
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139322e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3139322e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: RbItHc99HKwQUzeQ6YI1roX4k+jiNvnJ0Oq7eXIHd18=
Subject key identifier: 92:17:56:99:D1:5B:60:16:8C:DB:92:94:DE:D9:E3:A8:05:58:78:87
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 0D0C0580AE7B9FE56DD1BC305EF66CE09A68D65B
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139322e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:59:08 +0000
ROA not before: Fri 10 Apr 2026 05:54:08 +0000
ROA not after: Fri 09 Apr 2027 05:59:08 +0000
asID: 45062
IP address blocks: 45.253.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:0c:05:80:ae:7b:9f:e5:6d:d1:bc:30:5e:f6:6c:e0:9a:68:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:54:08 2026 GMT
Not After : Apr 9 05:59:08 2027 GMT
Subject: CN=92175699D15B60168CDB9294DED9E3A805587887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4f:83:cb:34:b5:d0:fe:da:5a:22:14:13:3e:
a5:ef:6d:4a:bd:2f:d1:4e:e9:18:2f:98:33:d7:70:
eb:7d:28:a6:d1:3f:25:bd:50:49:71:fb:11:dc:96:
7f:32:66:cd:53:93:a7:a8:42:f5:c8:f4:44:8f:ae:
02:ac:22:29:32:b1:79:7d:93:3c:99:d2:0f:85:01:
e5:98:fd:95:31:d4:bd:e4:f3:37:33:2c:6a:77:19:
64:f4:1f:ba:f7:58:9a:79:85:c2:c6:c9:34:4c:1d:
ef:6e:07:0a:03:66:1b:a9:3f:04:ad:e6:da:30:19:
29:31:68:c0:55:d9:da:52:0f:e7:57:cb:bd:8e:48:
31:dd:86:57:33:cb:59:37:44:a9:d6:74:4f:cf:d7:
ee:60:ea:e2:ba:67:86:8a:ed:39:33:c9:8d:a5:e3:
81:6b:fe:37:64:f5:2b:ac:d8:99:8f:fa:6c:96:81:
05:8c:d2:f6:b9:24:10:3e:3c:5a:87:b7:67:62:80:
15:dd:95:ac:f3:c1:c9:a2:a9:61:93:00:78:a7:ba:
31:39:72:7b:77:61:2b:7e:e9:50:94:28:b3:7c:18:
bf:e0:05:d3:00:00:0e:2e:63:44:49:bd:f7:00:dc:
35:a6:ff:f2:cd:61:ef:78:d1:3b:af:24:2f:69:07:
d3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:56:99:D1:5B:60:16:8C:DB:92:94:DE:D9:E3:A8:05:58:78:87
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139322e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.192.0/22
Signature Algorithm: sha256WithRSAEncryption
86:cf:b5:26:f7:2c:fb:e0:81:1e:f7:3e:f7:8f:d3:d6:2d:49:
c3:99:64:59:87:fa:45:09:4f:ec:a2:eb:78:92:e1:b8:c9:b2:
57:28:cc:65:6d:2b:0d:e0:19:85:44:1b:96:5a:d3:ce:e0:bb:
34:71:3c:5b:c7:6e:fe:14:fd:76:19:1a:8f:c8:49:eb:d6:f8:
d2:fe:91:87:4b:41:3a:5a:ae:72:df:71:b5:5c:63:e7:ac:fd:
a5:f6:a5:2d:ad:2e:0e:aa:07:74:76:45:66:d2:2c:32:e4:17:
62:38:72:7c:9e:bc:8e:02:c6:98:6b:ef:de:59:b2:c9:55:c4:
39:02:1b:f6:dd:7b:96:5f:aa:f4:ee:1e:55:0f:9c:38:8b:92:
b1:e8:90:a3:77:a8:66:18:d1:cf:4a:ca:e8:4c:dd:59:56:3a:
e0:87:9c:34:c9:a2:74:5c:e0:16:6a:9b:93:19:4d:78:0f:df:
4d:fe:bb:64:d4:57:ed:1f:09:17:bb:bc:8f:02:87:24:ce:2a:
0d:b9:1e:d6:b0:25:f1:0a:55:c8:f1:db:38:42:81:8c:7c:85:
06:47:56:39:22:0d:ce:16:01:26:3f:4f:cf:36:a3:ef:5b:4f:
6b:c6:dd:54:0e:42:e0:76:f7:50:67:53:23:ab:45:39:5d:3a:
fe:b4:0a:df
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:27 2026 by rpki-client