
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3232382e302f32322d3234203d3e203338323833.roa
File: 34352e3131322e3232382e302f32322d3234203d3e203338323833.roa (raw, json)
Hash identifier: TdeHqqMxmmRZjPH4YSKwP+PHpGq+PLI8Kv3/Yf99Br0=
Subject key identifier: FB:3D:56:0D:A5:F7:83:A0:AB:C3:9E:1F:46:C1:66:6B:17:58:62:00
Certificate issuer: /CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Certificate serial: 07B7CB9AFE7CE153E87C3F927CF261B04D4B7D62
Authority key identifier: E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3232382e302f32322d3234203d3e203338323833.roa
Signing time: Wed 08 Apr 2026 03:17:41 +0000
ROA not before: Wed 08 Apr 2026 03:12:41 +0000
ROA not after: Wed 07 Apr 2027 03:17:41 +0000
asID: 38283
IP address blocks: 45.112.228.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:50:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b7:cb:9a:fe:7c:e1:53:e8:7c:3f:92:7c:f2:61:b0:4d:4b:7d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E44A11245B84A6269EEC23D7321F11971335E4E9
Validity
Not Before: Apr 8 03:12:41 2026 GMT
Not After : Apr 7 03:17:41 2027 GMT
Subject: CN=FB3D560DA5F783A0ABC39E1F46C1666B17586200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f7:57:73:ad:67:b0:36:34:9b:e0:23:ad:c4:
2f:1a:05:0d:bd:eb:d0:8d:16:28:31:a4:50:97:8d:
ef:8c:85:18:e2:8e:79:43:44:35:b6:a3:ad:6b:99:
9e:d7:32:8e:a2:86:e4:39:8c:97:01:5a:5b:95:e3:
66:88:5f:4b:f5:55:4a:e3:78:86:12:72:22:ba:f3:
ac:76:3c:95:02:89:5f:7d:c9:80:6b:a8:74:2f:60:
69:dd:14:2c:1e:3a:b9:7e:70:92:24:ab:ad:96:98:
90:0a:4b:a7:42:37:40:38:3a:82:a7:70:46:51:a0:
44:33:f3:42:bd:8b:fb:58:e5:05:13:00:94:d5:00:
e0:6f:0d:2a:f3:cb:29:90:35:70:d2:6f:11:3f:ee:
57:3e:41:9c:cf:7a:3e:d6:15:97:35:19:1c:30:97:
6d:29:29:4c:29:67:1c:61:52:a5:cc:da:d9:91:df:
c3:1d:55:c9:8d:cb:a2:70:1c:4f:70:1c:39:34:8e:
a8:5d:76:03:74:0d:f6:bd:22:55:e5:39:98:9e:cc:
00:66:a9:ab:07:2d:d6:3a:6e:ff:ee:f2:fc:b8:6f:
ed:e8:55:55:40:cb:8b:89:c2:6d:80:20:c7:ab:83:
ea:31:ec:06:bf:66:cf:c9:93:b4:b8:4b:d7:04:db:
19:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:56:0D:A5:F7:83:A0:AB:C3:9E:1F:46:C1:66:6B:17:58:62:00
X509v3 Authority Key Identifier:
keyid:E4:4A:11:24:5B:84:A6:26:9E:EC:23:D7:32:1F:11:97:13:35:E4:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/E44A11245B84A6269EEC23D7321F11971335E4E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E44A11245B84A6269EEC23D7321F11971335E4E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649346150402/0/34352e3131322e3232382e302f32322d3234203d3e203338323833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.228.0/22
Signature Algorithm: sha256WithRSAEncryption
0e:19:ae:8b:20:9a:54:61:5b:32:65:89:c4:52:32:1b:b5:47:
3f:5b:df:ac:a7:c8:4e:84:91:f2:43:32:01:20:00:96:08:11:
41:7b:e2:86:9f:0f:fb:c0:90:78:17:09:3c:92:99:75:5e:32:
fb:1b:a7:e3:48:a4:2b:76:a9:44:f6:9b:eb:45:89:1d:7f:01:
c2:70:35:1c:da:3b:fe:ad:9b:59:e9:ad:02:c2:65:d3:8f:6f:
39:50:a5:4e:a0:62:69:66:32:44:57:d5:f5:18:f1:47:35:d1:
98:d3:fc:6f:2d:66:a9:9b:ae:7e:f4:ff:ff:ae:d3:5a:cb:5b:
32:bb:5a:32:ae:b2:da:ec:35:ef:e7:65:56:bf:c6:22:3e:9b:
12:e1:8f:98:90:37:62:03:e1:19:d2:53:2a:c1:17:44:b6:11:
df:44:6c:c6:e8:13:a4:83:9c:bc:d2:0d:c8:ac:16:5f:6c:2d:
f5:74:d7:41:29:55:53:ee:ee:2f:9f:a2:cd:27:be:4e:a1:2a:
7f:93:21:93:4f:72:94:40:2a:23:da:75:a1:b8:41:62:44:24:
d1:ba:42:29:28:26:bc:86:a0:ad:81:b0:56:6f:68:b4:bb:1e:
9f:7d:95:2a:c7:68:47:6d:d8:c2:dc:62:ed:ac:d5:87:e2:7f:
fd:3e:90:cc
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:31:15 2026 by rpki-client