
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e20313331353339.roa
File: 34352e3234382e392e302f32342d3234203d3e20313331353339.roa (raw, json)
Hash identifier: UNGSqN3ZxABRfGtjDCVajUiZE/Pw0Zi0ODtjLQjOJDA=
Subject key identifier: ED:A9:ED:87:F1:62:20:F3:99:8C:89:C5:BD:20:CF:85:4D:EF:7E:90
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 072CF52E6281837E991367D794E3D61AE7F7A08E
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e20313331353339.roa
Signing time: Wed 17 Jun 2026 10:03:13 +0000
ROA not before: Wed 17 Jun 2026 09:58:13 +0000
ROA not after: Wed 16 Jun 2027 10:03:13 +0000
asID: 131539
IP address blocks: 45.248.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:2c:f5:2e:62:81:83:7e:99:13:67:d7:94:e3:d6:1a:e7:f7:a0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Jun 17 09:58:13 2026 GMT
Not After : Jun 16 10:03:13 2027 GMT
Subject: CN=EDA9ED87F16220F3998C89C5BD20CF854DEF7E90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:4e:f7:21:d2:b1:3c:34:d6:37:fb:08:1b:
a6:6a:f1:12:50:56:8f:86:56:b4:cb:45:1a:27:aa:
2d:93:eb:f0:0b:69:4a:b6:e4:1e:a2:78:b0:71:b6:
dc:a1:ae:f8:a9:ef:18:b7:1e:b6:3a:53:a2:42:1d:
a9:44:34:67:0b:88:53:d7:02:4c:5a:80:08:3c:c9:
ef:06:e6:d5:ee:ea:56:c5:9f:a5:78:83:8f:8b:86:
cb:8d:ab:d4:f2:26:e1:fb:1b:a2:6d:a8:bc:bc:34:
df:63:3f:79:9e:ee:0c:a1:fe:ca:de:50:9f:9e:21:
a6:09:24:30:ac:05:ba:c0:d5:5d:03:21:17:62:9b:
aa:6a:26:60:4f:98:eb:0e:20:2d:e3:18:a6:8d:8c:
6d:5f:aa:e8:59:ee:85:9d:ff:78:15:ac:55:60:32:
06:2c:0e:c3:42:b3:03:f2:58:3c:f4:d6:54:67:b6:
42:9c:dc:9a:f2:3c:82:2b:93:f6:f4:01:09:ec:01:
83:e5:5b:04:58:70:4e:67:ae:94:c3:58:d6:b7:e1:
e6:e0:5b:50:b8:a8:19:49:67:3b:ef:da:0f:eb:bc:
a9:38:d0:94:36:ed:7a:1b:c8:c0:fe:d0:8b:40:b3:
4a:d9:1c:22:7e:21:f5:43:7d:d4:43:3b:4b:70:1d:
eb:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:A9:ED:87:F1:62:20:F3:99:8C:89:C5:BD:20:CF:85:4D:EF:7E:90
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e392e302f32342d3234203d3e20313331353339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.9.0/24
Signature Algorithm: sha256WithRSAEncryption
74:8e:82:92:6e:02:a6:ff:dd:3d:a0:21:9b:24:13:87:62:59:
d7:77:2a:b6:a0:6c:84:bd:6e:9d:63:18:3c:ea:a0:a9:93:50:
c0:04:24:f5:7f:75:09:11:8b:02:5a:4a:43:ce:7d:60:f5:d5:
92:d7:50:36:e4:0b:7a:a5:d1:66:f5:55:41:c2:54:26:4d:34:
72:9f:7d:7a:64:70:e8:16:96:7a:d6:f3:16:7e:b8:f4:5b:49:
cc:e4:6d:2c:32:b2:61:72:6e:20:a6:63:71:cc:57:95:46:10:
51:6c:6e:e1:0f:dc:20:12:c0:fc:c0:7d:08:d6:7e:8d:df:20:
df:3a:e6:92:fd:d6:69:e3:87:53:93:38:4e:a2:f3:57:43:a3:
0a:ab:cf:3c:c7:bc:bf:7d:00:87:47:e7:61:6d:9b:4c:a9:a1:
7e:51:7e:3a:c6:45:5a:4a:d5:83:61:56:04:93:bf:25:ca:d6:
99:85:18:39:a7:f2:78:bb:f7:85:63:7b:e9:83:14:89:f6:97:
f4:ac:df:9c:28:4f:41:04:ef:62:94:e2:56:7c:43:ef:17:8f:
3d:04:e0:be:45:c2:63:1a:f2:a2:9c:df:11:9c:bd:1d:6a:56:
69:33:e7:12:23:fb:cf:3e:80:0c:9f:6f:9e:66:8a:5e:aa:98:
52:81:d1:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 22:49:52 2026 by rpki-client