
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa
File: 34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: /Aw2t/1v//jR49wqCyB9OMlsYgHW4FM74iHxyPt74bc=
Subject key identifier: D3:40:0B:89:CF:07:36:E6:14:1C:E1:20:BE:65:EC:09:78:0C:4B:A7
Certificate issuer: /CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Certificate serial: 1FD6EED35E13AA7B3AE07F1879A988A6B0A1CBC8
Authority key identifier: 53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa
Signing time: Wed 27 May 2026 07:56:18 +0000
ROA not before: Wed 27 May 2026 07:51:18 +0000
ROA not after: Wed 26 May 2027 07:56:18 +0000
asID: 134543
IP address blocks: 42.157.192.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:14:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d6:ee:d3:5e:13:aa:7b:3a:e0:7f:18:79:a9:88:a6:b0:a1:cb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53814E2CDF95CC9747D91E3B5A01478695BE00AA
Validity
Not Before: May 27 07:51:18 2026 GMT
Not After : May 26 07:56:18 2027 GMT
Subject: CN=D3400B89CF0736E6141CE120BE65EC09780C4BA7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:60:43:a5:76:3f:ec:a9:49:83:af:70:d9:84:
76:7f:d3:74:09:01:cf:23:1a:f8:0b:cc:f5:02:6c:
80:03:02:fb:3a:4a:7f:8e:5a:15:9a:84:0b:4f:db:
0b:51:2d:1d:b0:c0:59:f1:4f:c2:83:1e:20:70:48:
53:c3:29:4c:62:b9:dc:67:b7:89:82:87:4d:08:d5:
65:8c:48:78:54:91:e4:a7:56:0a:d0:44:6b:88:04:
07:f4:86:d7:3a:d9:e7:f7:99:7c:b9:13:f4:44:fa:
9c:86:e0:f1:ef:78:13:0e:3e:73:bb:9e:97:ca:4b:
9f:62:d6:f5:49:f1:5f:2c:c0:bd:06:be:46:1a:6d:
42:6f:44:2d:c3:08:b5:76:31:f0:1c:fb:57:0e:9e:
f6:af:c3:9e:42:f4:11:6a:69:02:db:d2:e9:39:e9:
04:65:fb:45:8e:96:1c:68:34:3e:f7:dc:89:7f:d6:
73:a7:85:7c:e8:6c:17:f4:21:1a:3a:3f:5e:42:81:
0f:78:43:59:a4:5a:97:e5:cd:a8:00:b5:3e:51:21:
95:7a:80:5a:d4:ed:df:46:03:b2:18:90:40:78:f0:
7f:01:49:27:08:50:01:4a:14:55:72:1e:fe:5b:12:
0b:a8:92:f2:60:9d:17:5e:56:96:15:c0:a5:6f:f4:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:40:0B:89:CF:07:36:E6:14:1C:E1:20:BE:65:EC:09:78:0C:4B:A7
X509v3 Authority Key Identifier:
keyid:53:81:4E:2C:DF:95:CC:97:47:D9:1E:3B:5A:01:47:86:95:BE:00:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/53814E2CDF95CC9747D91E3B5A01478695BE00AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53814E2CDF95CC9747D91E3B5A01478695BE00AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111909334314385427/0/34322e3135372e3139322e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
42.157.192.0/24
Signature Algorithm: sha256WithRSAEncryption
04:63:65:73:4e:81:fb:46:7f:0e:35:5b:17:e4:26:1b:e9:78:
ea:4d:20:56:40:67:73:99:92:0f:7f:d9:c2:8e:be:69:25:c4:
2c:56:47:d3:e2:bb:39:86:9f:d3:0c:72:51:4d:0a:bd:21:d8:
58:0f:af:11:2f:a4:26:13:d5:0c:11:92:38:80:8a:7a:a9:af:
51:52:dd:f8:bc:11:c1:8a:92:b5:a0:ea:3f:74:08:5e:61:e6:
e6:af:56:93:07:43:41:78:14:ac:a0:12:84:21:c0:47:c8:d1:
b9:9f:00:d7:6e:7b:42:f3:23:d1:7a:b4:f3:77:29:18:da:e3:
56:6e:67:b7:28:e1:4b:c7:6c:ae:84:41:8a:04:0a:b0:f7:7b:
fd:77:82:68:45:f9:73:77:03:9e:92:21:8b:15:8a:e3:8f:59:
06:b7:9d:d7:cd:43:d1:11:fc:d9:f6:6c:94:f8:0f:13:f7:73:
4a:35:0d:11:d4:ff:e3:ec:a7:66:4b:ae:d1:66:ab:57:84:e2:
90:fe:6f:5e:eb:89:a3:1f:1d:89:79:e6:b4:3d:64:46:81:a8:
d7:35:da:aa:33:5e:02:93:7a:5d:18:a6:76:24:43:53:47:77:
71:4e:97:f0:15:86:77:d4:6d:68:be:3b:ca:21:36:2a:11:18:
a2:e2:2a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:57:14 2026 by rpki-client