
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa
File: 34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa (raw, json)
Hash identifier: Y3HHoy0e/WurCL8+ctFP3iT+3Bnt3LHSR/aegK9KpWw=
Subject key identifier: 5E:CD:F9:99:90:5B:6A:77:0F:96:9F:44:0D:FE:84:58:F9:7B:EB:0B
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 170B4D884A7FACEE661DDD035AF7356B63226DA7
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa
Signing time: Wed 27 May 2026 08:15:05 +0000
ROA not before: Wed 27 May 2026 08:10:05 +0000
ROA not after: Wed 26 May 2027 08:15:05 +0000
asID: 140292
IP address blocks: 42.157.176.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0b:4d:88:4a:7f:ac:ee:66:1d:dd:03:5a:f7:35:6b:63:22:6d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: May 27 08:10:05 2026 GMT
Not After : May 26 08:15:05 2027 GMT
Subject: CN=5ECDF999905B6A770F969F440DFE8458F97BEB0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:d9:12:41:53:b0:e2:ad:4e:ac:3e:89:42:7e:
78:79:2c:dc:81:ff:7a:df:74:74:be:d5:68:64:de:
0d:63:ce:61:94:50:9e:a0:aa:77:b8:8f:b5:cc:77:
76:63:16:02:bc:a5:50:ba:7f:8e:81:58:54:d7:22:
af:9b:53:aa:04:b3:5f:21:72:f7:5d:7c:fc:12:28:
fc:71:a9:74:cc:0c:d9:e2:6c:57:89:5e:42:19:5d:
ae:e0:f3:a6:76:c3:71:a2:2b:42:1e:91:38:eb:cd:
3b:c1:2d:bd:83:38:02:b0:db:3b:ac:ff:4e:7a:da:
58:58:72:f4:be:d0:a7:5a:b4:bb:b0:4f:b7:f7:7e:
bc:c7:63:66:7d:88:a8:7f:31:ee:4f:24:c3:99:4f:
21:e9:46:c8:85:19:95:2f:42:6f:9f:cd:7b:c7:f0:
ce:05:b5:ba:bd:ea:9c:0f:dc:85:75:7f:1b:5a:28:
38:ee:d3:31:83:00:02:33:0b:44:ec:db:02:95:e7:
65:14:d1:1a:82:9f:c0:b9:75:79:d6:68:8f:86:f2:
4b:b3:e4:ae:08:2c:50:db:86:72:2e:34:1a:31:f7:
28:ea:22:68:a2:de:8b:69:19:2b:12:0a:16:25:29:
78:5a:7c:04:0c:e4:e2:4c:d5:ea:3c:8b:a9:9e:2f:
80:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:CD:F9:99:90:5B:6A:77:0F:96:9F:44:0D:FE:84:58:F9:7B:EB:0B
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3137362e302f32302d3230203d3e20313430323932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.157.176.0/20
Signature Algorithm: sha256WithRSAEncryption
39:91:dd:d0:af:ec:ff:83:b1:cc:dd:5e:c2:0a:d3:1b:53:b6:
d2:64:5b:d7:08:85:ad:18:ed:66:38:77:51:63:cb:57:01:ef:
bc:d7:f0:97:d3:d1:e6:0f:9c:72:3a:77:9a:5a:05:e4:d8:e4:
e3:f5:af:ce:94:1c:22:ab:79:77:91:40:3a:5e:33:3e:17:ae:
6c:58:35:e7:ae:d4:3e:6a:c1:0d:47:1a:dd:ff:37:6f:d4:5c:
37:bd:ab:aa:e2:7f:43:de:82:3e:97:60:0e:db:ed:3e:63:4f:
ee:5b:53:28:08:05:37:6f:df:bb:c9:d5:f5:4d:70:7d:d0:4b:
c9:5d:b1:d0:a9:61:87:43:a6:78:15:74:ca:70:9f:93:78:e7:
86:77:a3:06:44:96:b8:fb:ab:58:a2:26:80:29:51:6b:1a:db:
3b:55:fa:89:44:5e:dc:2c:21:48:62:d7:4e:77:94:d1:9e:ba:
9a:c3:bb:32:82:66:1a:28:fa:46:b3:71:07:0a:73:e1:be:f8:
8d:8f:ec:76:24:cc:ac:a8:87:e0:f5:50:5b:b2:c5:20:b1:c5:
8b:37:62:06:22:87:ce:0d:54:95:18:dd:08:cf:7a:75:ae:32:
57:9b:19:ed:13:49:ee:a0:5d:cc:ab:66:08:eb:d2:37:7b:89:
e0:51:85:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:25 2026 by rpki-client