
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e39362e302f31392d3139203d3e2039383038.roa
File: 34322e36322e39362e302f31392d3139203d3e2039383038.roa (raw, json)
Hash identifier: JOIAu6oE3x5hs3kcHLxbVZwGqoWgqExc/q+NRwhI/VE=
Subject key identifier: 09:E2:70:1C:8A:43:F9:AC:63:36:4F:17:7A:3A:EE:17:9F:63:C2:6F
Certificate issuer: /CN=51110140697A5E791546E594A2208042F4C4C6DB
Certificate serial: 4F9E39B2AC52F8D6E482EE3606F46EB96D280208
Authority key identifier: 51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e39362e302f31392d3139203d3e2039383038.roa
Signing time: Mon 20 Apr 2026 07:25:25 +0000
ROA not before: Mon 20 Apr 2026 07:20:25 +0000
ROA not after: Mon 19 Apr 2027 07:25:25 +0000
asID: 9808
IP address blocks: 42.62.96.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:58:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:9e:39:b2:ac:52:f8:d6:e4:82:ee:36:06:f4:6e:b9:6d:28:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51110140697A5E791546E594A2208042F4C4C6DB
Validity
Not Before: Apr 20 07:20:25 2026 GMT
Not After : Apr 19 07:25:25 2027 GMT
Subject: CN=09E2701C8A43F9AC63364F177A3AEE179F63C26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c6:61:02:d5:cf:c5:50:3b:64:1c:29:05:ab:
37:df:14:2e:5f:ad:77:28:fe:69:fa:cc:d7:83:31:
e8:03:23:28:04:fd:54:43:db:6c:95:65:a7:30:f6:
55:e5:fe:18:fe:5a:da:68:45:c0:ab:ab:ea:8c:69:
c6:28:68:ca:3a:87:10:bd:92:7f:03:bf:2e:27:c4:
d1:b0:82:45:72:46:df:10:20:87:b5:52:10:c6:22:
57:fb:ef:f0:a4:c8:5d:c0:3c:50:74:eb:9c:6e:00:
05:4d:c7:f4:d8:7e:3d:da:0e:7c:af:24:d0:e3:fb:
d0:98:c7:6e:38:e8:84:50:ee:7d:6e:7e:e1:c9:d3:
0a:52:a0:4a:d6:5d:c4:61:ac:2a:6f:30:dc:36:37:
e9:b7:f7:6d:35:d5:9b:3f:5f:a2:88:98:3c:f7:b8:
e0:47:9b:c2:8d:6a:71:67:2e:ef:5c:76:60:73:5c:
21:6d:f3:b7:0e:6e:01:18:b2:2a:9d:4f:fb:58:86:
91:45:c3:0b:78:90:88:2b:98:f6:66:96:ef:38:8a:
73:b5:fa:47:24:77:72:42:6e:9b:0b:bc:e6:f6:66:
b8:b3:72:3e:c3:11:59:17:78:c0:59:5a:77:f5:9a:
b8:22:9b:a9:10:67:ae:a4:de:4a:e2:cc:be:0d:e8:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E2:70:1C:8A:43:F9:AC:63:36:4F:17:7A:3A:EE:17:9F:63:C2:6F
X509v3 Authority Key Identifier:
keyid:51:11:01:40:69:7A:5E:79:15:46:E5:94:A2:20:80:42:F4:C4:C6:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/51110140697A5E791546E594A2208042F4C4C6DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/51110140697A5E791546E594A2208042F4C4C6DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098489245552607235/0/34322e36322e39362e302f31392d3139203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3a:42:89:88:78:a1:b0:15:07:7b:89:05:2b:1e:64:42:3b:bb:
