
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e31362e302f32312d3231203d3e203233373234.roa
File: 34322e36322e31362e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: CijHNo1KlWQEA+luBRufavg774ukBbbDW6GJJvXxQdA=
Subject key identifier: 9C:7A:5F:27:0F:BA:B2:52:EE:74:30:5A:43:E3:1B:EE:5B:30:97:5A
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 263F38211D387F5A576B07D079EAFB61F7DC538A
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e31362e302f32312d3231203d3e203233373234.roa
Signing time: Mon 20 Apr 2026 07:23:09 +0000
ROA not before: Mon 20 Apr 2026 07:18:09 +0000
ROA not after: Mon 19 Apr 2027 07:23:09 +0000
asID: 23724
IP address blocks: 42.62.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:3f:38:21:1d:38:7f:5a:57:6b:07:d0:79:ea:fb:61:f7:dc:53:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:18:09 2026 GMT
Not After : Apr 19 07:23:09 2027 GMT
Subject: CN=9C7A5F270FBAB252EE74305A43E31BEE5B30975A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:55:1c:3c:71:6b:ab:a4:21:1f:7e:67:6e:cf:
99:5f:d3:b8:bc:54:32:38:38:da:07:84:cd:3a:f3:
63:e4:33:81:b5:0e:6a:14:65:e9:f3:a3:17:e3:49:
6b:02:53:40:90:12:ae:10:4a:7f:2b:d4:50:2d:c0:
31:b0:a7:c2:2f:6e:84:69:ac:cf:fd:4c:7a:a3:60:
90:94:be:80:e2:e4:60:16:4b:1d:8b:cb:80:4c:0c:
ed:0a:93:15:19:7d:ba:2a:33:6a:5c:d7:d3:5d:90:
2c:3c:27:ef:49:72:9d:8c:31:95:2f:7a:e4:64:23:
4f:5e:26:2e:b2:c2:ea:48:f3:2b:ca:d4:15:70:a1:
1e:c6:92:b0:ff:8c:e6:be:3d:0c:11:67:3a:cd:51:
e9:c2:63:90:78:78:df:40:54:7c:a9:8d:13:0f:c8:
40:80:50:2b:a9:aa:e2:a4:be:5d:eb:47:a8:4c:ba:
46:aa:85:2b:50:af:c6:45:fb:b7:18:73:46:d3:32:
1f:df:33:8b:1e:cd:4e:c5:fd:ec:e4:ad:03:0d:9e:
29:4e:4b:4d:f0:00:59:04:8b:8b:e0:00:e0:53:8d:
62:ec:cb:50:7f:6b:54:44:c4:c1:0f:dc:9f:ee:bb:
9e:9c:9c:53:22:53:8d:15:34:ab:7f:6b:0a:85:91:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7A:5F:27:0F:BA:B2:52:EE:74:30:5A:43:E3:1B:EE:5B:30:97:5A
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e31362e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.16.0/21
Signature Algorithm: sha256WithRSAEncryption
3b:90:16:a5:a5:4b:03:99:5a:97:65:58:26:3d:dd:7e:bd:bf:
c3:17:83:a1:31:74:d9:26:60:a8:2e:a0:a1:dd:a5:15:e4:6e:
ae:83:ca:4f:35:d9:c0:14:27:13:3a:7b:9b:c1:5b:0e:d2:51:
e7:60:6e:cc:05:b6:9f:17:da:3a:51:4d:78:dc:d8:69:a4:82:
4d:c8:0e:64:6b:a3:59:ef:66:bd:7c:0d:65:33:2d:62:fb:04:
3f:a8:05:0b:59:0d:ef:5b:6a:ae:49:45:b7:00:c0:e5:23:6e:
72:c9:8b:db:28:7d:a3:8d:04:a7:46:cb:b0:f7:d4:5d:cd:83:
f8:0b:1c:60:1f:ac:7e:12:2d:22:fb:99:a3:4c:59:2d:49:44:
0c:45:4d:43:06:2c:0a:6d:62:c4:6b:ae:84:00:f3:6b:5c:56:
2b:a0:7b:99:3e:ec:1e:72:4a:d1:88:05:3d:04:a8:f1:89:c1:
87:8c:8b:1d:6b:e4:04:f3:d0:c5:ea:fb:d6:31:8f:1a:fe:66:
30:d1:0a:b7:ba:c8:fc:20:c9:a6:9c:f4:94:10:5f:e6:07:d1:
05:06:44:36:ce:fe:1b:22:36:5e:04:ba:a7:c1:ec:f5:b4:15:
58:f9:da:bd:9f:34:a0:00:21:8d:d5:80:46:45:81:b5:1a:26:
2d:f7:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:04:44 2026 by rpki-client