
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3133362e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3133362e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: JTLdq1HbtvoUV3xzCITCfflM6g7HA5rNotyiVvCTMTY=
Subject key identifier: D6:66:FB:0E:C1:7D:30:2F:EC:E3:23:4B:7E:48:14:15:C5:D8:DF:0C
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 7F888AFF796BF952E888A8E90A17DB694BC5C534
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3133362e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:49:15 +0000
ROA not before: Fri 10 Apr 2026 05:44:15 +0000
ROA not after: Fri 09 Apr 2027 05:49:15 +0000
asID: 45062
IP address blocks: 45.253.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:88:8a:ff:79:6b:f9:52:e8:88:a8:e9:0a:17:db:69:4b:c5:c5:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:44:15 2026 GMT
Not After : Apr 9 05:49:15 2027 GMT
Subject: CN=D666FB0EC17D302FECE3234B7E481415C5D8DF0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:09:e4:24:c7:a6:25:b4:e8:79:0e:d0:74:95:
46:bf:da:e5:7e:36:60:0b:83:fa:4d:5f:77:b4:38:
91:4e:db:1f:d6:cb:93:32:f1:0a:41:7d:99:70:d3:
1b:bd:a8:70:b2:df:c7:6f:a2:a0:b8:eb:8e:5c:8b:
ef:03:79:ae:d9:ed:f0:5d:62:a6:3c:c1:39:7d:f3:
d8:b1:94:97:b4:15:1f:4d:64:aa:3f:ef:71:96:c1:
66:21:b2:a1:c4:66:7f:72:dc:33:78:0a:ee:2a:d8:
76:c1:c0:02:6a:a2:89:7a:85:cc:77:62:9a:5d:7c:
8c:b0:67:be:a0:68:0e:ea:87:7e:c9:24:41:d1:45:
31:ac:d4:52:83:54:1b:95:13:a7:79:42:90:4f:1b:
a2:32:41:54:24:f7:61:0c:db:b2:e4:8b:9e:f3:a4:
15:19:b1:5b:db:70:a7:c3:e9:0b:94:1e:52:4e:31:
1d:70:80:98:99:3f:90:ca:c9:ac:90:20:e5:92:ae:
a7:45:c7:aa:cd:d7:87:49:b8:91:76:fd:9c:ce:da:
ec:b6:45:1b:b5:91:f6:29:5b:5c:50:74:d4:6c:60:
58:4a:4d:8c:7d:d2:8c:7a:fd:35:54:05:18:62:86:
fa:43:53:8a:4a:84:bf:85:1e:d1:b1:c5:b8:3b:6e:
07:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:66:FB:0E:C1:7D:30:2F:EC:E3:23:4B:7E:48:14:15:C5:D8:DF:0C
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3133362e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.136.0/22
Signature Algorithm: sha256WithRSAEncryption
34:cb:45:51:0d:47:81:6b:af:22:b4:de:a7:5d:03:e6:7d:73:
82:d7:be:5d:43:7e:7f:99:41:c7:30:a6:9d:6e:17:24:64:a6:
07:47:81:bd:a1:04:17:58:d3:e9:2b:21:05:4e:f9:3f:ac:0d:
0b:bd:60:7f:d4:2c:28:8f:ce:98:cc:bb:e1:8b:29:58:13:82:
98:21:12:92:30:0d:b2:92:ab:4c:7b:49:12:d9:78:de:27:9f:
9d:3a:ae:95:f3:78:05:ec:5b:e5:00:47:9a:da:73:d8:78:40:
45:df:ac:72:d1:25:b4:dd:e6:13:ba:e1:28:54:1b:8a:83:ee:
1a:65:a1:6f:c5:19:ae:7f:43:e0:c0:5a:29:8b:b6:77:0c:5e:
1a:30:91:6b:6b:a0:94:ba:1d:86:a5:c6:44:8c:ea:5d:57:43:
c5:00:00:75:ea:a3:c3:67:b2:e1:c7:55:9a:89:6a:35:59:32:
ea:01:8e:3e:76:13:0a:83:22:75:56:15:0d:fe:fc:40:d1:fc:
d2:70:46:59:1d:49:99:65:f8:11:ad:55:af:02:27:7f:6e:3b:
5b:de:f6:f9:aa:40:2e:78:e9:93:d7:fb:85:00:df:e8:54:94:
9d:a0:8b:be:1c:0a:57:ef:b1:08:8c:61:8e:03:5f:a8:aa:ec:
73:42:3b:f4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:53:34 2026 by rpki-client