
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e382e302f32312d3231203d3e2039383038.roa
File: 34322e36322e382e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: VzBo0dPBmQdDotVnoqnJbF/BC6DjvCPiyoBvupsNABc=
Subject key identifier: 18:C5:35:5D:8F:3B:45:55:AE:9A:CE:9C:CD:16:78:42:AD:79:EF:89
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 455C69677BE2D266D85A6E7FD7A43F05F4223E3E
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e382e302f32312d3231203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:22:05 +0000
ROA not before: Mon 20 Apr 2026 07:17:05 +0000
ROA not after: Mon 19 Apr 2027 07:22:05 +0000
asID: 9808
IP address blocks: 42.62.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:5c:69:67:7b:e2:d2:66:d8:5a:6e:7f:d7:a4:3f:05:f4:22:3e:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:17:05 2026 GMT
Not After : Apr 19 07:22:05 2027 GMT
Subject: CN=18C5355D8F3B4555AE9ACE9CCD167842AD79EF89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:95:c9:fa:03:91:28:a5:1e:6c:9f:a6:2d:
22:eb:23:40:90:b5:10:68:ba:f2:42:97:67:09:9f:
69:26:8b:7d:2e:16:02:55:f0:83:d8:e5:ef:e1:b9:
c1:85:6a:c3:11:2d:f7:4d:9f:cc:45:ac:de:53:41:
14:02:be:8a:e6:b1:70:11:7d:e4:3d:2e:3f:d4:50:
60:98:80:f1:71:35:a8:08:21:0f:b6:f3:c0:7a:1c:
ef:80:13:4b:d7:22:5e:7c:f2:4e:14:a2:89:fd:8c:
c0:93:56:a5:ec:79:01:18:73:8b:88:f7:28:f4:54:
e4:96:4c:3e:c0:42:df:07:5e:8f:dd:cf:73:ac:db:
c2:38:9c:c4:b2:7c:ca:c9:6e:1c:41:30:25:be:1c:
ce:5e:71:f4:84:76:8e:0c:c0:ee:c1:17:8b:b4:16:
13:4b:b4:96:94:56:b1:fc:fd:1c:19:5c:5c:d5:25:
3b:b8:3e:9a:fe:73:44:f0:9e:06:5d:5e:5c:b0:d2:
93:22:db:8f:a4:b9:2c:3b:e4:b6:14:aa:10:d0:c1:
e5:94:e8:6d:11:be:e2:a0:f9:b6:60:26:5b:86:74:
71:90:79:1d:b1:b5:c1:16:61:1d:87:22:1c:30:d6:
bd:94:b4:8b:8f:0c:80:07:e0:a0:89:f2:05:5f:f0:
3d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C5:35:5D:8F:3B:45:55:AE:9A:CE:9C:CD:16:78:42:AD:79:EF:89
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e382e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.8.0/21
Signature Algorithm: sha256WithRSAEncryption
2c:a5:20:ed:ba:6e:27:03:04:bf:f5:93:e6:34:e5:d0:fa:cc:
42:e9:e1:4a:b9:95:b2:4b:92:df:b3:ca:d6:51:fd:c4:ab:2b:
f4:e5:ed:39:cd:c1:4b:fb:69:42:03:29:d2:c6:47:9f:6b:fc:
b6:80:e2:78:fe:f9:70:83:ad:89:f2:2f:90:c7:18:c1:74:70:
1c:28:f2:e7:4b:4a:d6:9b:6e:a9:94:5a:f7:2c:d9:27:72:a8:
83:e6:f8:0b:c7:ec:e6:22:21:fd:b3:9b:0f:7b:a6:3e:fb:49:
20:4a:aa:54:c6:9a:2e:db:e4:50:3c:92:a1:51:f7:d3:a4:1e:
d4:3c:46:de:aa:3a:b7:d0:95:f0:63:30:c9:d0:b2:cb:36:f4:
af:5d:b8:5f:63:b9:b8:cb:26:bc:18:8b:a5:01:5d:cc:31:f4:
11:b4:b9:66:6c:87:6e:67:55:df:a6:57:cc:b3:11:f6:cb:5f:
ae:1a:60:19:73:c5:8a:dd:31:86:88:f0:50:c1:d1:50:ec:91:
47:12:2b:2b:eb:7c:82:19:58:b5:37:b1:ff:60:fa:b8:bd:c7:
93:75:71:e8:a1:6c:9b:23:92:ea:ce:e3:95:84:16:98:7f:52:
7f:18:a9:5c:c9:68:dd:ce:5e:86:5f:df:38:08:62:26:0f:a4:
1a:3d:a6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:04 2026 by rpki-client