
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134312e302f32342d3234203d3e203538343636.roa
File: 34352e3131362e3134312e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: nMk2GWR6myV/w53248tA4bXj+Pd2kJp7jwJ4W1hn+QU=
Subject key identifier: 9D:81:46:49:30:BF:11:99:26:C8:41:44:E8:A6:EF:E6:44:F9:B3:43
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 3B10D12AB9FFB29AC316FA59C0A44DDC8A3FB81F
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134312e302f32342d3234203d3e203538343636.roa
Signing time: Mon 13 Apr 2026 02:37:35 +0000
ROA not before: Mon 13 Apr 2026 02:32:35 +0000
ROA not after: Mon 12 Apr 2027 02:37:35 +0000
asID: 58466
IP address blocks: 45.116.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:10:d1:2a:b9:ff:b2:9a:c3:16:fa:59:c0:a4:4d:dc:8a:3f:b8:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:32:35 2026 GMT
Not After : Apr 12 02:37:35 2027 GMT
Subject: CN=9D81464930BF119926C84144E8A6EFE644F9B343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ff:24:ff:a1:85:8c:f8:7e:b2:bb:31:05:16:
ba:a9:79:68:7b:b1:6b:b5:1e:d4:65:5d:a4:a3:2c:
62:a4:30:36:de:17:47:b8:6e:09:41:d6:e0:48:dd:
97:ea:9a:0d:d4:dd:d6:0f:2c:0c:76:e4:d4:ae:62:
e7:e3:4f:de:9e:77:54:97:45:7e:3f:7a:22:71:ad:
36:41:1e:16:4c:53:19:58:d1:65:34:4a:74:9d:74:
db:56:ef:63:ee:24:f1:37:54:65:04:4c:22:ef:a8:
39:32:87:50:e2:dd:d0:cd:68:82:50:e7:e1:d2:ef:
85:96:95:d4:ed:24:a6:58:50:28:b9:77:f3:00:f9:
39:92:de:09:84:3e:2e:fa:25:f7:66:2a:ef:88:1c:
27:ab:d6:92:e1:d3:d6:8f:c3:90:6f:bc:ac:4e:68:
e6:1b:cd:56:13:ce:91:d0:51:94:f1:b6:23:0e:da:
15:3a:62:46:b9:2a:3a:43:ee:f4:e4:1c:62:7f:a3:
0c:31:85:28:cc:c6:2d:3f:f8:2d:ab:0a:16:12:3f:
d6:73:ea:17:23:62:f3:fd:39:ee:bc:dc:c0:8f:47:
4c:d8:21:b0:f7:d5:f1:c5:3e:87:0b:22:12:36:63:
e1:26:3a:b2:9e:e1:28:fb:2b:cc:fb:d0:80:ad:12:
ac:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:46:49:30:BF:11:99:26:C8:41:44:E8:A6:EF:E6:44:F9:B3:43
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134312e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.141.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:41:a3:b4:05:6d:67:66:4e:d5:c7:95:2b:ff:37:9c:77:63:
f4:ce:ee:13:9b:4f:49:23:57:9d:3e:6c:2c:05:a0:9e:73:5a:
e3:2d:f0:47:00:82:fa:2b:b1:73:26:a3:c2:97:b6:7f:ee:d2:
50:56:c5:da:92:fe:7d:71:6b:cc:e6:30:ac:32:8f:f2:b2:9b:
52:38:cf:ae:08:7c:bc:ab:51:a8:44:9f:11:56:a5:20:6a:81:
55:45:40:8e:db:19:60:7c:5e:bb:ed:06:47:b7:b9:0e:5a:4c:
11:c5:5e:ab:e7:18:d9:d7:5b:8d:58:d3:09:ef:7f:c9:32:42:
92:65:f4:6c:b1:74:9f:1f:8f:81:94:e6:29:bc:04:36:94:22:
6a:f7:fc:91:ae:e0:7a:18:78:2b:7d:34:09:75:2a:6e:1f:1f:
6a:b7:53:62:b3:82:90:14:f0:e0:7f:74:e0:99:92:82:5e:6b:
cc:34:58:35:4d:2a:4e:c5:6b:39:da:db:a5:e6:d2:44:ff:a9:
08:e2:23:43:4c:aa:7e:b9:5e:9f:49:cc:06:c4:ae:74:4b:6e:
73:aa:48:f6:08:8d:1f:5e:0e:90:9b:0c:24:09:5c:d9:71:9a:
fb:99:16:45:a6:85:fb:c0:94:89:23:db:38:e3:0f:7f:8e:7f:
36:34:ec:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:17 2026 by rpki-client