
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094808409447858179/0/34352e3235302e3138382e302f32322d3232203d3e2030.roa
File: 34352e3235302e3138382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: Ul8jBVWfQWMHZVncSODj++IC2MkGx46F4lvsM2ziU+A=
Subject key identifier: E2:F7:A5:E0:0A:AD:C8:7B:EE:24:9D:31:0A:57:81:6C:77:EB:3B:59
Certificate issuer: /CN=3D426BEA44C56109707602923668D40F4458FBEF
Certificate serial: 67548CCA2146DDFAE42A349E9E22B7DEC6B3FEAE
Authority key identifier: 3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/34352e3235302e3138382e302f32322d3232203d3e2030.roa
Signing time: Fri 10 Apr 2026 05:58:05 +0000
ROA not before: Fri 10 Apr 2026 05:53:05 +0000
ROA not after: Fri 09 Apr 2027 05:58:05 +0000
asID: 0
IP address blocks: 45.250.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 10:05:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:54:8c:ca:21:46:dd:fa:e4:2a:34:9e:9e:22:b7:de:c6:b3:fe:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D426BEA44C56109707602923668D40F4458FBEF
Validity
Not Before: Apr 10 05:53:05 2026 GMT
Not After : Apr 9 05:58:05 2027 GMT
Subject: CN=E2F7A5E00AADC87BEE249D310A57816C77EB3B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d0:af:7e:76:ae:0a:e6:dc:cc:86:81:be:c6:
fb:20:3b:c0:09:b2:4b:26:2b:42:82:70:d0:59:d0:
5c:dc:10:68:df:1d:db:84:20:8b:f2:32:75:bf:01:
f5:f1:05:a3:52:5c:55:1a:f8:5d:cf:c7:dc:fe:e6:
f9:ab:c0:e9:06:a2:d3:9a:ba:51:e6:28:04:6f:5f:
1d:84:4a:d1:6c:b7:f3:9b:a9:8d:68:e7:94:8d:e6:
76:0f:08:20:9a:bb:f5:b0:dc:8b:ef:d8:23:de:85:
5d:86:16:05:f5:bc:ab:a3:35:0f:64:b8:48:17:7d:
dd:5e:66:46:01:49:dd:51:32:b5:9d:c1:be:d5:e2:
dc:6e:f5:5a:58:b3:19:64:9f:a3:17:6d:1c:b1:42:
f0:fa:96:74:5c:c4:55:27:f5:12:16:44:9c:6f:cf:
af:da:ab:54:8c:e2:84:2a:7e:4a:a5:4f:8d:23:3a:
6d:0f:f4:a8:77:ad:ef:8c:c2:f2:c5:63:41:b0:25:
2b:f0:74:ba:58:a2:83:f5:89:a1:bf:b8:e1:ca:81:
b6:c8:2d:8d:99:61:88:a4:7c:56:c5:28:9b:ae:e9:
d8:10:5c:10:95:55:50:0d:e6:60:80:65:7e:e9:e9:
aa:6a:35:82:0e:55:f7:d0:b9:cb:52:7b:f7:f7:77:
87:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F7:A5:E0:0A:AD:C8:7B:EE:24:9D:31:0A:57:81:6C:77:EB:3B:59
X509v3 Authority Key Identifier:
keyid:3D:42:6B:EA:44:C5:61:09:70:76:02:92:36:68:D4:0F:44:58:FB:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/3D426BEA44C56109707602923668D40F4458FBEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D426BEA44C56109707602923668D40F4458FBEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094808409447858179/0/34352e3235302e3138382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.188.0/22
