
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3130382e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3130382e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: HnbASdQbTRrD2KaPp2Kgw6UPfnpl6Jgfj19mhAToOCA=
Subject key identifier: D7:AC:2C:68:26:FE:02:41:95:F2:A3:64:F1:78:E2:11:BD:5D:1C:7D
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 34DE9606A52BA34557CA9FE37EA141C3E3F49CD3
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3130382e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:49:15 +0000
ROA not before: Fri 10 Apr 2026 05:44:15 +0000
ROA not after: Fri 09 Apr 2027 05:49:15 +0000
asID: 45062
IP address blocks: 45.253.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:de:96:06:a5:2b:a3:45:57:ca:9f:e3:7e:a1:41:c3:e3:f4:9c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:44:15 2026 GMT
Not After : Apr 9 05:49:15 2027 GMT
Subject: CN=D7AC2C6826FE024195F2A364F178E211BD5D1C7D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:73:f6:52:b5:58:af:bf:42:e9:3c:00:ca:b0:
f7:0c:75:74:42:e0:a2:77:b7:ae:fa:b3:07:9b:c5:
70:12:57:de:b1:c8:3a:63:64:bb:45:53:c9:53:a8:
48:61:14:ae:d9:ce:f8:be:ed:73:60:26:55:3e:55:
71:9b:b3:0e:64:59:b1:f0:7f:37:03:48:45:e3:a1:
32:0b:d8:5f:f5:dd:cc:29:5d:03:2a:8a:57:f0:55:
9e:fa:48:c8:1b:78:1d:55:57:d2:e5:a5:e0:0b:45:
1d:73:ec:a3:a7:13:14:33:58:2b:3c:b9:12:ca:3d:
58:17:5e:91:10:62:87:34:cd:bb:05:ac:33:87:0d:
8d:0b:79:a8:67:84:4b:64:ee:fd:49:88:55:54:89:
6f:90:bb:5e:df:1b:3d:2d:3d:e7:7c:b5:bb:8d:2f:
28:63:91:2d:0b:cf:b5:3b:26:cb:c6:e5:84:bb:62:
19:38:35:17:55:02:46:9e:b9:9a:20:2b:9b:62:ab:
f6:5b:9f:36:cd:af:1a:27:fd:fa:9a:ca:a7:79:2c:
4e:66:08:25:be:e4:75:65:a4:6a:8d:bc:d8:d4:ab:
27:b9:33:44:5e:22:82:b9:6f:3b:fe:5d:84:09:43:
8c:55:ea:fd:ff:2e:c2:7a:37:63:19:fa:ae:15:85:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AC:2C:68:26:FE:02:41:95:F2:A3:64:F1:78:E2:11:BD:5D:1C:7D
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3130382e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.108.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:61:79:da:f6:d8:34:fc:56:ff:bf:95:e6:58:6f:99:14:06:
84:02:40:76:2a:45:27:d7:f3:a3:fd:3b:84:bf:ab:63:d5:0f:
ab:35:cf:dd:d1:39:46:1d:03:21:a8:2b:3f:d9:5e:f4:e0:9f:
75:72:74:3b:94:b3:0c:4e:42:5b:1c:66:0f:4d:cd:92:03:bc:
a5:a3:b8:db:e5:e2:80:5b:6a:f2:b9:7e:f0:79:0f:0c:47:f6:
96:3c:20:6d:12:18:40:6d:21:18:37:07:e0:59:d0:88:82:b7:
f8:ea:6e:2c:22:53:9c:2d:f2:af:3e:9b:7a:97:76:6b:99:4f:
30:f8:6f:2b:b6:9e:1e:5a:7f:58:80:3a:24:5b:b9:36:ca:23:
0b:3c:34:94:b4:aa:ff:50:9b:fd:f5:8d:30:ff:34:fe:bf:50:
c9:d8:22:83:89:c4:f9:bd:3b:a2:48:80:b0:27:4e:08:41:d0:
6c:61:ba:f4:d8:79:a7:05:94:83:28:37:bb:bc:77:4d:40:ce:
2e:91:31:f2:da:c4:f5:98:9e:e9:e7:ed:ca:10:f2:93:43:17:
65:99:d5:fc:40:d4:42:75:eb:3a:47:07:21:18:3e:be:6e:23:
88:5c:35:c6:37:a8:56:8d:c1:a0:e9:e4:27:d9:9b:97:70:66:
54:8b:b2:da
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUNN6WBqUro0VXyp/jfqFBw+P0nNMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0
MkNFMDBFNjAeFw0yNjA0MTAwNTQ0MTVaFw0yNzA0MDkwNTQ5MTVaMDMxMTAvBgNV
BAMTKEQ3QUMyQzY4MjZGRTAyNDE5NUYyQTM2NEYxNzhFMjExQkQ1RDFDN0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuc/ZStVivv0LpPADKsPcMdXRC
4KJ3t676swebxXASV96xyDpjZLtFU8lTqEhhFK7Zzvi+7XNgJlU+VXGbsw5kWbHw
fzcDSEXjoTIL2F/13cwpXQMqilfwVZ76SMgbeB1VV9LlpeALRR1z7KOnExQzWCs8
uRLKPVgXXpEQYoc0zbsFrDOHDY0LeahnhEtk7v1JiFVUiW+Qu17fGz0tPed8tbuN
LyhjkS0Lz7U7JsvG5YS7Yhk4NRdVAkaeuZogK5tiq/ZbnzbNrxon/fqayqd5LE5m
CCW+5HVlpGqNvNjUqye5M0ReIoK5bzv+XYQJQ4xV6v3/LsJ6N2MZ+q4VhYZXAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQU16wsaCb+AkGV8qNk8XjiEb1dHH0wHwYDVR0j
BBgwFoAUN5Rn2fnS2/7+uAlXVQBO3ULOAOYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NDgxOTUyNzkxMDIyNzk3MS8wLzM3OTQ2N0Q5RjlEMkRCRkVGRUI4MDk1NzU1MDA0
RURENDJDRTAwRTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzc5NDY3RDlGOUQyREJGRUZFQjgwOTU3NTUwMDRFREQ0MkNFMDBFNi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NDgxOTUyNzkxMDIyNzk3MS8wLzM0MzUyZTMyMzUz
MzJlMzEzMDM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzQzNTMwMzYzMi5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAi39bDANBgkqhkiG9w0BAQsFAAOCAQEAD2F52vbYNPxW/7+V5lhvmRQG
hAJAdipFJ9fzo/07hL+rY9UPqzXP3dE5Rh0DIagrP9le9OCfdXJ0O5SzDE5CWxxm
D03NkgO8paO42+XigFtq8rl+8HkPDEf2ljwgbRIYQG0hGDcH4FnQiIK3+OpuLCJT
nC3yrz6bepd2a5lPMPhvK7aeHlp/WIA6JFu5NsojCzw0lLSq/1Cb/fWNMP80/r9Q
ydgig4nE+b07okiAsCdOCEHQbGG69Nh5pwWUgyg3u7x3TUDOLpEx8trE9Zie6eft
yhDyk0MXZZnV/EDUQnXrOkcHIRg+vm4jiFw1xjeoVo3BoOnkJ9mbl3BmVIuy2g==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:26 2026 by rpki-client