
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e382e302f32322d3232203d3e20313337363937.roa
File: 34352e3131372e382e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier: fRcODguLg77LBNmi6jjLK1ovpsoa705N+sL6tSq4kbk=
Subject key identifier: 0D:B2:2B:D2:02:EA:CB:D9:30:10:05:F6:B0:F6:D4:37:26:58:10:D2
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 60B3C075D59C3F49B22F509C03CA8E55781113D8
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e382e302f32322d3232203d3e20313337363937.roa
Signing time: Thu 14 May 2026 07:27:37 +0000
ROA not before: Thu 14 May 2026 07:22:37 +0000
ROA not after: Thu 13 May 2027 07:27:37 +0000
asID: 137697
IP address blocks: 45.117.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:b3:c0:75:d5:9c:3f:49:b2:2f:50:9c:03:ca:8e:55:78:11:13:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 14 07:22:37 2026 GMT
Not After : May 13 07:27:37 2027 GMT
Subject: CN=0DB22BD202EACBD9301005F6B0F6D437265810D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a3:a7:f1:f7:14:80:0d:1d:0b:8b:47:04:67:
62:ef:f4:44:0b:ef:a1:f5:37:c8:72:ce:7a:37:3d:
57:b5:9d:40:a0:59:b6:89:31:70:e2:06:90:8d:65:
67:26:da:a3:59:31:f5:ec:30:3f:ba:93:d0:98:f8:
b1:38:2a:9d:94:32:82:31:fc:b2:97:4f:0b:b5:35:
07:49:dc:ed:80:62:f8:0d:00:2b:6f:a5:16:26:b5:
a3:ec:a1:90:45:4d:d8:a3:a7:14:16:b0:dc:9a:2d:
fd:96:e1:13:f8:81:bc:7f:ba:08:15:34:58:c8:24:
46:bf:31:35:2d:51:b7:d8:fb:70:c4:cf:90:c0:cc:
e1:63:90:3e:df:f5:aa:20:35:70:de:ba:fb:30:70:
d1:41:d0:d2:e4:38:48:ce:97:0c:8c:1e:9a:55:9d:
5d:6f:9c:b8:7d:7e:7f:fa:f5:8e:2a:ce:40:10:b2:
74:89:d8:48:7a:c6:d4:10:fa:07:ae:f2:66:9c:fc:
7e:d0:1c:40:e2:57:50:cf:52:b7:0f:79:f6:00:12:
02:92:d7:4b:fe:23:35:18:a3:6c:a7:1c:41:3b:1f:
81:62:8d:b8:9a:2e:5b:fb:f4:29:91:25:6d:b1:0d:
ef:28:f9:40:99:3b:d3:c0:87:6d:1a:10:08:bd:16:
84:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B2:2B:D2:02:EA:CB:D9:30:10:05:F6:B0:F6:D4:37:26:58:10:D2
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e382e302f32322d3232203d3e20313337363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.8.0/22
Signature Algorithm: sha256WithRSAEncryption
48:3a:5b:3f:48:26:2d:7b:26:60:70:fb:6a:f9:a3:70:3b:60:
ee:e8:68:b8:a4:aa:a8:54:24:42:2d:e2:66:25:78:ee:7e:bd:
96:6a:3e:5b:5b:18:82:3b:e3:5c:4e:5f:c8:f0:c9:45:9c:86:
a1:42:23:dc:2e:8b:07:aa:8c:2c:a7:32:69:46:78:3a:6d:bf:
2f:42:dc:b4:da:a6:b9:3a:72:b1:51:95:dc:67:de:6d:d7:90:
91:dc:04:bd:6d:18:15:34:1a:6a:9d:38:b2:3b:4e:3e:ba:f3:
ff:e7:2f:28:2b:0b:67:20:93:5f:72:01:c1:8a:76:f9:c9:ff:
f2:e4:27:ff:e4:01:cd:86:1a:78:f0:89:48:3a:9d:69:06:d2:
0f:f0:42:0a:d6:e3:64:52:a7:48:6f:26:33:f1:22:87:dd:07:
b6:52:0b:85:cc:79:fc:99:98:6d:5d:f2:a3:5d:21:c3:e7:ca:
ca:ed:a6:96:c6:1d:86:5d:7e:a0:81:bb:8e:38:3d:e0:f7:b5:
6e:5a:fc:d5:3e:c7:89:21:41:dd:1f:ef:27:15:5a:5e:2e:14:
1f:47:77:d3:bf:69:df:ef:b1:c1:7c:0e:67:22:6a:cf:ab:ba:
42:86:e7:55:e1:d9:22:cf:4f:19:e9:0e:84:f6:ec:27:65:61:
60:bd:27:57
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUYLPAddWcP0myL1CcA8qOVXgRE9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA1MTQwNzIyMzdaFw0yNzA1MTMwNzI3MzdaMDMxMTAvBgNV
BAMTKDBEQjIyQkQyMDJFQUNCRDkzMDEwMDVGNkIwRjZENDM3MjY1ODEwRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIo6fx9xSADR0Li0cEZ2Lv9EQL
76H1N8hyzno3PVe1nUCgWbaJMXDiBpCNZWcm2qNZMfXsMD+6k9CY+LE4Kp2UMoIx
/LKXTwu1NQdJ3O2AYvgNACtvpRYmtaPsoZBFTdijpxQWsNyaLf2W4RP4gbx/uggV
NFjIJEa/MTUtUbfY+3DEz5DAzOFjkD7f9aogNXDeuvswcNFB0NLkOEjOlwyMHppV
nV1vnLh9fn/69Y4qzkAQsnSJ2Eh6xtQQ+geu8mac/H7QHEDiV1DPUrcPefYAEgKS
10v+IzUYo2ynHEE7H4FijbiaLlv79CmRJW2xDe8o+UCZO9PAh20aEAi9FoQvAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUDbIr0gLqy9kwEAX2sPbUNyZYENIwHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzQzNTJlMzEzMTM3
MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNzM2MzkzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi11CDANBgkqhkiG9w0BAQsFAAOCAQEASDpbP0gmLXsmYHD7avmjcDtg7uho
uKSqqFQkQi3iZiV47n69lmo+W1sYgjvjXE5fyPDJRZyGoUIj3C6LB6qMLKcyaUZ4
Om2/L0LctNqmuTpysVGV3GfebdeQkdwEvW0YFTQaap04sjtOPrrz/+cvKCsLZyCT
X3IBwYp2+cn/8uQn/+QBzYYaePCJSDqdaQbSD/BCCtbjZFKnSG8mM/Eih90HtlIL
hcx5/JmYbV3yo10hw+fKyu2mlsYdhl1+oIG7jjg94Pe1blr81T7HiSFB3R/vJxVa
Xi4UH0d3079p3++xwXwOZyJqz6u6QobnVeHZIs9PGekOhPbsJ2VhYL0nVw==
-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client