
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e34302e302f32312d3231203d3e203233373234.roa
File: 34322e36322e34302e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: rFDTbhrtnq4M/QocQJ/CS5hiqI7aKgWKIuzMXxl1xgY=
Subject key identifier: AF:D1:FD:AC:AF:0E:BC:4F:03:9E:F7:FC:9F:79:3B:AD:FB:5D:6D:D0
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 0ABAF930358E2468136A1433C8654BB0FFC25267
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e34302e302f32312d3231203d3e203233373234.roa
Signing time: Mon 20 Apr 2026 07:23:38 +0000
ROA not before: Mon 20 Apr 2026 07:18:38 +0000
ROA not after: Mon 19 Apr 2027 07:23:38 +0000
asID: 23724
IP address blocks: 42.62.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ba:f9:30:35:8e:24:68:13:6a:14:33:c8:65:4b:b0:ff:c2:52:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:18:38 2026 GMT
Not After : Apr 19 07:23:38 2027 GMT
Subject: CN=AFD1FDACAF0EBC4F039EF7FC9F793BADFB5D6DD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:77:c2:96:4d:36:16:43:9c:17:55:86:73:5f:
b9:4c:b7:37:25:72:26:88:fc:01:8c:4f:20:7c:7c:
82:b4:3f:5d:7d:ba:e1:89:3a:00:10:e0:a4:98:98:
53:60:c8:a3:01:ec:28:87:24:ac:36:ed:b8:81:4b:
26:24:62:17:e8:e9:d3:69:d9:08:dd:13:45:c5:75:
0e:b4:42:31:fa:44:09:d2:9c:86:87:8e:f9:ae:af:
3b:c3:db:da:cd:89:43:a8:87:ae:f7:7b:50:5e:5a:
80:35:f9:b8:09:92:3e:d2:d3:f7:e5:c2:70:a3:e9:
14:ee:94:3f:0c:07:fa:d6:30:b5:7e:bb:92:b2:0e:
d3:0c:06:31:48:3c:9c:72:fb:9f:56:09:ad:09:9f:
39:42:d0:c8:fc:53:4d:54:a3:47:65:2a:64:6a:7a:
e3:12:4c:e8:a8:83:06:34:a8:c7:69:ca:20:16:57:
24:88:59:82:99:7b:31:45:6d:ea:cc:34:bb:76:29:
2c:be:5a:3a:08:ed:3b:46:2a:1f:d2:c3:0a:e0:4b:
8a:5f:3e:33:d5:fd:98:d0:99:79:2e:76:6a:10:72:
eb:01:13:9f:06:0a:e9:d2:23:82:ec:ed:06:fd:57:
26:cd:e2:02:4d:6b:72:38:f5:87:41:92:ad:a0:02:
b0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D1:FD:AC:AF:0E:BC:4F:03:9E:F7:FC:9F:79:3B:AD:FB:5D:6D:D0
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e34302e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.40.0/21
Signature Algorithm: sha256WithRSAEncryption
02:05:50:cf:c5:ce:d0:f9:79:e1:03:b7:60:61:58:72:fb:79:
d9:26:86:89:ce:cd:df:66:a5:49:ce:7c:ac:52:05:b0:53:ca:
55:10:5a:3a:68:46:d9:14:67:fa:5f:4d:e0:34:93:f3:b1:35:
14:c5:32:7f:a1:f7:26:0c:c9:a7:53:a6:f6:02:b8:70:1d:1e:
3e:0e:1e:02:91:28:5a:14:a6:a7:28:52:9d:94:09:62:8b:b3:
eb:42:52:88:02:78:8a:d2:7f:d1:16:f6:c0:71:c9:42:a2:95:
7b:92:8f:82:26:af:72:f1:c0:dc:67:37:d0:2a:ba:cf:86:eb:
30:bc:07:00:55:e6:8e:f5:18:f4:9e:ce:09:ec:17:71:1d:49:
5b:43:79:99:0c:fb:e2:9a:1f:aa:64:e5:d5:83:38:46:83:c6:
b5:9b:16:9c:14:ce:b8:9c:66:f3:42:97:fa:8a:54:1e:51:d0:
48:25:6b:b0:c8:d4:0f:a5:00:31:0e:5a:02:b2:e3:ef:bd:c1:
44:cc:ca:d6:20:18:dd:88:3e:25:fa:48:a5:a8:de:a2:41:ce:
2c:ac:40:80:f0:1e:55:ca:d0:c3:b5:a3:24:63:70:c3:63:2b:
71:86:ea:e1:61:6f:46:c9:1f:e3:99:a0:7d:8f:3f:29:90:53:
c5:b8:c8:5f
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUCrr5MDWOJGgTahQzyGVLsP/CUmcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA0MjAwNzE4MzhaFw0yNzA0MTkwNzIzMzhaMDMxMTAvBgNV
BAMTKEFGRDFGREFDQUYwRUJDNEYwMzlFRjdGQzlGNzkzQkFERkI1RDZERDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbd8KWTTYWQ5wXVYZzX7lMtzcl
ciaI/AGMTyB8fIK0P119uuGJOgAQ4KSYmFNgyKMB7CiHJKw27biBSyYkYhfo6dNp
2QjdE0XFdQ60QjH6RAnSnIaHjvmurzvD29rNiUOoh673e1BeWoA1+bgJkj7S0/fl
wnCj6RTulD8MB/rWMLV+u5KyDtMMBjFIPJxy+59WCa0JnzlC0Mj8U01Uo0dlKmRq
euMSTOiogwY0qMdpyiAWVySIWYKZezFFberMNLt2KSy+WjoI7TtGKh/SwwrgS4pf
PjPV/ZjQmXkudmoQcusBE58GCunSI4Ls7Qb9VybN4gJNa3I49YdBkq2gArCXAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUr9H9rK8OvE8Dnvf8n3k7rftdbdAwHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDg5MjQ1NTUyNjA3MjM1LzAvMzQzMjJlMzYzMjJl
MzQzMDJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMyMzMzNzMyMzQucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAMqPigwDQYJKoZIhvcNAQELBQADggEBAAIFUM/FztD5eeEDt2BhWHL7edkmhonO
zd9mpUnOfKxSBbBTylUQWjpoRtkUZ/pfTeA0k/OxNRTFMn+h9yYMyadTpvYCuHAd
Hj4OHgKRKFoUpqcoUp2UCWKLs+tCUogCeIrSf9EW9sBxyUKilXuSj4Imr3LxwNxn
N9Aqus+G6zC8BwBV5o71GPSezgnsF3EdSVtDeZkM++KaH6pk5dWDOEaDxrWbFpwU
zricZvNCl/qKVB5R0Egla7DI1A+lADEOWgKy4++9wUTMytYgGN2IPiX6SKWo3qJB
ziysQIDwHlXK0MO1oyRjcMNjK3GG6uFhb0bJH+OZoH2PPymQU8W4yF8=
-----END CERTIFICATE-----
Generated at Wed May 13 14:08:47 2026 by rpki-client