
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3137322e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3137322e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: mPS4bY2qScbYc49ApSyWidLurLHVqsFUJChnVKOyc5c=
Subject key identifier: 02:AB:26:E6:35:34:23:72:E1:71:EE:62:98:6D:6C:F8:73:8F:23:F7
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 61A807093E4134F18626B94BD611EEF1BF9413AF
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3137322e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:56:00 +0000
ROA not before: Fri 10 Apr 2026 05:51:00 +0000
ROA not after: Fri 09 Apr 2027 05:56:00 +0000
asID: 45062
IP address blocks: 45.253.172.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a8:07:09:3e:41:34:f1:86:26:b9:4b:d6:11:ee:f1:bf:94:13:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:51:00 2026 GMT
Not After : Apr 9 05:56:00 2027 GMT
Subject: CN=02AB26E635342372E171EE62986D6CF8738F23F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8f:b5:50:78:98:76:d7:8e:f3:96:aa:11:58:
b3:47:41:34:e1:a9:b4:24:1e:24:6b:a3:f9:eb:0b:
16:8f:2f:d1:fb:b6:f3:f4:e9:87:3c:cd:f5:e6:02:
0d:11:ce:da:f3:9f:dc:95:f1:ed:1d:9d:f1:2d:85:
c6:57:96:12:25:f0:35:45:2a:3e:87:5f:79:4e:8c:
cd:8e:a5:ba:0a:fe:e1:39:c1:e1:49:0e:89:85:08:
71:62:8b:68:d4:c5:02:af:b3:f4:44:f2:ee:3e:ac:
0f:6a:79:c6:e2:d1:b6:ab:32:b2:2b:d4:76:b6:7f:
fc:db:fe:db:c9:ba:06:85:6d:62:7c:b9:c6:2b:bf:
a3:08:cf:ed:0f:b3:88:de:97:9c:75:6f:8d:46:d2:
86:dd:fc:87:38:bd:ba:9f:d1:85:54:86:05:65:7f:
17:80:62:5d:53:90:8d:08:55:7d:f2:06:40:68:b0:
8b:07:37:a0:b0:aa:97:41:d1:7b:0b:76:da:1e:4c:
d4:36:9f:10:c4:a3:5c:05:a6:57:be:5f:ed:5f:82:
6a:c9:55:20:68:0a:a4:1e:ed:e6:da:45:4a:93:db:
8d:7e:f2:92:fd:6d:b2:4d:10:94:ec:a9:80:f9:5f:
bf:89:fd:47:09:27:0d:02:62:95:05:55:57:90:2b:
bd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:AB:26:E6:35:34:23:72:E1:71:EE:62:98:6D:6C:F8:73:8F:23:F7
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3137322e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.172.0/22
Signature Algorithm: sha256WithRSAEncryption
1d:01:0a:de:31:b4:0a:f2:83:02:ee:66:1b:ac:0a:2e:a7:3d:
d6:a4:70:57:66:56:79:f8:9d:a2:d0:78:9d:ec:4a:f0:f6:9d:
8d:a4:d0:9b:25:1c:05:e8:f6:c0:e2:08:db:22:a0:1a:0f:56:
46:f4:6c:36:9a:b2:a9:5f:60:65:ea:5d:ec:f7:24:85:49:f2:
ea:89:5b:2a:80:c7:ea:4c:90:ad:a9:fd:9a:fd:f8:44:41:87:
84:3f:81:d2:ff:86:07:3f:1b:3a:1f:f3:e3:d4:49:35:40:0a:
3c:42:5c:07:6c:50:05:32:62:11:5d:2e:f8:1f:46:ba:31:84:
79:5a:7f:1f:eb:bd:af:b9:79:4d:66:e0:43:f0:a2:9e:3f:d2:
ae:d8:06:35:73:de:2c:2e:63:20:aa:ff:22:28:c5:6c:d0:ff:
b9:94:d9:4f:aa:6b:d6:51:c4:65:1f:4c:4b:ac:53:ef:31:84:
fe:cb:5d:29:ab:eb:fb:da:92:5a:a6:2f:cd:b5:fb:69:00:f6:
fe:7d:70:3d:c5:64:af:16:b3:a7:22:fa:f4:61:18:86:b9:94:
8f:76:66:0e:9c:8e:77:29:1f:34:eb:d0:0b:4e:4e:15:ab:a2:
d4:e9:d6:37:61:45:9a:25:49:d9:70:e6:df:0d:d6:93:3f:9e:
84:6c:70:72
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:20:54 2026 by rpki-client