
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094519876787109889/1/34322e3139352e302e302f31362d3136203d3e2030.roa
File: 34322e3139352e302e302f31362d3136203d3e2030.roa (raw, json)
Hash identifier: 5gRW1Df9Uq+sI2cmGzcRRVxv+KqMVQ6+l+oBi0X5thE=
Subject key identifier: 18:FD:DA:D8:73:99:A7:E3:96:52:42:DC:24:8F:B8:5D:96:90:E6:AD
Certificate issuer: /CN=786588C287D0F949A379F4D51335F9423A0E03E3
Certificate serial: 28EE57CBA18BB7D9BD7B51CAD5BDA273F2C70B36
Authority key identifier: 78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/34322e3139352e302e302f31362d3136203d3e2030.roa
Signing time: Wed 15 Apr 2026 13:29:37 +0000
ROA not before: Wed 15 Apr 2026 13:24:37 +0000
ROA not after: Wed 14 Apr 2027 13:29:37 +0000
asID: 0
IP address blocks: 42.195.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl
rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 11:34:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:ee:57:cb:a1:8b:b7:d9:bd:7b:51:ca:d5:bd:a2:73:f2:c7:0b:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=786588C287D0F949A379F4D51335F9423A0E03E3
Validity
Not Before: Apr 15 13:24:37 2026 GMT
Not After : Apr 14 13:29:37 2027 GMT
Subject: CN=18FDDAD87399A7E3965242DC248FB85D9690E6AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:29:93:d2:3c:ab:b8:fe:3d:0b:e7:ce:78:9b:
56:99:7e:6e:fc:48:34:bc:e6:f5:8c:eb:59:2c:95:
30:87:b1:8f:10:fa:72:78:37:2a:ff:c1:ff:c4:7d:
16:73:82:02:04:8e:26:93:78:a2:1c:e0:83:96:84:
a0:85:0c:c2:c4:79:15:5c:8b:b1:68:79:36:36:6b:
ad:f3:d5:fc:e3:8f:9f:fd:1d:ab:81:34:8d:0b:8d:
2f:14:81:07:bc:ec:68:a4:2b:51:af:2d:16:10:b2:
21:fd:49:9d:0e:c9:bd:cc:2c:7a:f1:ff:b4:9e:98:
e6:42:3a:63:f4:cf:b0:bc:7d:d6:e1:f9:2b:99:a7:
48:8c:3d:7a:b1:a2:12:16:f5:94:0f:18:92:f1:c4:
a5:23:ae:8c:ce:ee:61:91:aa:e4:1e:0c:a5:6c:2a:
23:1c:45:fe:d1:cb:b6:bf:17:e6:d0:17:f4:c8:a3:
f7:81:5f:ad:8e:af:42:ee:e3:28:36:3d:be:19:ca:
c5:9d:64:5b:f1:e6:89:ce:4d:60:c9:42:31:96:8f:
bf:9c:00:5f:75:a2:ec:9b:a4:96:ad:98:0d:e6:7f:
5b:46:98:e3:75:a3:ad:f9:e9:5a:32:e6:05:41:a0:
ba:ba:a2:46:cb:2c:cb:f4:70:47:cb:85:e4:9c:a0:
67:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:FD:DA:D8:73:99:A7:E3:96:52:42:DC:24:8F:B8:5D:96:90:E6:AD
X509v3 Authority Key Identifier:
keyid:78:65:88:C2:87:D0:F9:49:A3:79:F4:D5:13:35:F9:42:3A:0E:03:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/786588C287D0F949A379F4D51335F9423A0E03E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/786588C287D0F949A379F4D51335F9423A0E03E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094519876787109889/1/34322e3139352e302e302f31362d3136203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.195.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5d:15:b6:bd:a1:09:94:60:04:02:37:79:77:6b:a1:92:bd:8a:
da:08:9a:5b:8a:bb:dc:da:43:b1:d6:7b:50:18:17:54:ee:d3:
ff:17:44:3e:95:de:22:05:17:7c:6e:2a:d5:15:e5:dc:63:f4:
7f:1d:42:6d:7b:b1:ff:a6:e3:52:f8:c2:6e:e6:3b:25:d2:ed:
2d:64:03:34:59:7b:b0:53:79:24:4f:1c:bc:ee:2c:83:a0:46:
76:d2:6a:1d:e9:73:2c:d5:80:4e:f8:46:0a:ee:c8:e8:6f:9a:
cb:1e:25:b6:53:5b:28:88:de:66:fa:57:53:a9:9f:37:81:11:
36:98:5c:9e:72:f1:78:6a:83:dd:b9:54:1c:f9:0e:ee:64:d5:
f2:85:ff:49:5f:3a:07:52:27:f5:08:d8:2b:92:0c:04:b2:69:
0a:54:61:8c:d7:f0:55:12:b3:f8:75:e3:fc:c8:4c:39:01:e7:
eb:54:26:49:7a:ea:b7:4f:26:6a:da:c7:67:80:dd:48:7b:b0:
d8:6a:fa:f4:46:4d:3f:30:b8:f6:c3:2b:aa:61:d1:f1:23:0b:
bf:9c:2c:5e:e7:46:24:ee:14:38:af:44:7d:b8:81:22:25:4a:
11:4a:ea:85:1d:c8:2c:1f:46:11:bf:9e:a6:d1:01:a7:6d:ac:
42:d9:32:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:42 2026 by rpki-client