
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33342e302f32342d3234203d3e203538343636.roa
File: 34352e3131362e33342e302f32342d3234203d3e203538343636.roa (raw, json)
Hash identifier: Y6mQZSgH/FimPg/WTmpLa0NFsYy+VLMdkKJBk3Gt430=
Subject key identifier: DE:E3:2F:D5:78:22:CC:94:76:FB:30:C3:2D:B1:60:CB:E9:AB:C7:7C
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 0EB784C552D0F1B60F41E32549635E7EF05544D5
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33342e302f32342d3234203d3e203538343636.roa
Signing time: Mon 13 Apr 2026 02:37:34 +0000
ROA not before: Mon 13 Apr 2026 02:32:34 +0000
ROA not after: Mon 12 Apr 2027 02:37:34 +0000
asID: 58466
IP address blocks: 45.116.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:53:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b7:84:c5:52:d0:f1:b6:0f:41:e3:25:49:63:5e:7e:f0:55:44:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: Apr 13 02:32:34 2026 GMT
Not After : Apr 12 02:37:34 2027 GMT
Subject: CN=DEE32FD57822CC9476FB30C32DB160CBE9ABC77C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b7:f8:83:1b:d2:ca:9c:66:1f:96:ae:af:51:
69:9c:c3:13:98:43:89:0d:90:f7:b4:8e:e5:c5:6d:
0e:ff:9f:1a:c5:48:f8:c7:8d:e1:9f:02:72:dc:e3:
ee:b7:0f:33:30:ce:93:ce:b0:2a:73:5b:1b:7b:92:
11:70:94:78:4c:d2:db:90:cf:eb:d5:e8:b0:14:dd:
e9:d0:ff:bd:d6:c1:32:5b:0e:e5:46:c6:99:ea:e7:
71:e3:f4:d8:ce:95:6d:46:d3:18:c4:10:74:7e:64:
44:c9:cf:20:a6:56:fd:86:c1:d4:57:cf:21:b3:fa:
7f:38:7f:de:37:fe:92:72:60:50:79:f0:fb:a1:3f:
73:90:99:99:50:83:54:5d:5a:3b:21:7c:de:ec:58:
6f:c7:bd:63:bd:9f:41:fe:12:e3:67:da:48:6a:07:
a5:6d:59:5b:1f:0c:60:52:bb:1c:29:78:d6:14:d2:
e9:55:bf:37:9a:31:90:e2:6e:63:5b:c4:b5:81:80:
05:69:c6:d2:b1:cb:8e:8c:43:70:2f:fe:1c:ea:2a:
85:2b:45:a6:36:47:fa:47:45:c3:16:f4:bb:ea:8b:
92:8c:02:e8:eb:dd:16:5e:4b:31:a7:f1:0c:a9:c3:
c8:ae:31:26:d9:96:b4:a5:43:ad:29:9d:63:a9:bd:
58:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:2F:D5:78:22:CC:94:76:FB:30:C3:2D:B1:60:CB:E9:AB:C7:7C
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33342e302f32342d3234203d3e203538343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.34.0/24
Signature Algorithm: sha256WithRSAEncryption
26:56:e2:3c:a3:7f:c9:ef:db:39:27:ea:42:47:a1:97:75:a2:
1e:81:a0:af:88:e9:dc:2e:db:5a:8e:76:f2:84:ed:ee:91:74:
6f:63:cc:8d:f8:23:d8:c3:78:31:cd:14:ef:b1:3f:fc:9e:48:
36:6a:e6:ae:3a:1b:af:13:de:9e:c7:c6:d2:46:50:fe:4a:63:
cc:4a:a9:a9:df:85:3c:5c:90:4b:2e:f9:6d:2c:58:2a:de:17:
88:d6:c0:28:df:94:60:bc:4c:60:a5:3e:4c:5b:d0:7c:50:19:
d7:2b:4c:3d:d4:87:af:bb:f1:67:42:60:4d:26:ab:8f:de:b9:
cf:18:40:9b:97:0c:af:3a:d2:f6:ed:7c:44:31:00:33:a9:f7:
f0:b7:b0:d0:9d:55:f1:1b:05:42:ec:e7:a6:66:af:e3:fc:83:
ba:00:d2:73:51:14:a1:b7:ff:36:14:ee:2b:65:31:7a:10:fc:
db:08:2e:06:75:58:87:a2:f6:99:ac:77:9e:8d:a9:28:17:2a:
f1:e1:f9:3a:aa:42:7f:26:d8:73:84:f4:8b:4c:be:5e:30:cd:
9b:2e:35:0b:0f:b1:f9:29:30:cd:b2:1f:1b:3c:36:5e:65:01:
7f:1f:19:af:72:4b:b3:bf:d5:41:8c:4d:32:c7:db:9c:95:7a:
64:37:f9:a3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDreExVLQ8bYPQeMlSWNefvBVRNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB
QjIxMzUxQTAeFw0yNjA0MTMwMjMyMzRaFw0yNzA0MTIwMjM3MzRaMDMxMTAvBgNV
BAMTKERFRTMyRkQ1NzgyMkNDOTQ3NkZCMzBDMzJEQjE2MENCRTlBQkM3N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRt/iDG9LKnGYflq6vUWmcwxOY
Q4kNkPe0juXFbQ7/nxrFSPjHjeGfAnLc4+63DzMwzpPOsCpzWxt7khFwlHhM0tuQ
z+vV6LAU3enQ/73WwTJbDuVGxpnq53Hj9NjOlW1G0xjEEHR+ZETJzyCmVv2GwdRX
zyGz+n84f943/pJyYFB58PuhP3OQmZlQg1RdWjshfN7sWG/HvWO9n0H+EuNn2khq
B6VtWVsfDGBSuxwpeNYU0ulVvzeaMZDibmNbxLWBgAVpxtKxy46MQ3Av/hzqKoUr
RaY2R/pHRcMW9Lvqi5KMAujr3RZeSzGn8Qypw8iuMSbZlrSlQ60pnWOpvVgTAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU3uMv1XgizJR2+zDDLbFgy+mrx3wwHwYDVR0j
BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF
OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NzIwMjU5LzAvMzQzNTJlMzEzMTM2
MmUzMzM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzODM0MzYzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAC10IjANBgkqhkiG9w0BAQsFAAOCAQEAJlbiPKN/ye/bOSfqQkehl3WiHoGg
r4jp3C7bWo528oTt7pF0b2PMjfgj2MN4Mc0U77E//J5INmrmrjobrxPensfG0kZQ
/kpjzEqpqd+FPFyQSy75bSxYKt4XiNbAKN+UYLxMYKU+TFvQfFAZ1ytMPdSHr7vx
Z0JgTSarj965zxhAm5cMrzrS9u18RDEAM6n38Lew0J1V8RsFQuznpmav4/yDugDS
c1EUobf/NhTuK2UxehD82wguBnVYh6L2max3no2pKBcq8eH5OqpCfybYc4T0i0y+
XjDNmy41Cw+x+SkwzbIfGzw2XmUBfx8Zr3JLs7/VQYxNMsfbnJV6ZDf5ow==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:30:56 2026 by rpki-client