
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094488874987552769/1/34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa
File: 34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa (raw, json)
Hash identifier: H59iKxiAmGukp2ydGqfjAYyfkoOeyPXYoendyAVgvkk=
Subject key identifier: 3D:F2:C1:49:A9:4B:C2:B3:F8:63:DE:21:5D:A6:F8:24:02:7B:A5:A4
Certificate issuer: /CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Certificate serial: 6677E9923157407B55314D2121EDB1AA3E872210
Authority key identifier: 56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa
Signing time: Thu 09 Apr 2026 05:22:29 +0000
ROA not before: Thu 09 Apr 2026 05:17:29 +0000
ROA not after: Thu 08 Apr 2027 05:22:29 +0000
asID: 151253
IP address blocks: 45.119.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 04:16:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:77:e9:92:31:57:40:7b:55:31:4d:21:21:ed:b1:aa:3e:87:22:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56F83115BDB2EC8491CB95EE1BC68BE786A3615A
Validity
Not Before: Apr 9 05:17:29 2026 GMT
Not After : Apr 8 05:22:29 2027 GMT
Subject: CN=3DF2C149A94BC2B3F863DE215DA6F824027BA5A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:e7:74:77:bb:04:a0:e9:ac:be:ea:6d:39:
19:5f:b6:b2:c4:3d:54:e6:86:f8:9c:11:1b:3c:be:
4c:df:c8:8e:72:15:a7:3a:6a:10:1d:88:03:d1:cd:
81:66:2b:07:96:3c:4d:ea:ce:b7:29:ab:4b:d8:5a:
e1:04:9e:4e:09:9b:87:b8:e4:2a:ae:aa:69:53:35:
e7:d8:00:3f:6e:27:8f:6b:26:38:4d:61:e5:fe:2b:
70:85:e3:a0:1a:c5:9a:98:08:df:2e:ec:8d:ef:27:
20:be:06:aa:ac:02:ff:1d:19:be:8e:b9:eb:d9:bc:
78:13:c4:84:1e:d0:44:dc:4b:79:24:d6:55:d0:91:
49:fd:36:88:49:f8:94:42:52:d1:2b:11:d5:a5:4b:
b5:64:e6:0c:b1:7a:63:e9:d0:86:b4:cf:4c:7b:1e:
94:70:0c:bb:94:cc:75:31:01:02:c8:3e:bb:7b:35:
9e:36:32:97:5d:11:e6:e8:83:72:ca:a6:09:84:e3:
ea:0b:29:47:c4:9a:0e:ee:07:aa:3f:b5:7b:a2:dd:
c8:34:0e:48:2c:64:98:ea:8e:78:07:a4:c7:9e:d7:
86:b6:cf:29:7c:20:ab:8d:1c:61:94:ec:d7:83:53:
93:88:19:0f:d8:4a:3c:3e:3f:e7:87:c3:7c:0b:ba:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F2:C1:49:A9:4B:C2:B3:F8:63:DE:21:5D:A6:F8:24:02:7B:A5:A4
X509v3 Authority Key Identifier:
keyid:56:F8:31:15:BD:B2:EC:84:91:CB:95:EE:1B:C6:8B:E7:86:A3:61:5A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/56F83115BDB2EC8491CB95EE1BC68BE786A3615A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094488874987552769/1/34352e3131392e3130342e302f32342d3234203d3e20313531323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.119.104.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:21:cb:dd:10:49:f2:d9:1f:a9:72:93:43:c6:16:a3:50:31:
f4:60:a3:30:c3:e7:fe:04:e8:cf:4f:98:3f:52:c7:3e:82:c6:
ff:5e:86:fb:67:e9:a3:b3:c0:93:0f:de:b0:e9:80:dc:b5:b5:
d5:86:6e:a5:c6:ba:10:bc:dc:6f:8d:95:2f:3d:3d:44:1b:15:
32:e4:bb:96:97:ce:c4:f9:84:d1:04:18:73:fd:1a:52:98:ef:
29:f0:d2:ba:fb:cb:a2:ba:83:17:ef:17:a6:a7:d6:ca:e8:52:
de:d2:84:03:b6:81:12:dd:3b:31:3c:a8:85:bc:7b:33:e0:bd:
5a:f5:bb:ff:da:ef:a4:2e:0b:55:2d:46:6f:7e:99:99:a6:5c:
20:5d:a3:a5:bb:45:09:67:ec:7c:3b:7a:6e:a4:71:d0:ed:6e:
6a:ac:21:8a:4f:aa:d4:80:88:e2:68:a6:ba:eb:1b:ca:92:bc:
b3:ee:b2:19:56:42:1e:61:09:a2:f7:eb:16:8c:f5:07:e1:01:
4b:6d:aa:e2:14:a3:52:85:0d:8a:2e:82:b2:4e:35:d3:48:34:
b2:0c:fd:f1:45:49:8b:88:c9:2f:a7:b6:1e:05:9a:b4:cf:84:
53:e1:d9:d2:a4:b4:77:9a:45:07:43:24:ad:9e:47:33:a9:60:
ec:a6:65:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:32 2026 by rpki-client