
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3233362e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3233362e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: FLyjEXsqvBcHdOlwXOBnn8dHmxmsT/7onUA9bTOlB0s=
Subject key identifier: 27:E0:E0:2C:84:E6:C4:33:07:2C:56:05:83:ED:2D:6C:98:89:D2:C2
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 4BB0420F8AB0F884847589E4D3506F31713A846D
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3233362e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:59:09 +0000
ROA not before: Fri 10 Apr 2026 05:54:09 +0000
ROA not after: Fri 09 Apr 2027 05:59:09 +0000
asID: 45062
IP address blocks: 45.253.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:b0:42:0f:8a:b0:f8:84:84:75:89:e4:d3:50:6f:31:71:3a:84:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:54:09 2026 GMT
Not After : Apr 9 05:59:09 2027 GMT
Subject: CN=27E0E02C84E6C433072C560583ED2D6C9889D2C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:a1:cf:0a:17:4f:b0:e2:bb:0a:6e:b6:36:
73:6e:82:6a:85:ce:f3:c4:4b:ca:7f:58:56:0e:92:
e2:d3:20:c9:6d:71:e7:9a:e5:52:bd:08:2d:b5:7c:
59:9b:d3:db:29:fe:5d:1a:05:a4:a0:39:e5:5e:18:
ed:fe:df:93:93:e0:3a:67:d8:3a:69:f2:32:62:3a:
31:86:09:a4:d7:51:4f:3e:ac:ef:b1:12:58:dd:6a:
14:fc:26:34:e1:30:64:a8:fb:99:ff:f6:38:e1:c9:
92:16:5d:8e:47:ed:83:e9:fc:fe:02:90:69:a0:7d:
88:ad:73:18:c7:5f:87:ae:67:4b:3c:d9:20:89:55:
99:28:01:4f:68:84:cc:20:74:ea:8c:42:93:e3:ca:
41:c4:66:99:64:5f:2d:62:88:2a:1b:c0:de:af:8c:
76:9c:1b:b1:f8:5a:00:a9:82:af:a7:f6:b0:63:c3:
21:f3:a2:09:32:6a:92:fa:b5:49:dd:b1:cd:10:ec:
11:d0:0a:4f:5b:e0:c2:53:72:a8:a4:49:18:b8:0e:
71:a8:d2:ac:6a:84:ff:99:18:20:61:d5:09:a6:57:
5a:8e:63:00:b9:e7:bd:3a:78:c3:1c:2e:b1:e4:61:
18:f2:3c:fe:77:27:77:12:74:bc:82:d5:93:65:91:
7b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E0:E0:2C:84:E6:C4:33:07:2C:56:05:83:ED:2D:6C:98:89:D2:C2
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3233362e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.236.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:a5:85:5b:77:1c:7e:38:ca:36:40:89:86:59:e8:37:13:93:
3c:a1:60:28:7d:64:7a:3e:f0:81:4e:b0:8f:75:f6:c3:8b:93:
1a:cc:5c:b2:ee:99:67:77:c4:7e:c9:46:92:03:7e:49:36:3d:
79:1e:04:f0:e1:ec:56:5a:46:77:8d:c1:70:59:33:ab:fa:1e:
ca:ce:f1:e1:67:fd:9b:c7:06:cf:bd:56:41:c1:25:1b:e7:97:
a5:5a:21:c4:d7:5c:92:d7:dc:d7:66:d4:c0:19:77:f5:17:c5:
b3:01:90:27:a9:cb:cf:07:28:c3:dc:4c:ed:b2:70:7c:51:05:
6a:4c:18:c0:57:2c:14:ab:8e:40:3f:8a:43:20:c5:b7:e6:7a:
5e:25:a9:f8:55:27:ee:cd:54:49:6b:e5:b3:6d:da:68:5d:b7:
dc:e4:b7:1f:f2:e1:fa:54:fe:55:35:1c:22:b0:03:fc:50:82:
5d:57:c0:5c:51:67:48:29:6d:25:6e:a8:49:2d:99:41:ce:b9:
51:06:26:7c:05:e3:46:28:68:33:59:f8:9f:ba:e1:6c:54:7b:
a7:55:ac:99:60:7d:7e:c1:5f:f9:4b:46:d5:bc:a1:f9:1b:2c:
44:78:e1:53:f5:33:75:bd:de:d3:33:33:88:3e:d6:f0:46:7a:
f3:41:08:b2
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 15:21:50 2026 by rpki-client