
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203536303430.roa
File: 34352e3131362e3134322e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: QGr+zWvjHYnvlfuyUD70L+P+SEKlqqKcZjvIvcIqHxc=
Subject key identifier: 0B:C1:19:37:5B:60:F6:2D:88:75:C6:A8:71:63:48:BC:FB:3D:5E:06
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 60E71A20744A03F329CC1FED8AA5703F2F3A7E2B
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203536303430.roa
Signing time: Mon 13 Apr 2026 02:37:34 +0000
ROA not before: Mon 13 Apr 2026 02:32:34 +0000
ROA not after: Mon 12 Apr 2027 02:37:34 +0000
asID: 56040
IP address blocks: 45.116.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e7:1a:20:74:4a:03:f3:29:cc:1f:ed:8a:a5:70:3f:2f:3a:7e:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:32:34 2026 GMT
Not After : Apr 12 02:37:34 2027 GMT
Subject: CN=0BC119375B60F62D8875C6A8716348BCFB3D5E06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:1a:ef:58:74:63:48:73:4e:73:ef:57:75:
b1:5f:d6:6c:55:c9:d2:ba:56:8b:9c:01:67:66:56:
77:ea:1a:d5:9f:17:21:b8:69:b5:8d:41:6e:65:e4:
88:f8:e4:43:14:fe:6c:1c:18:d0:a3:e5:25:88:44:
27:c0:cd:da:0e:bf:25:28:eb:dc:28:83:85:d7:cf:
5e:3d:15:c9:7a:b5:ba:77:17:4c:fb:a4:8e:63:e4:
b4:bb:27:99:ce:87:6e:1d:ca:c6:fa:d0:35:2c:5a:
9f:10:ef:63:08:a4:d5:e5:b4:34:f2:0b:5f:2d:98:
e6:8e:55:c1:fe:95:fb:52:98:2c:fc:4a:06:cc:62:
3b:4e:33:d3:51:08:0b:d3:19:4a:6e:67:9d:b7:07:
ee:48:6f:a4:2b:55:fe:ca:9a:eb:a2:7c:29:81:75:
d1:81:7f:7b:82:de:30:5f:28:45:e9:ca:89:57:a7:
ee:ac:00:da:2e:a2:18:e7:7d:6d:66:54:e6:06:fb:
ad:d6:65:ff:94:9d:17:3a:90:44:60:9e:2b:4d:f0:
fd:20:0a:1c:6e:f6:f0:f3:e1:4f:08:38:7e:d2:3e:
2f:75:0b:02:4d:c6:fa:7f:56:e7:48:c7:2f:a2:c9:
85:5e:4c:58:4c:b3:45:c1:7d:73:d6:43:a6:8f:b3:
c5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C1:19:37:5B:60:F6:2D:88:75:C6:A8:71:63:48:BC:FB:3D:5E:06
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e3134322e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.142.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:b3:16:07:f5:c4:e9:e0:c7:50:c2:13:70:55:34:ff:46:1c:
3c:4c:85:f7:02:68:38:61:cd:88:1f:70:6d:be:6b:bd:48:ca:
88:a6:81:5f:a3:09:92:06:f2:02:83:85:54:ef:d4:e0:f1:bf:
7c:97:4d:e5:20:e1:30:e8:c8:79:3b:d3:2a:75:95:6c:bf:0b:
10:d7:31:da:ce:7c:bd:de:8f:c4:8c:9b:aa:42:df:36:7a:e5:
fb:2a:1b:00:b0:fc:38:b8:d1:db:f0:0f:e2:1b:2a:fe:2d:0a:
6d:e5:56:11:26:dd:c3:8e:dd:f2:6b:e3:b7:74:e7:52:99:84:
3b:4e:d7:27:2e:25:68:18:4a:14:89:5f:a9:5c:25:21:7e:8d:
f2:0c:a2:06:b6:63:b4:8a:3d:34:32:cd:89:ae:7a:d0:44:e1:
a4:fd:2b:9b:58:09:7c:b9:52:ce:b3:6f:a7:71:17:10:92:7d:
ac:45:a1:59:90:b2:d3:aa:5b:bd:25:f3:ab:71:dc:12:26:7a:
f2:e5:3e:bb:2c:8c:0e:d2:2d:ec:f1:7c:98:65:5b:83:cd:5c:
47:c9:49:6a:d3:ec:a0:d3:86:b3:c3:cb:c4:09:92:f0:77:0a:
0a:3d:79:52:1b:92:25:c9:fc:0b:e4:58:c6:d3:b6:41:d8:20:
47:32:5c:70
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUYOcaIHRKA/MpzB/tiqVwPy86fiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB
QjIxMzUxQTAeFw0yNjA0MTMwMjMyMzRaFw0yNzA0MTIwMjM3MzRaMDMxMTAvBgNV
BAMTKDBCQzExOTM3NUI2MEY2MkQ4ODc1QzZBODcxNjM0OEJDRkIzRDVFMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVLxrvWHRjSHNOc+9XdbFf1mxV
ydK6VoucAWdmVnfqGtWfFyG4abWNQW5l5Ij45EMU/mwcGNCj5SWIRCfAzdoOvyUo
69wog4XXz149Fcl6tbp3F0z7pI5j5LS7J5nOh24dysb60DUsWp8Q72MIpNXltDTy
C18tmOaOVcH+lftSmCz8SgbMYjtOM9NRCAvTGUpuZ523B+5Ib6QrVf7KmuuifCmB
ddGBf3uC3jBfKEXpyolXp+6sANouohjnfW1mVOYG+63WZf+UnRc6kERgnitN8P0g
Chxu9vDz4U8IOH7SPi91CwJNxvp/VudIxy+iyYVeTFhMs0XBfXPWQ6aPs8WpAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUC8EZN1tg9i2IdcaocWNIvPs9XgYwHwYDVR0j
BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF
OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzUyZTMxMzEz
NjJlMzEzNDMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAC10jjANBgkqhkiG9w0BAQsFAAOCAQEAqrMWB/XE6eDHUMITcFU0/0Yc
PEyF9wJoOGHNiB9wbb5rvUjKiKaBX6MJkgbyAoOFVO/U4PG/fJdN5SDhMOjIeTvT
KnWVbL8LENcx2s58vd6PxIybqkLfNnrl+yobALD8OLjR2/AP4hsq/i0KbeVWESbd
w47d8mvjt3TnUpmEO07XJy4laBhKFIlfqVwlIX6N8gyiBrZjtIo9NDLNia560ETh
pP0rm1gJfLlSzrNvp3EXEJJ9rEWhWZCy06pbvSXzq3HcEiZ68uU+uyyMDtIt7PF8
mGVbg81cR8lJatPsoNOGs8PLxAmS8HcKCj15UhuSJcn8C+RYxtO2QdggRzJccA==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:16 2026 by rpki-client