
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa
File: 34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier: a934j/iciW9ztDPRfJ2/eFivVbtEeHlpgklOM2lTbzA=
Subject key identifier: 16:17:51:90:39:C0:22:E7:59:FB:19:70:21:10:A4:95:94:56:32:4B
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 0A76619AA1B07D420AD7C3BFE331F76FCC88D8C6
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa
Signing time: Thu 14 May 2026 07:27:37 +0000
ROA not before: Thu 14 May 2026 07:22:37 +0000
ROA not after: Thu 13 May 2027 07:27:37 +0000
asID: 137697
IP address blocks: 45.120.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:76:61:9a:a1:b0:7d:42:0a:d7:c3:bf:e3:31:f7:6f:cc:88:d8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 14 07:22:37 2026 GMT
Not After : May 13 07:27:37 2027 GMT
Subject: CN=1617519039C022E759FB19702110A4959456324B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:f5:57:82:1c:70:7b:a7:8a:98:29:41:f6:
1d:92:ff:df:ba:0e:2c:00:84:fc:59:7c:b1:62:35:
6e:b8:a2:c2:4a:b9:e3:33:a2:b4:be:f4:01:fc:16:
03:28:84:e9:f4:46:74:f2:29:13:88:1a:28:5c:74:
57:e0:b2:cd:0c:e6:3a:76:19:8e:6a:d7:d0:28:72:
77:59:6b:d8:7b:99:ae:1c:31:1f:ed:5d:28:a4:79:
89:b4:22:6b:35:96:3c:be:5d:6f:12:a4:b8:03:26:
67:66:ed:ca:7a:2b:fb:a1:09:99:c9:0f:a8:67:cf:
0f:d3:cf:4b:ac:e9:cd:16:ad:d8:70:63:47:c7:02:
cb:58:62:d4:17:df:88:66:e6:39:d3:e5:b6:9a:d0:
ed:56:e9:c5:dc:d1:07:ce:14:9c:4a:0e:f3:83:ec:
7e:02:1b:61:7a:50:36:9c:43:e6:33:58:0c:1c:74:
ce:3a:6c:de:c9:67:24:a7:4a:3e:34:e7:04:a0:b8:
53:4b:cf:04:0a:a1:0c:73:40:af:cd:67:8e:7e:b8:
0c:d2:f8:21:35:fb:7b:89:bb:bd:03:3c:7d:cd:26:
75:f1:ec:e8:c9:40:87:df:3d:20:0d:31:bf:d4:c3:
61:8d:47:38:f3:f0:1f:a9:9b:fd:9b:ea:d6:77:67:
26:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:17:51:90:39:C0:22:E7:59:FB:19:70:21:10:A4:95:94:56:32:4B
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3132302e3130302e302f32322d3232203d3e20313337363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.120.100.0/22
Signature Algorithm: sha256WithRSAEncryption
59:17:e5:16:a0:eb:9b:f9:3b:ca:44:59:67:54:ef:e6:76:d8:
1e:a5:51:3d:93:03:e5:f1:6e:02:8f:e3:9d:a9:e8:c9:3c:d0:
eb:ff:4b:84:d3:a1:58:4a:45:0b:8a:73:ff:c0:a0:19:2e:c0:
e4:0e:53:1d:b0:56:e4:ee:29:06:e6:a9:ff:31:15:d2:99:ce:
ac:f6:9f:c2:34:20:5d:b4:f9:95:51:c6:51:be:02:3b:e5:6d:
23:2d:83:81:82:cc:b2:10:8c:89:61:17:da:fd:9c:0a:c2:75:
90:99:8e:57:85:a8:e8:85:65:c9:3a:37:e5:e4:b7:85:72:63:
29:3e:a8:68:52:e5:08:c0:11:5d:92:05:70:e8:a6:f5:c8:33:
22:01:11:35:b0:d5:ef:73:2f:f4:de:4a:69:1d:f9:7b:5f:c0:
f2:61:35:08:99:5c:ee:9c:e8:df:48:a3:d5:44:0e:1f:fb:3a:
0a:f1:ba:5d:de:b9:24:e6:64:66:e4:f6:ef:22:8f:51:83:dd:
17:c6:15:12:db:79:46:a1:11:ee:a5:68:db:e5:62:22:39:9a:
09:5a:97:f8:10:74:19:61:8d:55:b0:f0:cc:be:aa:ee:f5:b9:
e4:9e:15:06:a8:f5:7d:8f:50:20:3c:2f:d0:01:7e:cd:b5:19:
81:98:6f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client