1ac3GrjpkYWMsg3kdIOWh7Ypd
TlK96GOPQk4ffBmXiDNrGUnv2sYhusEDNi5FYAUpVCT14IKp2LC0Dp26wiRBbw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:49 2026 by rpki-client