
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e2039383038.roa
File: 34322e36322e302e302f32312d3231203d3e2039383038.roa (raw, json)
Hash identifier: EKnLGfAemth92WXsEBnpzqVTov5/NAw/TUrjE4QQFvY=
Subject key identifier: 16:D5:95:B8:CC:A4:57:49:08:72:45:93:D6:B3:23:CB:8D:8B:3A:18
Certificate issuer: /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial: 46C5AE9E98291A5483D0ECA458059ECB3EFBF720
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e2039383038.roa
Signing time: Wed 13 May 2026 01:32:39 +0000
ROA not before: Wed 13 May 2026 01:27:39 +0000
ROA not after: Wed 12 May 2027 01:32:39 +0000
asID: 9808
IP address blocks: 42.62.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c5:ae:9e:98:29:1a:54:83:d0:ec:a4:58:05:9e:cb:3e:fb:f7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Validity
Not Before: May 13 01:27:39 2026 GMT
Not After : May 12 01:32:39 2027 GMT
Subject: CN=16D595B8CCA4574908724593D6B323CB8D8B3A18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:7a:23:a4:83:c4:58:83:b3:57:be:ef:30:03:
6a:3d:0b:4e:c6:4b:ac:93:31:7c:66:ea:1b:de:33:
b2:6c:f1:31:88:23:b2:8c:71:39:8b:b5:df:4f:f3:
6f:58:3c:96:85:bf:64:4b:0c:ee:9d:bf:da:bb:83:
2e:72:19:84:d0:36:9d:8b:ed:2b:b3:56:99:4f:d9:
a3:a5:eb:ca:4d:8e:92:b2:37:57:1e:0a:2b:40:87:
75:d1:c3:da:11:20:51:50:f3:b3:b2:27:48:d2:44:
07:b7:0e:70:d3:e7:bc:c4:d7:3d:8a:a1:c1:56:32:
79:32:cc:32:a0:f1:79:56:bd:ed:af:c2:c6:f5:f1:
1b:aa:34:34:95:be:ed:9f:18:c9:14:ae:f1:e6:85:
6c:e7:ef:29:b5:1b:a8:2c:fa:61:bb:51:fc:d4:2b:
c1:5e:45:cd:6f:17:4c:3b:da:53:40:c0:e1:28:98:
78:a7:4f:ed:2d:e0:47:c9:e6:04:60:78:c7:88:c4:
ba:00:3b:46:ff:32:fd:89:7e:db:47:5d:ad:66:44:
72:85:e0:9b:e6:b4:fd:90:33:d5:9f:65:25:64:e3:
a6:7b:c5:67:f7:56:7d:cb:6f:f6:4c:6d:58:e0:d1:
70:89:42:29:ec:e8:38:3a:9e:66:28:fc:da:42:d3:
4d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D5:95:B8:CC:A4:57:49:08:72:45:93:D6:B3:23:CB:8D:8B:3A:18
X509v3 Authority Key Identifier:
keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.0.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:ba:fa:a2:52:a3:37:8c:c5:27:90:8b:7f:35:a0:81:79:f3:
f1:ed:98:f6:47:b9:3e:8d:76:c2:af:ce:71:62:3b:dc:b2:ce:
78:9c:60:12:da:2d:75:28:72:df:4b:c8:a4:6b:e7:b8:01:5b:
50:c6:77:f1:c9:32:e7:0c:ee:57:8b:20:fd:e5:12:4a:8e:b3:
dd:eb:07:ce:4c:f4:ad:0e:bb:0d:fe:33:af:b0:d8:fe:c5:e0:
61:7d:cb:41:51:5c:26:fd:cd:a9:61:06:45:43:ae:b6:ae:af:
92:b3:e8:61:83:88:52:8c:39:fb:7e:de:60:1b:f4:35:59:e7:
e7:a0:0d:eb:b7:e5:97:90:10:74:f8:f9:90:76:4b:30:80:30:
57:1d:f6:2d:dd:6c:c9:0a:f0:89:e0:14:c4:45:a7:6b:f0:45:
2e:66:b6:54:29:21:f5:10:3e:82:ce:59:7b:74:fe:ec:96:ce:
95:14:da:f3:70:08:fe:82:23:9d:79:a6:c8:51:30:ef:75:2d:
b5:a2:b8:87:5b:8e:94:d3:e6:a8:c1:e0:ca:f3:de:63:8f:4e:
53:1b:71:3d:a2:59:9b:6e:90:dd:b8:73:b2:2e:2c:6f:35:32:
9b:42:ac:d6:35:c9:b6:ec:16:99:33:d9:08:e7:32:ee:c3:9f:
11:0c:ed:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:39:54 2026 by rpki-client