
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32342d3234203d3e203536303436.roa
File: 34352e3234382e382e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: T/BuOvR8SkL3EiFvsfpgGTmUlBZSOgy3RGlbuaQKeMc=
Subject key identifier: 9F:8D:77:09:6B:A6:9A:22:63:AF:83:CE:FC:C9:DD:DF:32:F7:8A:E5
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 69EA3805E5210AF0F2E1F14850505BDC3A86D5E9
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32342d3234203d3e203536303436.roa
Signing time: Thu 14 May 2026 07:35:35 +0000
ROA not before: Thu 14 May 2026 07:30:35 +0000
ROA not after: Thu 13 May 2027 07:35:35 +0000
asID: 56046
IP address blocks: 45.248.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 06 Jun 2026 23:56:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:ea:38:05:e5:21:0a:f0:f2:e1:f1:48:50:50:5b:dc:3a:86:d5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: May 14 07:30:35 2026 GMT
Not After : May 13 07:35:35 2027 GMT
Subject: CN=9F8D77096BA69A2263AF83CEFCC9DDDF32F78AE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7c:44:64:cb:6b:7a:00:62:20:9f:67:73:33:
db:c7:e4:96:ca:bc:f8:42:76:56:5b:d1:81:e8:47:
48:81:21:6d:08:50:9b:e1:fd:e0:73:ab:b6:45:3b:
e2:55:b3:dd:15:d1:5f:50:6a:9e:75:71:64:13:a0:
88:34:6e:e9:19:dc:e4:9a:d3:6e:93:df:20:00:c7:
1f:24:b4:ff:58:f4:d0:27:98:a4:d6:93:11:9a:5d:
ca:0c:c3:43:8b:36:0e:2b:71:f0:43:79:b6:bb:28:
07:f9:52:7c:c6:06:80:c2:79:e0:45:cf:f3:ef:5e:
c2:e1:4f:3c:74:49:43:b1:57:7e:08:2d:f3:0b:3f:
4e:65:33:10:c9:29:bc:b0:2c:51:67:54:92:67:8a:
98:77:44:0b:41:a8:76:08:ae:7e:37:b5:37:ae:22:
c6:0b:65:c6:25:67:e2:57:d0:a8:23:a2:0a:4a:fd:
63:8d:17:91:16:e2:0b:12:cb:b3:ec:b9:44:a4:1a:
3b:84:00:83:db:1a:62:68:fe:93:37:2f:45:21:bb:
e9:19:42:fb:87:0a:0d:16:53:f6:4d:21:0b:f2:02:
c0:02:24:80:4a:1a:f2:29:a8:e0:00:1d:04:b7:f6:
94:bd:88:f5:4d:14:12:69:1e:b6:0f:46:f1:d6:78:
bd:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8D:77:09:6B:A6:9A:22:63:AF:83:CE:FC:C9:DD:DF:32:F7:8A:E5
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.8.0/24
Signature Algorithm: sha256WithRSAEncryption
76:a9:24:f9:87:8e:f6:4e:14:f2:df:8e:f9:5d:6e:c9:e6:3a:
f1:b5:18:ef:ab:65:06:19:4f:48:ac:49:d1:cb:78:da:25:b9:
a2:63:8f:d7:da:04:64:c1:87:cd:6a:fe:55:67:50:ed:ff:6f:
95:52:05:9b:02:68:45:f1:76:c5:70:bf:b6:21:50:fe:26:fc:
dd:e0:6b:49:1f:b7:a9:ef:6c:2f:f8:f2:58:03:e6:a2:75:1a:
11:93:16:de:dc:04:bb:d0:2f:81:52:bb:c1:06:a7:e2:0a:65:
53:b1:96:7d:08:c2:69:c4:e4:ea:b6:b2:a5:6e:70:37:48:e5:
0b:13:34:06:dc:6b:af:fb:5e:44:e1:3f:99:50:22:53:97:e1:
26:2a:d7:22:91:bd:f3:28:cc:e9:54:86:84:fb:b5:86:bd:35:
57:3e:b3:41:b1:b3:50:61:d7:e4:cc:8b:7f:7c:b5:d3:04:06:
86:af:c1:2d:46:49:79:58:a6:9c:ef:a0:65:bd:cb:f1:53:f0:
7d:31:76:29:fd:8a:83:ff:71:85:11:2c:13:4c:d3:ae:a6:df:
ce:94:3f:80:fc:19:20:7c:a4:21:a5:0e:00:50:1a:28:af:c6:
0b:e3:e2:e7:10:0a:1b:ff:f4:b0:f6:58:b0:c9:a1:54:3b:d7:
11:56:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:45 2026 by rpki-client