Signature Algorithm: sha256WithRSAEncryption
52:cb:fd:1e:d3:7e:c1:8f:13:0f:06:5a:fe:48:02:bf:88:85:
42:be:35:a9:03:7d:0e:fc:12:39:fe:41:15:8c:5d:ca:2d:ea:
21:fd:37:15:5b:68:50:b4:17:bb:99:12:82:0f:18:4d:26:90:
34:a8:07:9a:30:3d:e4:39:78:d6:90:a3:42:a6:bc:1b:73:23:
37:26:26:6f:79:b7:c0:ad:eb:1e:46:d9:9f:4e:db:7b:87:9f:
16:ef:68:c9:73:ad:a3:de:fa:c5:11:60:76:0d:8b:2a:fa:83:
9f:56:9f:90:e1:07:02:ce:39:29:59:6a:96:cc:79:17:89:1d:
f4:9a:84:da:97:2f:18:6a:59:9e:21:1f:ce:6b:22:ac:3b:cb:
53:37:76:15:ba:92:ab:21:3b:d3:1b:60:c4:d7:d2:4f:35:bb:
a4:85:e4:98:dc:22:2e:7c:27:6b:b8:ca:13:16:4b:6b:8c:46:
cc:ab:63:ae:86:ee:59:cb:2d:d4:eb:fe:9c:20:3a:3c:8c:99:
24:16:4a:b2:09:42:33:70:50:99:9d:86:2f:ca:c1:13:83:26:
19:e5:bb:f5:23:ef:f9:9b:76:90:45:e0:92:c1:86:45:d2:62:
46:e1:c8:37:2c:ce:23:3c:6b:99:b2:e7:08:82:3d:7a:fb:5a:
b3:10:b8:61
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUZ1SMyiFG3frkKjSeniK33saz/q4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0
NDU4RkJFRjAeFw0yNjA0MTAwNTUzMDVaFw0yNzA0MDkwNTU4MDVaMDMxMTAvBgNV
BAMTKEUyRjdBNUUwMEFBREM4N0JFRTI0OUQzMTBBNTc4MTZDNzdFQjNCNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk0K9+dq4K5tzMhoG+xvsgO8AJ
sksmK0KCcNBZ0FzcEGjfHduEIIvyMnW/AfXxBaNSXFUa+F3Px9z+5vmrwOkGotOa
ulHmKARvXx2EStFst/ObqY1o55SN5nYPCCCau/Ww3Ivv2CPehV2GFgX1vKujNQ9k
uEgXfd1eZkYBSd1RMrWdwb7V4txu9VpYsxlkn6MXbRyxQvD6lnRcxFUn9RIWRJxv
z6/aq1SM4oQqfkqlT40jOm0P9Kh3re+MwvLFY0GwJSvwdLpYooP1iaG/uOHKgbbI
LY2ZYYikfFbFKJuu6dgQXBCVVVAN5mCAZX7p6apqNYIOVffQuctSe/f3d4dpAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU4vel4AqtyHvuJJ0xCleBbHfrO1kwHwYDVR0j
BBgwFoAUPUJr6kTFYQlwdgKSNmjUD0RY++8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgwODQwOTQ0Nzg1ODE3OS8wLzNENDI2QkVBNDRDNTYxMDk3MDc2MDI5MjM2NjhE
NDBGNDQ1OEZCRUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvM0Q0MjZCRUE0NEM1NjEwOTcwNzYwMjkyMzY2OEQ0MEY0NDU4RkJFRi5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk0ODA4NDA5NDQ3ODU4MTc5LzAvMzQzNTJlMzIzNTMw
MmUzMTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi36
vDANBgkqhkiG9w0BAQsFAAOCAQEAUsv9HtN+wY8TDwZa/kgCv4iFQr41qQN9DvwS
Of5BFYxdyi3qIf03FVtoULQXu5kSgg8YTSaQNKgHmjA95Dl41pCjQqa8G3MjNyYm
b3m3wK3rHkbZn07be4efFu9oyXOto976xRFgdg2LKvqDn1afkOEHAs45KVlqlsx5
F4kd9JqE2pcvGGpZniEfzmsirDvLUzd2FbqSqyE70xtgxNfSTzW7pIXkmNwiLnwn
a7jKExZLa4xGzKtjrobuWcst1Ov+nCA6PIyZJBZKsglCM3BQmZ2GL8rBE4MmGeW7
9SPv+Zt2kEXgksGGRdJiRuHINyzOIzxrmbLnCII9evtasxC4YQ==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:29 2026 by rpki-client