
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e382e302f32312d3231203d3e203233373234.roa
File: 34322e36322e382e302f32312d3231203d3e203233373234.roa (raw, json)
Hash identifier: 76NhwTeInlqAg3K9A1/X70qU6lL4qmgH0JnApVUL2ik=
Subject key identifier: A2:02:DA:F9:37:50:ED:AB:BD:AA:E6:21:7F:80:26:95:6F:D7:01:55
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 5A35952E960D1DBCC7CD0D84B9ABFDBFCF443E03
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e382e302f32312d3231203d3e203233373234.roa
Signing time: Mon 20 Apr 2026 07:22:05 +0000
ROA not before: Mon 20 Apr 2026 07:17:05 +0000
ROA not after: Mon 19 Apr 2027 07:22:05 +0000
asID: 23724
IP address blocks: 42.62.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:35:95:2e:96:0d:1d:bc:c7:cd:0d:84:b9:ab:fd:bf:cf:44:3e:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:17:05 2026 GMT
Not After : Apr 19 07:22:05 2027 GMT
Subject: CN=A202DAF93750EDABBDAAE6217F8026956FD70155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:ef:99:0a:1e:13:03:fa:6c:03:f6:66:cb:
89:cf:32:12:41:11:f5:e9:29:13:15:ee:dd:39:5e:
b2:68:c9:58:09:07:cc:af:e2:52:ff:d3:20:4d:4b:
30:e6:ae:70:20:f4:64:e7:98:25:ed:c4:bc:4e:b1:
44:5e:73:64:f4:ec:b8:35:f2:cb:04:d5:a7:19:13:
9a:6c:55:43:aa:24:0e:4a:11:a3:14:fa:d9:f5:25:
a8:b7:5f:05:c6:80:65:3d:71:eb:01:a7:e0:b1:dc:
59:90:74:43:e0:a5:5f:fe:08:67:d9:a9:bf:9e:fa:
08:35:96:1a:95:fe:db:cb:d5:8e:46:2e:8f:d7:62:
c5:c2:0d:de:28:62:94:47:da:20:86:9c:b7:0b:4f:
4e:fc:c5:10:80:ac:6e:42:f1:75:a1:92:cc:c2:1b:
c4:06:3d:28:97:1b:ef:9a:4f:86:8a:9d:46:6f:bd:
fe:4f:c2:a4:d0:13:9d:33:cb:87:ca:a2:0a:29:56:
1e:8e:d1:cf:75:58:49:e5:6b:dd:4e:e9:0f:ec:39:
55:b9:0b:ee:8a:1a:b8:02:99:99:78:58:3d:74:b2:
7f:15:d6:4e:7b:4b:32:2e:8a:57:f9:d7:f0:20:53:
95:f8:46:c6:b9:63:c9:95:18:6a:7c:93:9d:d5:02:
3e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:02:DA:F9:37:50:ED:AB:BD:AA:E6:21:7F:80:26:95:6F:D7:01:55
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e382e302f32312d3231203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.8.0/21
Signature Algorithm: sha256WithRSAEncryption
23:f6:d3:3b:14:ce:5f:fb:e0:28:e6:3c:ed:cd:0c:d8:0b:57:
69:31:d3:a5:8a:57:ff:bf:df:31:d1:2a:5a:bd:e5:a1:b6:56:
13:f3:a9:ed:dc:05:55:77:52:b1:d5:ba:3a:d5:e6:1c:c0:54:
24:75:f7:ef:1d:69:53:fb:68:92:d7:39:c2:13:94:50:23:03:
6a:b8:86:c9:05:34:af:b5:ab:9e:b9:15:6b:40:69:b6:b8:4e:
cb:fa:4b:ca:cd:f9:3e:e5:0d:a1:94:c0:e9:04:fb:55:49:df:
9d:e8:0d:4e:27:3c:d8:fc:ff:f9:dc:3b:a4:74:20:37:c8:74:
b1:25:74:6a:9e:6c:6b:3f:e2:bf:49:d3:23:36:25:8d:05:25:
87:e9:a2:91:54:d0:a1:cf:25:f4:b5:06:6b:f1:47:fc:d7:12:
1d:ec:6e:97:2a:46:6e:bd:fd:b6:41:7a:29:fb:fa:69:80:c8:
30:16:40:32:40:ea:c9:27:b7:4f:69:5c:6d:3f:30:44:b4:08:
c0:04:d4:47:a5:07:75:1c:1d:e9:4f:21:c8:d7:26:d0:23:62:
94:19:81:e7:c5:2b:4c:17:e6:38:4e:a7:e1:e4:64:77:5d:47:
45:e4:a7:42:7e:15:ea:a9:5c:b2:a4:22:e3:78:e1:b2:7b:0d:
1f:40:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:18:26 2026 by rpki-client