
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383437.roa
File: 34352e3132372e3134342e302f32312d3231203d3e2034383437.roa (raw, json)
Hash identifier: 91/lKxf1daLG7RqoCQBgCYnA95SLfNLn9WoHXQiHXYk=
Subject key identifier: 19:64:94:C0:F4:D0:4F:EF:58:9F:DB:E0:F9:42:41:35:61:B2:5B:F2
Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874
Certificate serial: 3EDE9321AA7B12AF3C39C05C5DBC08AF0B01EB37
Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383437.roa
Signing time: Tue 12 May 2026 09:01:32 +0000
ROA not before: Tue 12 May 2026 08:56:32 +0000
ROA not after: Tue 11 May 2027 09:01:32 +0000
asID: 4847
IP address blocks: 45.127.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 05:10:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:de:93:21:aa:7b:12:af:3c:39:c0:5c:5d:bc:08:af:0b:01:eb:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874
Validity
Not Before: May 12 08:56:32 2026 GMT
Not After : May 11 09:01:32 2027 GMT
Subject: CN=196494C0F4D04FEF589FDBE0F942413561B25BF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:33:fd:35:d8:b7:98:dc:74:5a:f8:2e:2e:a3:
de:ca:59:67:7a:bc:3a:cd:e4:83:f8:4f:4e:d6:75:
23:62:92:99:51:47:2d:03:bb:ec:2a:20:08:7f:24:
a7:78:77:cd:79:27:01:5a:d3:0c:f5:00:a0:5b:9f:
eb:1c:fc:ec:40:b1:2c:73:3e:6c:d5:df:56:0f:0b:
2a:e3:8e:b3:cf:65:8e:d8:9f:a1:58:e5:71:e1:70:
40:92:66:c8:1b:1f:f2:06:c9:84:24:69:95:e1:dd:
ab:40:38:c8:43:80:80:3c:3a:91:c7:a4:0f:47:fe:
f8:a7:2d:53:54:6e:0c:e3:8a:75:6a:66:14:7d:9f:
e4:ef:6c:60:9b:cd:71:07:1e:cf:4c:26:6d:ce:b8:
f1:f3:a6:00:82:0b:92:22:07:ab:ec:02:fb:a6:93:
59:4f:a9:90:86:cc:3d:72:e1:f6:fe:ed:6c:53:65:
46:ce:19:1e:c6:a9:ae:52:78:79:ce:e3:ce:9d:38:
da:e3:10:a0:f0:b6:76:c9:e3:4f:77:0c:d1:4a:79:
a3:ec:ee:09:50:dc:f5:8b:04:e6:0d:7f:3f:8c:df:
e2:68:aa:4e:46:d8:11:ca:7b:65:2e:fc:4a:c1:8f:
96:2d:21:77:2a:da:0c:42:40:c0:3b:61:0e:7a:58:
5d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:64:94:C0:F4:D0:4F:EF:58:9F:DB:E0:F9:42:41:35:61:B2:5B:F2
X509v3 Authority Key Identifier:
keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34352e3132372e3134342e302f32312d3231203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.127.144.0/21
Signature Algorithm: sha256WithRSAEncryption
45:b2:4e:1b:e9:f9:99:6b:98:89:9e:a8:8a:f0:68:5b:e5:9e:
15:98:cc:c7:7a:7b:af:ef:3e:54:76:24:a5:92:90:7c:d1:05:
3e:78:5a:fe:0f:45:5f:d8:b6:9c:6d:be:24:b2:43:99:d5:6b:
15:4e:7d:19:d6:a2:dc:85:71:eb:c1:0a:51:ca:65:6c:ca:85:
95:a7:eb:e4:3e:14:41:0f:30:2c:ad:88:35:09:33:77:03:73:
df:21:70:2e:4a:da:b6:60:da:dd:5c:5d:a5:f2:ba:5d:e9:eb:
50:c2:87:c0:9e:89:78:76:2b:04:ba:b3:dc:76:68:37:10:20:
f3:a2:a1:be:19:ec:4f:bc:cd:ba:fd:27:2a:18:e0:8f:b1:e1:
10:34:57:80:c8:27:b9:cd:99:9a:92:ad:92:e8:2b:14:ef:bd:
65:a1:0e:c3:e0:d2:d6:8f:98:0f:8f:54:ad:de:d8:e3:e3:3e:
c8:41:45:9d:2c:12:f7:d9:20:b6:91:28:df:02:7b:54:d4:9f:
4d:c1:98:b6:34:9f:e8:3d:f4:9a:7f:cd:74:44:1e:c9:09:2e:
35:1d:8a:05:32:4c:4c:ed:bb:f3:ba:24:d5:92:c7:83:97:48:
3d:12:e6:05:4a:c4:9b:c3:56:27:d8:1b:30:09:e6:4b:27:4d:
84:fb:be:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:33:41 2026 by rpki-client