
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e203538343636.roa
File: 34352e3131362e3134302e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: oJAn1OO7T7QY3gR/aW3IuFcTz6O+pTx4SliLxtC1jEY=
Subject key identifier: EA:76:94:4F:FC:5E:6D:98:ED:D4:78:4F:10:0B:5F:F9:F0:94:45:CD
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 059BC66F43D7B547E69C3D40FA4A61C2F48E4ECA
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e203538343636.roa
Signing time: Mon 13 Apr 2026 02:37:35 +0000
ROA not before: Mon 13 Apr 2026 02:32:35 +0000
ROA not after: Mon 12 Apr 2027 02:37:35 +0000
asID: 58466
IP address blocks: 45.116.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:9b:c6:6f:43:d7:b5:47:e6:9c:3d:40:fa:4a:61:c2:f4:8e:4e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:32:35 2026 GMT
Not After : Apr 12 02:37:35 2027 GMT
Subject: CN=EA76944FFC5E6D98EDD4784F100B5FF9F09445CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d1:f4:9c:cd:03:77:33:1d:1e:81:0a:42:f7:
de:1d:cf:2c:f2:ea:02:1a:dd:9e:f1:04:32:7c:fd:
22:4a:89:a8:90:dc:c5:49:ac:96:99:8e:5c:38:cb:
fc:2f:ea:92:48:07:76:64:51:e7:55:45:a2:a8:c6:
38:71:05:67:52:26:69:f6:fb:fd:ff:92:50:4a:b5:
79:f2:5c:a0:ed:d4:40:9a:36:45:b3:95:c6:22:49:
f2:3c:42:0a:b0:51:88:7c:48:95:d8:3b:10:2a:31:
da:68:83:51:51:93:52:75:d6:e0:66:1a:65:4f:af:
f5:79:c8:49:3b:52:7b:16:84:e8:8e:0f:15:4f:4a:
c2:67:2d:bb:f7:a9:84:d4:95:d1:8d:88:3a:a1:8f:
64:64:a5:cb:f8:3a:4e:e6:9f:82:73:b1:70:88:56:
a7:3a:df:2c:88:e9:20:f6:7f:a1:57:84:ae:1a:c1:
5f:f1:61:14:b2:df:c9:e4:cf:d3:5c:41:8b:d0:04:
ac:81:9f:dd:4a:06:ac:64:19:45:e9:91:1e:a3:f5:
fe:1c:a9:f1:e5:ed:89:c4:2a:78:0d:1a:dd:86:4a:
c0:40:e7:dc:bb:42:53:98:dd:94:21:46:b4:34:81:
1b:c7:a8:ec:e2:f9:40:06:12:d0:8b:d2:12:57:c2:
0f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:76:94:4F:FC:5E:6D:98:ED:D4:78:4F:10:0B:5F:F9:F0:94:45:CD
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134302e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.140.0/24
Signature Algorithm: sha256WithRSAEncryption
61:40:18:b0:85:cb:72:49:78:2f:bd:df:fc:f0:68:1f:63:1d:
d0:c6:82:38:52:f4:37:02:cf:61:9e:e7:f5:4f:47:2e:2b:6e:
4e:8c:fd:ce:a4:77:f9:07:e5:b4:a7:c0:54:8a:e3:26:97:bf:
59:e6:f5:08:41:cf:07:04:c8:b5:ff:de:d2:45:f7:67:d1:9c:
df:79:54:5e:ba:3d:b2:cc:47:b3:e0:7f:5b:60:07:8c:91:48:
56:77:c6:78:01:dc:b3:fb:93:20:e4:49:45:59:ab:50:1b:75:
1f:9b:8d:29:99:5b:3f:95:44:6a:7b:62:c5:c3:80:04:31:10:
d2:50:e3:fc:3e:21:39:1b:43:6c:06:71:6b:6a:80:70:0d:7b:
b4:45:54:af:9d:3d:74:5e:99:5e:50:1e:8c:0d:d8:1f:7e:b0:
97:7f:3c:ac:5e:6f:5c:b9:71:fb:08:40:26:f0:b4:23:e6:6e:
c2:c3:6e:f0:ab:96:82:73:83:b7:7e:84:96:a9:f5:5e:e7:33:
84:11:9a:7c:a1:2d:d3:ce:50:dd:1e:36:ef:3a:89:ae:c4:d0:
c4:0f:fb:a5:f7:a8:4b:2e:af:6b:ee:47:81:de:6f:6c:a5:b4:
05:b5:36:04:17:7d:68:45:86:bf:92:c6:86:13:85:59:e8:76:
c5:24:03:94
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:15 2026 by rpki-client