
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e20313331353339.roa
File: 34352e3234382e31302e302f32342d3234203d3e20313331353339.roa (raw, json)
Hash identifier: kTmgmU2jPoiu1tMuu2eklPhK8+hC1cXtiJ4brC+0d/w=
Subject key identifier: E5:CA:7F:02:5F:E2:17:6E:A6:A0:E2:B9:36:4B:77:B6:BD:29:0D:75
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 3376195C2D030A46A45EEAC7A20A999F5DA5FB61
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e20313331353339.roa
Signing time: Wed 17 Jun 2026 10:03:12 +0000
ROA not before: Wed 17 Jun 2026 09:58:12 +0000
ROA not after: Wed 16 Jun 2027 10:03:12 +0000
asID: 131539
IP address blocks: 45.248.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:76:19:5c:2d:03:0a:46:a4:5e:ea:c7:a2:0a:99:9f:5d:a5:fb:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Jun 17 09:58:12 2026 GMT
Not After : Jun 16 10:03:12 2027 GMT
Subject: CN=E5CA7F025FE2176EA6A0E2B9364B77B6BD290D75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:61:0a:f8:b2:48:8a:d4:c3:07:cb:ba:a1:b1:
4f:49:b2:a9:95:8a:0a:79:6b:70:22:15:a9:ec:10:
a8:e9:20:c0:64:14:b7:c2:de:00:2f:89:0b:a6:7e:
f4:39:5b:92:5f:06:c8:e7:d6:98:16:8f:47:5e:bd:
8d:6e:80:01:fb:49:72:27:63:48:9b:ff:ce:b4:db:
26:d0:e9:96:06:84:d4:d1:5b:39:7c:5e:cd:77:a0:
d2:3c:7e:f0:f2:8e:9f:87:5b:6e:4a:11:7b:b5:00:
95:33:f1:18:d0:b0:ce:24:05:4b:22:dc:4d:34:f3:
a6:82:f6:61:2a:19:e9:9b:d7:d3:f0:18:fc:d0:dd:
67:90:83:26:c3:50:1f:f0:09:cc:58:80:89:b3:f8:
0f:03:d1:e8:f4:6f:f0:f0:b7:a2:53:bf:6c:4c:26:
5f:fa:ce:62:71:79:a3:c8:83:51:29:3f:71:10:bf:
6f:eb:f9:1b:41:ff:00:16:3f:fa:6b:51:1c:7a:e6:
52:a4:1c:17:78:cb:7d:44:3b:92:38:79:4f:e8:0d:
a5:41:25:a1:da:ae:7b:cc:b9:9d:22:59:90:99:80:
79:d0:53:06:ed:2c:78:8b:94:74:da:41:6d:e7:e9:
ba:e0:0b:0f:8f:f3:b1:c1:ec:c7:81:b7:7c:70:a8:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:CA:7F:02:5F:E2:17:6E:A6:A0:E2:B9:36:4B:77:B6:BD:29:0D:75
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e31302e302f32342d3234203d3e20313331353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.10.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:06:8b:db:d5:29:03:71:ab:0a:9e:53:cc:50:3c:a5:5f:ad:
45:04:86:21:fa:41:a5:c6:b0:3a:5a:23:eb:28:e3:f4:da:5f:
94:52:a5:02:fc:d0:36:65:04:34:2e:6c:95:08:c5:94:a0:36:
ea:dc:56:f9:25:26:fe:56:25:e2:12:4b:0d:ff:42:ef:e6:4f:
8c:e6:04:d5:fe:ef:db:70:27:27:4f:7a:90:a1:07:6d:39:bd:
4a:66:9e:6b:88:cd:a7:6b:05:0e:5e:48:0a:74:c6:a5:22:2a:
2d:ad:71:20:7c:18:25:60:b5:60:a5:e1:3c:cd:de:62:25:0a:
0b:6d:d2:74:72:d3:02:93:4c:49:8b:4d:24:7d:53:8d:c8:b8:
d6:c3:2d:d1:05:e3:3c:10:25:79:64:21:98:cc:fd:b1:05:d5:
4f:62:29:40:65:0e:1e:99:bd:91:68:f1:ad:e2:f7:da:b1:e9:
e6:0c:64:25:c8:eb:da:ce:22:ee:9b:1e:52:00:7b:e3:d6:f0:
1b:06:fe:79:4f:c4:71:f4:d8:3b:15:1e:a1:24:a1:b5:93:fb:
a8:21:f9:b8:a6:ee:5a:64:7c:64:c5:f3:e5:2e:91:99:eb:08:
70:6c:5a:16:b3:f6:9c:4b:06:fc:37:2b:83:95:69:ad:af:23:
1f:f3:75:c5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 22:50:08 2026 by rpki-client