
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e31362e302f32312d3231203d3e2039383038.roa
File: 34322e36322e31362e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: HmpAH2/9ZAIKezVWuL5PObERtmAh7W8IgvH59gh4ZAk=
Subject key identifier: E7:E2:F4:BF:24:94:2C:93:F3:8C:D1:C7:8E:60:68:69:FD:B9:16:67
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 4674A9A0F669B6D0518D9356B566A68F5434101D
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e31362e302f32312d3231203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:23:09 +0000
ROA not before: Mon 20 Apr 2026 07:18:09 +0000
ROA not after: Mon 19 Apr 2027 07:23:09 +0000
asID: 9808
IP address blocks: 42.62.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:74:a9:a0:f6:69:b6:d0:51:8d:93:56:b5:66:a6:8f:54:34:10:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:18:09 2026 GMT
Not After : Apr 19 07:23:09 2027 GMT
Subject: CN=E7E2F4BF24942C93F38CD1C78E606869FDB91667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:22:7f:83:e8:0d:5c:4e:7c:53:94:a7:fc:
03:a1:6b:9d:87:e6:08:db:cc:06:6a:31:1c:89:0c:
e4:da:70:17:3a:ec:68:3c:67:80:20:97:4a:7c:0c:
58:99:06:b4:ef:1e:45:7e:80:87:ce:5f:95:b3:6c:
1d:34:04:b6:ca:a7:0b:6b:dd:ac:db:b5:52:58:4d:
7e:3a:30:ac:f2:ca:84:36:22:63:2a:f0:2a:c1:75:
97:dd:04:9d:d1:d6:b8:27:c2:36:fe:9f:a9:a2:5f:
af:4b:4c:9a:15:68:df:92:06:f4:d2:fd:24:76:78:
97:50:44:63:e3:a9:2f:3c:ee:6d:5b:f5:21:2b:c0:
5c:58:d5:66:bd:88:da:02:da:3c:41:5b:fe:57:48:
ff:10:a4:55:4f:d8:ee:1f:7f:8a:06:96:d2:a8:07:
9b:8e:a3:78:ff:d5:a1:28:ef:ea:10:92:f2:2e:37:
ef:13:af:4a:e9:22:53:ea:c3:da:b6:c1:be:f2:f6:
70:2e:8d:55:4f:ac:07:30:46:15:11:68:37:a7:e7:
9e:bf:6a:b0:7b:d8:a6:99:bb:a2:c0:37:a9:20:3b:
fc:13:11:77:d8:c9:ab:d8:6e:a0:fd:c2:70:c1:18:
f0:38:d0:f4:ab:79:1e:69:21:b3:21:80:8d:70:15:
1d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:E2:F4:BF:24:94:2C:93:F3:8C:D1:C7:8E:60:68:69:FD:B9:16:67
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e31362e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.16.0/21
Signature Algorithm: sha256WithRSAEncryption
26:5d:3b:32:e1:3c:52:da:a2:8d:69:c5:66:01:65:34:2b:4b:
9f:5e:d2:e0:03:f2:05:c9:59:c7:ca:15:92:a0:e8:58:1f:9f:
b8:16:4d:fa:f2:81:ac:85:d4:dd:48:c3:6b:43:c6:16:f3:98:
6a:f5:55:8b:b3:17:ff:a8:d9:d2:18:8c:46:26:c9:30:de:ab:
54:14:3e:94:d3:37:2f:2c:5c:0b:e2:8f:9c:72:f0:af:7e:00:
8d:e1:90:eb:84:0c:0e:e1:f2:3a:57:fe:88:96:44:1a:32:91:
2f:97:61:31:da:60:f1:00:1f:61:eb:f5:4d:36:27:1f:ce:c8:
48:ca:26:37:ac:6f:fb:a3:bf:ec:a8:0a:73:74:cc:24:38:8f:
3e:75:1e:68:50:68:69:1f:0c:d9:8a:96:a8:cc:f2:5e:9c:17:
21:f7:34:a1:01:6e:fc:c8:af:99:80:5d:a0:27:90:78:9f:4e:
9c:1d:3d:ef:0d:98:8c:c7:39:b3:5e:a5:be:12:52:6d:a2:d8:
8a:61:40:dc:71:52:99:63:88:dd:f4:8f:5d:f8:f8:99:92:ff:
fc:06:e2:13:a8:9c:45:9f:14:df:5b:f3:9e:0d:d8:70:e7:e4:
50:ed:f9:4f:30:a1:66:ac:f1:e6:f9:a0:81:71:27:c2:db:58:
06:f7:11:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIURnSpoPZpttBRjZNWtWamj1Q0EB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA0MjAwNzE4MDlaFw0yNzA0MTkwNzIzMDlaMDMxMTAvBgNV
BAMTKEU3RTJGNEJGMjQ5NDJDOTNGMzhDRDFDNzhFNjA2ODY5RkRCOTE2NjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwiJ/g+gNXE58U5Sn/AOha52H
5gjbzAZqMRyJDOTacBc67Gg8Z4Agl0p8DFiZBrTvHkV+gIfOX5WzbB00BLbKpwtr
3azbtVJYTX46MKzyyoQ2ImMq8CrBdZfdBJ3R1rgnwjb+n6miX69LTJoVaN+SBvTS
/SR2eJdQRGPjqS887m1b9SErwFxY1Wa9iNoC2jxBW/5XSP8QpFVP2O4ff4oGltKo
B5uOo3j/1aEo7+oQkvIuN+8Tr0rpIlPqw9q2wb7y9nAujVVPrAcwRhURaDen556/
arB72KaZu6LAN6kgO/wTEXfYyavYbqD9wnDBGPA40PSreR5pIbMhgI1wFR2nAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQU5+L0vySULJPzjNHHjmBoaf25FmcwHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDg5MjQ1NTUyNjA3MjM1LzAvMzQzMjJlMzYzMjJl
MzEzNjJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDM5MzgzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD
Kj4QMA0GCSqGSIb3DQEBCwUAA4IBAQAmXTsy4TxS2qKNacVmAWU0K0ufXtLgA/IF
yVnHyhWSoOhYH5+4Fk368oGshdTdSMNrQ8YW85hq9VWLsxf/qNnSGIxGJskw3qtU
FD6U0zcvLFwL4o+ccvCvfgCN4ZDrhAwO4fI6V/6IlkQaMpEvl2Ex2mDxAB9h6/VN
NicfzshIyiY3rG/7o7/sqApzdMwkOI8+dR5oUGhpHwzZipaozPJenBch9zShAW78
yK+ZgF2gJ5B4n06cHT3vDZiMxzmzXqW+ElJtotiKYUDccVKZY4jd9I9d+PiZkv/8
BuITqJxFnxTfW/OeDdhw5+RQ7flPMKFmrPHm+aCBcSfC21gG9xFj
-----END CERTIFICATE-----
Generated at Wed May 13 11:49:49 2026 by rpki-client