
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e203233373234.roa
File: 34322e36322e32342e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: 4HlodhBJ95qxN9RyljfdsJjNq3DRTIh0kvfG2ECt/Po=
Subject key identifier: 02:07:F4:00:FD:E7:B5:7C:46:B0:57:F1:19:ED:C8:7E:CE:22:38:A1
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 3EC911EEB2A5FD21BE985DF72366FE05990108E6
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e203233373234.roa
Signing time: Mon 20 Apr 2026 07:23:09 +0000
ROA not before: Mon 20 Apr 2026 07:18:09 +0000
ROA not after: Mon 19 Apr 2027 07:23:09 +0000
asID: 23724
IP address blocks: 42.62.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c9:11:ee:b2:a5:fd:21:be:98:5d:f7:23:66:fe:05:99:01:08:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:18:09 2026 GMT
Not After : Apr 19 07:23:09 2027 GMT
Subject: CN=0207F400FDE7B57C46B057F119EDC87ECE2238A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:35:07:c1:a6:b2:40:e1:70:4b:e6:7e:44:b8:
30:91:05:0a:f7:13:ca:a2:21:e3:2a:7c:ed:c5:f0:
ee:0a:04:fc:48:2c:b8:7d:1d:09:79:98:42:db:ea:
df:ce:70:3c:49:63:8a:d2:ac:2e:0c:29:dc:de:e8:
16:0c:26:c8:ee:23:41:5b:dd:6f:0c:15:b4:5f:09:
cc:6e:8f:aa:2b:18:8c:32:00:2e:c8:de:49:58:a2:
34:81:24:60:c7:f6:43:68:13:98:81:79:37:7e:d9:
c9:ab:17:cf:e5:5f:30:b5:4a:42:b7:52:a6:34:64:
4e:d2:3b:4b:67:01:f6:50:95:16:c9:94:5a:5d:1e:
81:84:e5:a1:44:42:27:54:0f:66:72:bb:15:b0:c5:
39:5c:0b:96:a6:7a:46:91:e8:aa:64:a2:98:da:0e:
bd:fb:6c:b8:cf:2e:da:35:d0:5e:0e:3f:2c:03:09:
eb:98:23:24:c8:61:30:a3:39:0b:b4:c7:f3:59:4d:
98:e7:3f:3c:26:a4:6a:f7:d5:95:3e:b4:82:4d:91:
e2:50:c6:07:6c:73:83:b4:0d:1d:c8:40:74:28:f2:
4b:16:7b:df:7d:a1:14:2b:37:76:1a:ef:51:92:a9:
27:0d:ba:ac:71:16:3f:c9:bd:f2:3e:f1:d4:26:16:
fd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:07:F4:00:FD:E7:B5:7C:46:B0:57:F1:19:ED:C8:7E:CE:22:38:A1
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.24.0/21
Signature Algorithm: sha256WithRSAEncryption
98:ab:fb:53:fe:f9:e3:f8:2a:bb:d3:b8:6b:a9:04:21:11:b6:
37:87:4d:90:c2:43:44:6a:24:5c:31:84:04:34:2f:07:5b:24:
1e:d9:ab:5c:21:4c:f4:24:22:82:0b:61:73:35:68:84:26:9e:
14:e2:4d:02:c3:6f:6a:21:b9:a2:9e:8b:2f:26:0e:cb:a7:26:
6e:02:6a:52:0d:cd:9a:b6:b0:0b:f0:b8:2e:8a:bb:06:df:aa:
1f:ea:3f:07:55:2a:5e:06:9e:22:3f:49:a2:78:ef:2d:98:fe:
3d:94:b8:16:56:90:c1:bf:1b:71:55:18:28:47:52:dd:f0:c4:
31:5f:cb:d9:87:a6:28:6c:b5:2e:08:e9:43:c0:c0:69:92:2c:
f9:ae:11:4a:a8:5b:f1:4e:fd:aa:5f:c1:90:d5:04:3d:3a:35:
ef:b2:0e:bf:0d:f3:a6:f4:35:e6:f5:c6:91:b4:31:66:58:e6:
de:11:cc:09:d4:c1:ad:a0:b5:df:50:05:48:40:fa:9c:0f:c0:
c6:55:70:b2:71:6c:dc:a9:6f:21:f8:92:e4:28:63:46:e5:75:
28:15:b3:3c:69:94:58:99:76:6d:cd:60:74:18:78:e9:bf:3d:
23:78:c1:fc:60:bf:55:77:d7:d7:c1:69:2d:a8:0f:74:3a:de:
fc:85:76:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:32 2026 by rpki-client