
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139362e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3139362e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: a/qvthkhE4/cqRib1SC35X4JCt46BJuvwhyQXM1qXig=
Subject key identifier: 82:C0:43:0F:FB:41:26:67:BE:FA:5C:2C:46:24:20:E3:BA:01:C5:11
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 287370AE7825DA52C1EC24ECCFF943687B45D029
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139362e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:56:00 +0000
ROA not before: Fri 10 Apr 2026 05:51:00 +0000
ROA not after: Fri 09 Apr 2027 05:56:00 +0000
asID: 45062
IP address blocks: 45.253.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:73:70:ae:78:25:da:52:c1:ec:24:ec:cf:f9:43:68:7b:45:d0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:51:00 2026 GMT
Not After : Apr 9 05:56:00 2027 GMT
Subject: CN=82C0430FFB412667BEFA5C2C462420E3BA01C511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7d:19:7f:24:a6:ca:a0:09:82:ae:68:e7:a6:
e3:f3:99:7f:40:5a:36:bc:66:d2:76:4f:a0:58:f8:
a9:f7:32:69:54:c1:ae:23:a2:8b:89:2a:cb:d9:7a:
1e:32:f0:14:34:73:68:bd:a4:5d:4f:ec:c9:18:ae:
4b:0c:b7:d8:9b:34:77:a3:4f:1d:44:d3:47:b1:95:
75:aa:bd:8c:2b:21:a9:66:a0:96:b6:59:d2:b8:cb:
35:59:78:b2:0e:43:64:f4:04:cc:6a:1d:e3:07:f8:
b1:ac:e0:6f:0b:10:26:f0:dd:1e:40:fc:0c:53:f8:
ad:58:05:97:3e:52:c1:5a:a4:d0:e1:00:d2:cd:f3:
a6:b7:cb:b0:97:78:ae:5f:d9:c7:9b:56:98:25:ec:
c5:1c:da:34:18:1a:02:0c:7a:55:39:15:50:4a:0f:
8c:83:ec:53:ed:d6:39:c1:06:56:0f:ca:2f:2d:c5:
c7:1c:85:8c:0e:17:04:a3:d0:85:ac:ce:13:26:4b:
9d:28:7f:1b:29:92:75:35:d1:cd:7f:34:24:a0:02:
04:27:4c:25:b4:3d:25:05:7e:02:1e:c6:90:cf:7d:
d8:db:5e:f1:dc:e9:85:7c:54:9e:73:31:59:da:a8:
25:4f:c7:ec:2b:d0:cd:6f:ec:98:ed:e2:6a:32:32:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C0:43:0F:FB:41:26:67:BE:FA:5C:2C:46:24:20:E3:BA:01:C5:11
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3139362e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.196.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:bb:28:91:d8:e4:df:3f:27:96:8e:4c:ed:b6:10:3d:56:0b:
b4:6f:16:66:39:1a:14:65:df:de:b0:46:22:8d:cb:5d:86:3f:
ee:dc:60:5c:5f:01:29:16:07:cf:7b:e4:39:9c:8d:60:b1:b4:
ab:30:64:44:8d:41:da:6b:88:ed:8b:ab:58:12:58:15:44:6c:
a9:f0:51:dd:50:05:c2:32:4a:fc:ce:38:3b:ee:13:2d:2f:8a:
49:48:6a:cc:a4:e8:fc:40:85:a8:08:35:61:dd:2a:b6:c7:2c:
90:ab:27:0a:b7:cd:d3:fc:6e:90:90:63:5f:6d:17:cc:ff:12:
81:ef:d5:85:e8:ce:62:72:8a:38:99:b6:3a:09:3f:60:96:3e:
b9:78:b5:59:9e:35:c1:a6:08:ca:1e:25:8f:92:58:0f:b0:6a:
0a:8d:3f:9f:1a:47:78:cb:09:37:9f:66:73:5e:9b:dd:bc:19:
04:79:7f:1a:7e:8b:54:f1:02:03:e2:f6:bb:d7:83:d2:4f:e1:
a3:ad:bf:7c:89:d6:3a:99:53:20:ee:33:9a:81:75:22:51:71:
3d:b4:af:3a:87:6d:5b:c0:5e:e1:ee:90:bc:a1:64:4d:0d:d5:
75:bf:90:bb:37:e1:57:41:6d:a6:f9:64:c2:1a:e0:44:59:04:
5b:77:c9:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:56:15 2026 by rpki-client