
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e2039383038.roa
File: 34322e36322e32342e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: mbZ+YjXkjFmr8YzoGkThHkwjrBkCUSznYwBKdgXOT0w=
Subject key identifier: E8:A4:7A:BD:35:FD:11:37:90:F0:9E:22:FC:2B:9A:BE:1C:E3:4E:A8
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 55D543F7419C4839F078F285DDDDFDD6A405EFF9
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:23:09 +0000
ROA not before: Mon 20 Apr 2026 07:18:09 +0000
ROA not after: Mon 19 Apr 2027 07:23:09 +0000
asID: 9808
IP address blocks: 42.62.24.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d5:43:f7:41:9c:48:39:f0:78:f2:85:dd:dd:fd:d6:a4:05:ef:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:18:09 2026 GMT
Not After : Apr 19 07:23:09 2027 GMT
Subject: CN=E8A47ABD35FD113790F09E22FC2B9ABE1CE34EA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:08:a6:bc:20:71:5a:2a:30:d8:a1:32:df:
eb:f2:fb:2b:fc:2a:37:0a:fb:13:bb:42:4f:a8:4b:
48:f2:c1:e6:91:0e:b8:f7:74:d7:ec:98:07:77:4b:
f4:97:4a:61:9d:f7:06:a5:ba:75:7e:18:f1:ea:0a:
b6:e0:17:2f:d5:b5:5f:65:9e:bc:c8:ca:bc:dd:0e:
4e:18:ac:9a:90:e6:9c:34:0e:8d:15:40:66:65:fd:
c1:7a:a0:19:02:0c:be:d2:f2:75:55:a1:77:26:d0:
7c:94:fb:e0:20:6e:0f:e4:4d:53:43:59:05:e7:73:
c6:46:22:7f:d7:e3:9b:68:69:fc:d9:54:ee:48:62:
6e:40:e2:f5:93:0c:97:be:ce:80:1b:8d:f1:b1:b4:
78:f1:43:13:32:b9:03:c3:c2:10:fe:96:43:6c:49:
0e:2a:49:07:7c:20:8e:7c:ff:3b:75:fd:ee:27:9e:
96:1a:af:d3:c9:4b:d2:71:3c:e1:cb:26:01:da:d4:
0f:2d:56:bb:fd:aa:62:8f:8e:de:0b:9d:d3:f0:42:
23:c9:9b:ca:26:94:61:92:00:65:bf:a8:62:52:8e:
a3:3b:f5:74:8d:8e:da:96:29:9a:86:a2:db:40:d2:
f0:22:7c:23:7c:9c:00:b1:15:f0:fc:16:05:76:50:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:A4:7A:BD:35:FD:11:37:90:F0:9E:22:FC:2B:9A:BE:1C:E3:4E:A8
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e32342e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.24.0/21
Signature Algorithm: sha256WithRSAEncryption
06:f0:21:bf:10:d4:7e:4e:f2:24:9a:4e:91:d1:04:80:e3:c1:
40:ad:f0:59:c0:6d:5c:03:79:9e:5b:15:bd:66:80:51:92:56:
07:a2:f8:13:a2:25:21:2a:bd:d3:1b:48:a4:38:7a:d8:70:11:
67:17:b9:9f:92:b7:75:75:72:7a:14:24:3f:26:97:3b:48:ed:
fa:d0:1b:dd:66:45:f8:96:a1:a2:88:2d:e6:f4:ce:3b:c5:9a:
0f:b5:a0:f0:3a:7e:c2:d7:ee:ed:e0:ea:4b:3b:46:58:a5:e6:
5f:d2:11:8e:42:bf:6f:12:6e:a4:6e:25:0c:d7:02:ba:4f:51:
4d:dc:ec:b0:75:c3:0f:60:10:24:88:b6:70:ff:04:cd:98:93:
3a:3a:d4:1d:a0:97:f8:d4:64:ba:13:90:f1:46:06:92:35:56:
b1:28:4e:60:74:86:a6:8c:ea:48:b1:ea:30:38:6b:62:6e:cf:
6a:9f:13:02:a6:93:98:8f:6a:b0:88:9e:d8:84:ce:fd:7a:b3:
1d:d9:65:fd:3e:fa:c9:22:f9:c9:b7:79:65:8a:83:76:93:d6:
5c:82:1c:d1:fc:c7:9b:ba:30:fc:52:03:62:96:1f:78:e9:23:
95:f1:5b:4e:42:81:58:3e:6b:f4:f5:a8:36:06:00:08:fc:93:
cb:cc:45:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:48:49 2026 by rpki-client