
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3138342e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3138342e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: YV99Gn5Rh+gJETwMVk4KsCkTm47C8G7B6wn/deTfM7E=
Subject key identifier: 11:D1:4A:D3:AB:B0:87:04:C5:B1:7C:4C:68:BF:AE:38:AB:D5:D8:1D
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 32A73A90B3FDFC65DA33B1E2EA55A7BAF0E615C6
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3138342e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:52:56 +0000
ROA not before: Fri 10 Apr 2026 05:47:56 +0000
ROA not after: Fri 09 Apr 2027 05:52:56 +0000
asID: 45062
IP address blocks: 45.253.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:a7:3a:90:b3:fd:fc:65:da:33:b1:e2:ea:55:a7:ba:f0:e6:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:47:56 2026 GMT
Not After : Apr 9 05:52:56 2027 GMT
Subject: CN=11D14AD3ABB08704C5B17C4C68BFAE38ABD5D81D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:b9:a4:9b:68:14:00:a6:fb:3e:f4:4c:4e:
8b:c1:4a:5b:8d:04:07:a6:e3:17:e2:a7:3a:89:30:
67:26:12:a1:87:a9:75:a6:29:24:2d:4f:ee:90:9d:
8e:a5:33:9d:1b:10:f6:85:50:78:18:79:4f:e4:d4:
4e:ac:34:f0:c8:e4:d9:9a:9a:3e:5d:ea:19:cd:da:
44:f2:80:46:86:f9:c5:08:89:6a:8a:eb:13:19:60:
1d:58:30:10:ef:1a:17:30:f5:ff:56:06:25:ea:e8:
5f:31:25:07:7d:ad:e0:64:32:3c:ce:be:be:dd:b5:
67:9c:6c:e4:47:c6:e0:64:c8:a2:c6:e6:d6:9e:57:
d5:16:50:46:a9:a6:49:25:aa:4a:37:e2:eb:5e:f5:
4b:d3:81:76:3e:d7:25:de:af:e4:d7:c1:18:f6:41:
25:3d:42:df:7d:1e:06:fd:74:aa:0d:16:f8:f8:48:
11:61:61:98:43:64:c5:c5:83:c0:5c:af:bf:e8:9c:
5d:e5:ae:9f:98:86:59:4b:c8:e5:af:a9:2a:5e:27:
51:8b:17:93:6c:31:79:67:4e:54:84:f8:af:a5:29:
f5:1f:67:6f:7b:28:71:98:d2:6e:65:99:33:0b:24:
1f:b7:1d:62:a4:1c:89:1c:cb:4a:d1:d4:2d:aa:a2:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D1:4A:D3:AB:B0:87:04:C5:B1:7C:4C:68:BF:AE:38:AB:D5:D8:1D
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3138342e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.184.0/22
Signature Algorithm: sha256WithRSAEncryption
12:0c:cd:4a:ee:4f:10:4b:97:71:da:0e:b6:26:14:10:81:77:
f8:18:50:c4:22:ff:56:86:17:80:09:dc:34:1a:4b:c8:a9:84:
d8:6d:4d:0a:97:a3:40:82:e8:8f:2b:53:3f:47:74:44:c2:81:
e8:8c:a9:bf:c7:22:f9:29:c0:8a:d1:f0:05:b2:93:c2:31:35:
9a:ca:83:77:fb:fb:e5:07:d3:c8:3e:2a:d8:35:01:76:48:df:
04:01:21:61:57:1a:9f:b8:12:a3:bc:6e:1d:ee:9e:2c:fb:fa:
05:d7:b4:10:ea:4c:f1:48:96:35:31:2d:40:ab:d5:a0:97:11:
27:86:e0:12:e0:47:e2:5f:b3:42:d7:22:82:7d:e3:7a:1d:a3:
b1:3c:35:ba:4c:bc:ef:b1:ec:6a:54:d3:90:bc:d9:08:7e:5c:
13:13:61:20:f8:d9:73:ab:24:81:6c:a8:7e:77:33:b3:81:0f:
82:36:46:24:5d:2e:d4:15:be:ef:82:b9:08:bd:d2:d6:42:91:
44:b7:b6:96:d0:b2:bf:66:78:e0:e4:30:e0:66:a9:c4:97:3c:
ca:5c:b5:59:38:a8:b8:3d:3e:b5:77:36:59:fc:49:b7:ba:21:
84:ec:b6:02:ca:bd:3d:6e:1e:ea:0c:72:1a:f6:ed:9c:00:3b:
ab:98:93:60
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:25 2026 by rpki-client