
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38322e302f32342d3234203d3e2034383038.roa
File: 34322e36322e38322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: yBZULMQ5a4TQfkdOYYwFVrsa8+UwRKl9EX73HCKFg5E=
Subject key identifier: 06:7A:B9:93:B2:5E:85:C1:FD:A9:8C:74:3D:5D:30:B2:F1:13:13:C5
Certificate issuer: /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Certificate serial: 41527701D4DD4128BAE811B57D025A9D1E9F4455
Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38322e302f32342d3234203d3e2034383038.roa
Signing time: Wed 13 May 2026 01:35:30 +0000
ROA not before: Wed 13 May 2026 01:30:30 +0000
ROA not after: Wed 12 May 2027 01:35:30 +0000
asID: 4808
IP address blocks: 42.62.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:52:77:01:d4:dd:41:28:ba:e8:11:b5:7d:02:5a:9d:1e:9f:44:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF
Validity
Not Before: May 13 01:30:30 2026 GMT
Not After : May 12 01:35:30 2027 GMT
Subject: CN=067AB993B25E85C1FDA98C743D5D30B2F11313C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:0e:9a:72:1e:a8:d0:43:70:6e:ea:55:94:
7d:d7:08:dd:e9:05:76:cc:c6:2e:33:ca:6d:76:fe:
01:e2:f9:10:a3:1f:d3:ff:67:c6:8f:7a:8c:24:3e:
89:57:9d:63:4c:16:89:0f:57:ff:2b:e1:c8:14:d2:
f2:18:c3:33:62:53:19:a8:ef:1b:09:67:d5:47:37:
c6:49:fe:a6:cf:b0:a9:63:a5:b0:da:81:2d:41:cb:
3b:10:57:f0:d5:b9:76:27:cb:81:13:a2:b9:39:ff:
a5:ee:c0:70:5e:f5:26:da:f3:bb:9b:2a:1f:eb:68:
21:10:1a:f2:54:76:c0:2c:cb:b9:7c:c0:e2:19:f4:
6b:b8:34:d3:b8:ff:12:5f:78:68:0c:af:bd:80:1a:
6f:31:38:53:7c:cc:4d:91:7c:a6:eb:25:5b:32:46:
42:c5:b2:33:91:a9:f5:dd:be:cf:2c:98:c4:04:a5:
e3:a9:3b:7f:6e:1d:af:9a:b6:23:55:dc:b7:30:e5:
8a:91:ed:fc:f0:92:54:69:f3:2f:b3:66:e8:46:d7:
fa:59:a1:fd:84:96:bb:9a:e5:60:b0:12:97:d3:1e:
31:ac:26:86:ab:0c:3c:fb:91:66:e2:6f:32:c0:23:
dd:4f:8c:3d:69:f0:e3:60:50:a3:40:1e:e9:60:d8:
38:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:7A:B9:93:B2:5E:85:C1:FD:A9:8C:74:3D:5D:30:B2:F1:13:13:C5
X509v3 Authority Key Identifier:
keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e38322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.62.82.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:14:76:c8:34:12:bb:19:4a:3b:81:7f:01:e5:d4:f6:f3:72:
f4:27:ca:0f:85:39:39:26:db:25:7a:8e:56:05:87:da:14:eb:
38:89:ff:44:a0:76:7f:c7:cd:fb:48:d0:ef:2a:fd:33:ad:19:
0e:26:c8:4d:80:bd:bd:c2:bb:66:45:04:09:73:80:29:ff:72:
75:6a:85:d0:45:e1:b1:74:0a:9f:71:95:c0:1b:f8:28:44:9a:
7f:c0:78:e2:87:a8:35:f3:75:41:d8:c1:47:4b:f6:a1:08:9c:
ab:fe:4a:08:3b:52:5c:de:2c:1f:b7:6c:9a:d7:38:a7:22:00:
51:d3:48:4a:31:40:90:18:66:d2:a8:ad:e9:55:a3:bf:1d:b1:
80:3f:67:20:05:d2:ce:2b:27:42:7e:8c:51:2e:02:c4:7e:de:
1f:c6:51:7f:c2:f2:69:39:b3:2d:d3:90:ce:fc:d9:e6:b5:58:
93:3a:80:86:48:3d:d9:a1:a5:84:b9:f9:6b:10:5e:9c:ac:0f:
6b:63:79:88:ae:b1:95:0a:6d:a6:9f:bb:a5:13:24:ae:a5:dc:
a8:e2:88:6f:68:88:ef:0e:64:be:b8:72:68:83:02:b7:fa:b9:
38:1e:de:d3:f3:92:2a:08:58:39:80:3a:4e:4e:b0:a9:ce:46:
e1:c1:fe:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:08:43 2026 by rpki-client