
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3234302e302f32322d3234203d3e203435303632.roa
File: 34352e3235332e3234302e302f32322d3234203d3e203435303632.roa (raw, json)
Hash identifier: pm04Van3pvZhD+VW/QdPwrcVp2j0dtUUN4a0e3+I/H0=
Subject key identifier: 8B:7A:38:33:E7:31:37:04:1D:37:D7:35:3D:3F:6C:62:97:D3:CB:20
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 18340A6969F462EE0474D8E7EF17A9E7E3F02FCF
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3234302e302f32322d3234203d3e203435303632.roa
Signing time: Fri 10 Apr 2026 05:56:01 +0000
ROA not before: Fri 10 Apr 2026 05:51:01 +0000
ROA not after: Fri 09 Apr 2027 05:56:01 +0000
asID: 45062
IP address blocks: 45.253.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:34:0a:69:69:f4:62:ee:04:74:d8:e7:ef:17:a9:e7:e3:f0:2f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 05:51:01 2026 GMT
Not After : Apr 9 05:56:01 2027 GMT
Subject: CN=8B7A3833E73137041D37D7353D3F6C6297D3CB20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:62:14:ab:63:6b:f4:4f:4b:c9:66:ee:0f:c9:
78:e1:86:be:29:26:ff:7b:49:7d:d8:67:e7:0b:11:
f4:a7:15:e4:63:98:ad:bc:ec:fa:d6:38:5b:f7:87:
0c:c7:26:00:cd:9a:e5:09:5c:f6:0b:15:2a:f1:c6:
67:11:c6:14:1b:0b:31:7b:3a:b8:e7:15:72:86:96:
68:6a:dc:36:9a:d5:72:fd:25:28:41:34:3c:92:fe:
b7:19:7f:c8:b4:96:6a:6f:5f:04:75:be:ef:6b:4a:
69:3a:a0:92:d0:5b:50:97:54:f8:b5:df:8d:24:e3:
bb:90:bf:07:1a:40:37:dc:8a:47:44:e3:9f:c6:1d:
24:f3:f5:6a:fe:0a:e8:1e:57:39:54:04:a7:62:c0:
cd:9b:d3:d9:a4:b4:a9:64:10:c7:29:93:0e:28:12:
5a:47:48:da:95:1a:bb:0e:52:de:40:17:2b:81:ca:
22:04:81:65:60:35:e7:27:a2:ac:43:dc:38:fd:85:
9e:10:97:1e:1b:d0:78:b2:a6:0f:8a:40:33:e4:f5:
d2:dc:3c:c1:52:b3:81:be:29:29:19:68:4c:ec:da:
45:18:00:0f:ac:66:41:99:97:c1:4a:c6:05:61:00:
c0:5f:1f:13:bc:4a:28:71:b1:16:8b:17:f3:42:92:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7A:38:33:E7:31:37:04:1D:37:D7:35:3D:3F:6C:62:97:D3:CB:20
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235332e3234302e302f32322d3234203d3e203435303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5d:25:4b:64:ce:91:6a:b4:01:e2:74:4c:41:8d:10:fe:52:
0b:1c:2b:8d:28:a3:f1:d6:60:f8:8e:dd:c8:ea:c2:65:a5:87:
e2:ae:99:61:db:83:f7:64:b8:8f:1d:bb:7d:3b:02:61:0d:38:
00:7e:b4:20:44:11:5a:ae:c0:cb:5d:f1:ab:cc:b1:8d:a7:9e:
25:34:a4:38:66:ed:9f:f7:ef:f2:71:c8:5e:04:d0:6b:09:0c:
9f:62:b8:c5:b8:10:7a:32:61:c0:0b:f4:a7:64:12:8e:d5:44:
fe:a8:62:e8:01:1b:63:29:93:3d:f0:ec:6f:88:fa:23:8b:6e:
5b:34:57:42:79:c2:0c:da:fa:93:f7:c9:b8:89:61:d1:fc:d4:
f5:cb:7c:28:ba:b2:37:a0:1f:72:ae:e9:ed:94:b6:0e:e9:84:
f5:8d:c0:1c:e9:0c:47:6b:de:e8:13:b0:d3:ec:72:fa:06:5b:
e8:d8:c8:3d:48:bf:7a:85:9e:8c:77:75:ee:89:97:f1:1c:d4:
54:6e:99:03:fc:c3:54:23:50:78:ed:e8:17:f2:48:8e:68:85:
bf:50:c2:7b:f5:1f:35:1d:a8:a1:c5:86:7a:52:f4:40:a6:ff:
c3:f1:e4:ca:02:cf:b8:1b:e6:1c:15:00:7b:a0:f8:b2:dc:c5:
22:51:c5:7c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:28 2026 by rpki-client