
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313337363937.roa
File: 34352e3234382e382e302f32322d3232203d3e20313337363937.roa (raw, json)
Hash identifier: XhIf6JZZ1jir9cUBkNhc+f7r9LCej/1ychzqmgbrga0=
Subject key identifier: 56:EC:39:79:13:68:DF:44:B8:A0:63:68:6A:1D:DF:02:BB:2C:C4:2B
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 6C1E00A94F706C439AAA235A5C369F6BFB725F66
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313337363937.roa
Signing time: Thu 14 May 2026 07:37:20 +0000
ROA not before: Thu 14 May 2026 07:32:20 +0000
ROA not after: Thu 13 May 2027 07:37:20 +0000
asID: 137697
IP address blocks: 45.248.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 15:28:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1e:00:a9:4f:70:6c:43:9a:aa:23:5a:5c:36:9f:6b:fb:72:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 14 07:32:20 2026 GMT
Not After : May 13 07:37:20 2027 GMT
Subject: CN=56EC39791368DF44B8A063686A1DDF02BB2CC42B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:12:5c:10:df:ce:26:2d:0b:8c:7f:bc:73:
1d:7c:38:43:71:e3:f8:18:bf:71:2e:dd:98:84:45:
25:77:81:54:52:91:b9:5c:3b:86:3e:6c:56:a5:14:
47:67:b9:21:6e:c2:04:ae:de:db:dd:da:d5:6a:90:
d9:5e:a7:f7:6b:33:fb:ae:21:d1:f9:45:5c:f5:54:
b7:b7:53:4a:35:0d:6d:65:68:9a:a1:40:bb:98:0c:
c1:90:a5:ed:e4:64:ae:b3:90:4e:cf:2a:25:35:d7:
e8:37:37:1b:6e:63:8d:82:86:38:c3:fc:b4:41:e1:
78:f0:9d:41:48:95:be:8d:c2:86:48:07:85:34:67:
0f:09:2b:9a:77:e9:6e:d0:2e:7c:e3:5e:4c:47:b2:
06:e9:24:ba:de:e8:c0:10:55:f1:8f:db:14:c1:de:
f0:b5:22:18:7c:fb:14:28:e4:d0:ca:46:3e:97:01:
62:8f:f2:77:86:9d:b4:d9:59:1e:22:dc:50:75:5b:
95:b4:7f:1d:40:db:a0:86:99:b9:8c:a8:ec:dd:af:
c3:94:a1:f9:2f:2f:ad:78:80:1a:1f:f9:04:aa:c2:
9d:43:9d:6a:79:ee:e9:f3:6d:fc:6f:8c:80:38:63:
49:8a:4b:c3:59:ce:49:42:bf:57:d5:3d:5f:5b:30:
92:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EC:39:79:13:68:DF:44:B8:A0:63:68:6A:1D:DF:02:BB:2C:C4:2B
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313337363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b6:1d:59:c7:48:fe:f0:40:75:ad:5b:68:46:9b:82:3e:39:72:
5f:3f:b0:c0:f3:59:85:74:50:6b:a4:8a:fd:3b:5b:ba:21:7b:
bb:1e:8b:d9:e5:d9:ad:ed:2b:2b:37:82:d8:55:93:d4:fa:27:
10:cc:37:50:3e:80:47:4a:0a:06:49:fd:f5:45:b5:8d:39:d7:
07:45:35:5a:a8:92:dc:e0:b7:89:98:e0:ab:83:fc:57:cb:a6:
1d:2f:03:aa:fe:f8:f1:7e:ac:66:7c:54:68:9e:69:f4:59:d6:
3b:1e:64:6a:72:42:a9:14:24:17:06:52:55:87:02:81:ad:20:
c3:52:02:74:9f:89:b5:74:b8:6a:96:42:e6:6d:c5:07:58:06:
d7:76:84:42:a5:b0:c6:89:d9:c4:1a:44:da:1c:7d:9c:20:81:
4a:d4:50:c1:47:82:3b:ef:53:19:b6:2f:22:c6:f6:fb:6a:12:
60:fb:ac:1d:cd:4d:a2:6d:69:66:4d:39:ab:2e:50:e8:76:27:
ab:e4:1e:a6:9f:31:23:ff:2d:11:fb:d1:66:01:e0:ba:59:79:
f3:14:f7:39:f4:04:c5:bc:0d:de:13:2f:ba:74:0c:fe:41:ca:
ad:b1:26:58:e5:b2:5a:17:c8:99:5b:e6:f0:70:e1:f9:19:c1:
d6:85:7a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:58:08 2026 by rpki-client