03:0f:7e:91:a7:7c:fe:65:5c:d9:68:88:ef:3e:74:c1:64:44:
8b:b4:f1:c0:f7:cf:15:a6:45:42:b6:35:37:59:0b:5d:21:db:
f8:f4:66:c6:81:c4:93:a4:e3:b4:51:c1:6a:97:53:52:bc:7e:
d1:59:f2:79:75:81:b6:90:ab:cc:7a:11:9f:c4:b7:11:d6:4a:
f6:8b:15:49:b4:69:35:83:54:45:13:38:1c:76:f0:bf:de:65:
b2:20:be:f9:6d:30:76:2e:d1:d4:6c:11:79:75:92:eb:8f:0a:
b4:f5:a9:80:e1:c8:9c:a4:4d:19:99:dd:d3:a5:6a:96:b0:df:
52:77:c9:d3:21:c0:9c:46:20:23:b7:f2:dc:f0:a8:35:f0:1b:
9e:5e:1b:ea:ba:b1:57:19:e1:20:b6:1c:d9:1e:af:0a:1b:c1:
16:e7:1a:a4:ca:b2:a9:4b:10:2f:54:9b:db:b2:22:93:cd:51:
b2:8f:cc:fd:ed:be:dc:83:8d:00:d8:65:84:d9:34:9a:a9:cd:
87:1f:1b:d3:e1:54:c4:1a:33:b6:bc:f0:5f:0b:9e:70:4b:37:
3d:c7:15:93:94:62:78:3a:2d:d2:7e:6f:6d:fc:ed:f6:51:75:
14:32:8c:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgIUT545sqxS+Nbkgu42BvRuuW0oAggwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJG
NEM0QzZEQjAeFw0yNjA0MjAwNzIwMjVaFw0yNzA0MTkwNzI1MjVaMDMxMTAvBgNV
BAMTKDA5RTI3MDFDOEE0M0Y5QUM2MzM2NEYxNzdBM0FFRTE3OUY2M0MyNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDxmEC1c/FUDtkHCkFqzffFC5f
rXco/mn6zNeDMegDIygE/VRD22yVZacw9lXl/hj+WtpoRcCrq+qMacYoaMo6hxC9
kn8Dvy4nxNGwgkVyRt8QIIe1UhDGIlf77/CkyF3APFB065xuAAVNx/TYfj3aDnyv
JNDj+9CYx2446IRQ7n1ufuHJ0wpSoErWXcRhrCpvMNw2N+m392011Zs/X6KImDz3
uOBHm8KNanFnLu9cdmBzXCFt87cObgEYsiqdT/tYhpFFwwt4kIgrmPZmlu84inO1
+kckd3JCbpsLvOb2Zrizcj7DEVkXeMBZWnf1mrgim6kQZ66k3krizL4N6DwxAgMB
AAGjggINMIICCTAdBgNVHQ4EFgQUCeJwHIpD+axjNk8XejruF59jwm8wHwYDVR0j
BBgwFoAUUREBQGl6XnkVRuWUoiCAQvTExtswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
ODQ4OTI0NTU1MjYwNzIzNS8wLzUxMTEwMTQwNjk3QTVFNzkxNTQ2RTU5NEEyMjA4
MDQyRjRDNEM2REIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTExMTAxNDA2OTdBNUU3OTE1NDZFNTk0QTIyMDgwNDJGNEM0QzZEQi5jZXIw
gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk4NDg5MjQ1NTUyNjA3MjM1LzAvMzQzMjJlMzYzMjJl
MzkzNjJlMzAyZjMxMzkyZDMxMzkyMDNkM2UyMDM5MzgzMDM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF
Kj5gMA0GCSqGSIb3DQEBCwUAA4IBAQA6QomIeKGwFQd7iQUrHmRCO7sDD36Rp3z+
ZVzZaIjvPnTBZESLtPHA988VpkVCtjU3WQtdIdv49GbGgcSTpOO0UcFql1NSvH7R
WfJ5dYG2kKvMehGfxLcR1kr2ixVJtGk1g1RFEzgcdvC/3mWyIL75bTB2LtHUbBF5
dZLrjwq09amA4cicpE0Zmd3TpWqWsN9Sd8nTIcCcRiAjt/Lc8Kg18BueXhvqurFX
GeEgthzZHq8KG8EW5xqkyrKpSxAvVJvbsiKTzVGyj8z97b7cg40A2GWE2TSaqc2H
HxvT4VTEGjO2vPBfC55wSzc9xxWTlGJ4Oi3Sfm9t/O32UXUUMozU
-----END CERTIFICATE-----
Generated at Wed May 13 12:41:30 2026 by rpki-client