
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32322d3232203d3e203539303433.roa
File: 34352e3131362e3134302e302f32322d3232203d3e203539303433.roa (raw, json)
Hash identifier: OGa9chNdGvVi1ng761qxRIwE4bUGvJq+32/2abf029A=
Subject key identifier: 5F:93:EC:91:74:84:98:0F:DB:08:96:9C:F0:D8:AE:B9:E7:5F:C6:3C
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 440108A437291276B0CC0599D73BD22B0BE6BA32
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32322d3232203d3e203539303433.roa
Signing time: Mon 13 Apr 2026 02:37:35 +0000
ROA not before: Mon 13 Apr 2026 02:32:35 +0000
ROA not after: Mon 12 Apr 2027 02:37:35 +0000
asID: 59043
IP address blocks: 45.116.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:01:08:a4:37:29:12:76:b0:cc:05:99:d7:3b:d2:2b:0b:e6:ba:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:32:35 2026 GMT
Not After : Apr 12 02:37:35 2027 GMT
Subject: CN=5F93EC917484980FDB08969CF0D8AEB9E75FC63C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c3:90:ea:8e:b8:9c:a3:1f:a1:d4:d9:28:3d:
ec:17:57:34:03:77:27:34:bf:ab:bc:e3:dd:41:1b:
66:2e:55:bb:90:46:2f:a7:8d:e8:e1:17:d2:7b:b6:
ae:30:ce:ef:f7:20:bc:f9:74:e8:b7:76:3a:c3:c5:
12:1e:1d:b0:99:b7:f5:c3:e4:a6:44:9d:52:55:23:
ab:f0:67:9e:6a:5b:b5:44:4e:27:99:30:6d:1a:0a:
50:1e:85:50:ab:9e:f2:5b:1f:69:73:7c:45:b7:3f:
b3:8d:c6:ac:bb:88:b1:56:2d:f6:67:b9:3d:05:b0:
2d:77:f4:a9:44:e8:1e:a8:0a:43:28:3d:3a:67:a1:
b1:2f:61:58:56:bf:57:69:04:62:c6:b4:4e:66:fb:
80:5a:4f:7b:47:2a:f8:e4:ff:88:a4:40:d5:57:42:
be:66:e5:27:5f:27:f5:ef:e4:c2:f0:cc:71:65:da:
9d:a8:6c:2d:fa:21:2f:92:a3:6f:ab:31:9a:14:00:
41:19:2a:40:ea:62:95:45:ca:52:ff:a5:2b:a8:d3:
22:bd:25:f8:a8:78:ca:da:75:fc:da:ae:eb:c3:ef:
b1:ec:a8:0f:ed:99:7c:be:58:96:09:16:aa:36:8d:
6a:3b:6d:5b:34:21:ff:40:01:30:1f:f8:93:71:66:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:93:EC:91:74:84:98:0F:DB:08:96:9C:F0:D8:AE:B9:E7:5F:C6:3C
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32322d3232203d3e203539303433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.140.0/22
Signature Algorithm: sha256WithRSAEncryption
50:ee:15:2d:aa:ab:d1:8a:27:22:2a:33:e8:88:ab:a5:c1:75:
23:fa:9b:42:94:84:ad:54:4b:fb:5e:25:1e:8d:83:bc:c0:19:
de:80:bc:f1:56:45:28:5c:73:5f:b5:dd:96:1e:c4:ec:2c:dd:
91:a7:03:1e:95:55:52:f0:83:d9:de:4c:0a:93:d7:3f:ec:0c:
b5:3c:3f:bc:f6:9b:04:83:2f:64:be:0a:76:43:c9:cc:cb:77:
61:53:36:ca:84:9c:22:55:fa:88:13:d6:8b:10:16:b3:8b:9d:
c7:95:75:62:5b:95:1c:df:68:ba:f1:9b:2d:23:ab:62:79:ff:
a6:16:c7:a2:93:0f:d6:3f:35:61:b4:f4:a4:02:0f:e9:1d:94:
0f:73:5b:c1:ce:5c:e8:f9:a8:e1:63:f1:a0:9a:39:c3:fd:92:
42:57:07:a2:a4:3c:66:cf:ff:0a:c1:69:39:e7:6d:a0:2b:88:
51:ab:f0:43:8f:84:fc:cf:3b:ca:1f:3d:d4:9d:7b:24:ab:8a:
d2:dd:7b:68:f7:50:fa:6e:7a:ad:18:80:85:0d:2b:a2:25:f0:
7f:13:c0:73:e5:56:35:c3:70:39:79:60:fc:5e:67:28:ba:24:
7b:5d:90:21:e7:b8:3e:b2:a3:1b:3a:ff:63:94:e5:91:80:44:
8d:ad:e8:43
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:16 2026 by rpki-client