
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1069195700119535618/0/34352e3132312e39362e302f32322d3234203d3e20333939313338.roa
File: 34352e3132312e39362e302f32322d3234203d3e20333939313338.roa (raw, json)
Hash identifier: gYT3dtPIakPTs4f1hCUuM5xGvtdVmK2naUkADh3L9I8=
Subject key identifier: 91:23:1E:3A:06:93:94:61:F1:BB:26:CA:02:49:27:30:DE:D4:2B:6C
Certificate issuer: /CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Certificate serial: 217AC7A26BD73E1047BC46F9AA33BFB3CC644397
Authority key identifier: AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/34352e3132312e39362e302f32322d3234203d3e20333939313338.roa
Signing time: Thu 29 Jan 2026 10:03:57 +0000
ROA not before: Thu 29 Jan 2026 09:58:57 +0000
ROA not after: Thu 28 Jan 2027 10:03:57 +0000
asID: 399138
IP address blocks: 45.121.96.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 11:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:7a:c7:a2:6b:d7:3e:10:47:bc:46:f9:aa:33:bf:b3:cc:64:43:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341
Validity
Not Before: Jan 29 09:58:57 2026 GMT
Not After : Jan 28 10:03:57 2027 GMT
Subject: CN=91231E3A06939461F1BB26CA02492730DED42B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:95:0e:56:70:d5:93:d8:c0:97:50:2d:11:f1:
fc:58:d4:ad:92:e2:52:96:ee:ee:20:7f:59:b9:60:
72:0e:53:be:9a:11:92:c1:d2:94:9e:1a:ee:0c:52:
84:99:cf:b7:ef:3e:f0:3e:1f:84:74:2e:8c:95:b9:
d4:b6:38:2a:33:78:0a:03:a8:d9:01:a5:5b:16:80:
a4:5b:14:8e:5c:df:6f:b2:20:52:8f:02:ae:5b:15:
24:64:2d:7f:e2:c6:82:5d:18:16:a5:4d:9b:d4:0c:
f3:7c:d8:27:15:7b:8e:33:a6:e8:9d:77:35:fa:5e:
10:60:99:cc:4a:bd:35:12:44:e0:ea:a7:ba:cb:4a:
8e:61:c3:f1:69:dc:2b:14:ef:88:95:fa:7f:13:d2:
ba:c2:78:2f:e2:ec:dd:40:b3:b1:95:04:59:24:fb:
21:4f:46:70:fa:bc:c3:65:74:f2:59:e3:b8:59:6b:
d4:6a:2a:d8:9a:18:95:c9:fc:58:f0:a3:f3:09:bc:
47:5d:2e:87:04:2e:45:68:71:e1:63:ab:f0:07:53:
da:28:b0:82:f2:49:3b:94:03:2e:29:9b:c1:9a:13:
74:2e:91:ef:20:c2:eb:78:c8:16:cf:de:d5:a0:bf:
c4:b1:87:98:cb:f2:12:f0:60:1e:b3:7b:c0:2c:07:
cb:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:23:1E:3A:06:93:94:61:F1:BB:26:CA:02:49:27:30:DE:D4:2B:6C
X509v3 Authority Key Identifier:
keyid:AB:4A:AC:80:49:BF:A0:F4:F2:78:AC:22:38:5C:A9:AB:CA:B9:A3:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AB4AAC8049BFA0F4F278AC22385CA9ABCAB9A341.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1069195700119535618/0/34352e3132312e39362e302f32322d3234203d3e20333939313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.121.96.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:dd:cc:f1:43:49:a7:3e:59:53:a1:68:76:44:e6:d1:50:f3:
77:dd:84:d3:da:ce:c7:42:ee:cc:b0:40:d3:72:ed:0f:6a:fd:
c1:fd:d7:95:7a:20:d6:23:0a:72:03:87:cd:c4:e6:b9:a1:dc:
ca:80:ab:7f:ce:12:cc:12:71:06:1b:e4:71:69:f9:b9:19:3a:
3c:05:13:08:fd:31:88:d4:4a:f0:d1:ad:b2:6b:4a:ca:db:c7:
b7:26:d0:71:9b:0e:09:b1:11:5c:93:bc:c7:03:7c:de:d8:fa:
1e:fc:49:22:cf:d8:10:32:1f:a0:7e:37:ae:b2:e8:3e:1b:05:
fc:ac:43:ed:4d:fe:68:ba:3b:c1:0a:fc:ac:b7:8e:90:07:67:
e7:b7:5e:19:40:2f:30:49:75:ce:64:f2:4e:12:c1:4c:bf:ce:
0e:01:62:da:2a:36:fe:96:73:30:3a:79:3f:85:70:db:09:49:
43:3f:d4:f8:26:25:e8:c0:18:f5:2d:64:96:ba:48:0d:63:32:
54:54:4a:6f:45:9c:d3:a2:5f:bd:0d:a4:52:16:28:cc:e3:30:
b2:05:eb:54:9b:61:56:31:46:76:24:cd:01:9e:62:fe:26:f6:
4e:9c:d7:95:b3:a9:3e:05:73:f0:0d:e9:0d:b4:86:3b:77:71:
53:0f:68:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:36:15 2026 by rpki-client