
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36342e302f32322d3234203d3e203233373234.roa
File: 34352e3235342e36342e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier: DTyIYZUKa3sAK2XzqcW1WitCGqp1Q8920WO7aVnwM6I=
Subject key identifier: 1A:49:6E:99:A9:4E:40:6E:0A:60:07:A8:43:B8:07:A0:ED:8D:67:95
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 61381BF3ABB04EA15559FB42076107D0A3E0954A
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36342e302f32322d3234203d3e203233373234.roa
Signing time: Fri 10 Apr 2026 06:07:17 +0000
ROA not before: Fri 10 Apr 2026 06:02:17 +0000
ROA not after: Fri 09 Apr 2027 06:07:17 +0000
asID: 23724
IP address blocks: 45.254.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:38:1b:f3:ab:b0:4e:a1:55:59:fb:42:07:61:07:d0:a3:e0:95:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 06:02:17 2026 GMT
Not After : Apr 9 06:07:17 2027 GMT
Subject: CN=1A496E99A94E406E0A6007A843B807A0ED8D6795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:45:ce:60:41:7a:42:08:9f:fd:5c:31:5a:d9:
9e:7e:c1:af:45:63:33:17:d9:bc:0f:73:cf:11:3d:
be:40:45:c7:20:d4:d4:1f:98:5f:54:12:80:d3:0f:
c8:04:17:c6:d6:c0:23:b4:b6:a1:75:4a:a7:65:26:
d8:ba:da:e4:ad:17:e0:a0:27:16:6d:d9:b1:0c:fd:
6a:20:a2:53:bf:db:25:5d:aa:0f:86:9b:2c:19:a3:
57:54:d2:e4:35:c0:20:ed:75:9a:cd:60:d9:e2:12:
5b:a2:de:87:29:60:a2:5e:fd:e7:28:3c:cd:dc:70:
dd:6e:48:fe:d8:e9:b9:15:5e:03:90:35:4f:bb:59:
cf:ad:61:90:91:76:57:3e:8e:fd:57:ef:46:d1:cf:
63:81:92:ce:6d:bc:04:37:07:0f:55:ad:6a:74:31:
36:6c:c1:de:a5:c8:7a:7a:67:11:ae:de:dc:43:9e:
15:c1:1e:84:3b:38:22:f6:28:22:d7:9f:80:f0:63:
bf:ba:2f:96:f8:eb:ae:8d:e3:00:1c:fe:84:13:af:
9a:e7:66:37:28:27:82:b3:aa:cb:e8:80:a8:ca:a2:
53:80:84:a4:0a:10:20:9a:1f:95:1a:0e:55:11:39:
b9:13:33:78:cc:fc:6c:52:07:a7:7c:c9:e8:d8:af:
5e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:49:6E:99:A9:4E:40:6E:0A:60:07:A8:43:B8:07:A0:ED:8D:67:95
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e36342e302f32322d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.254.64.0/22
Signature Algorithm: sha256WithRSAEncryption
64:6f:04:ff:6f:31:2c:ac:20:b8:28:73:2c:36:d2:67:a4:8f:
5a:7f:88:94:ac:2d:f0:65:3f:1e:41:1a:6d:11:b1:54:ce:77:
5b:b9:cf:cb:5c:a9:dc:e5:d1:a7:26:a2:f6:00:71:07:2e:b4:
72:f2:73:7c:85:27:5e:8c:b2:7a:5c:53:11:77:5b:12:ef:da:
b6:c9:39:a2:99:85:7b:22:32:84:e5:50:3d:89:df:09:22:62:
76:de:52:24:46:e5:9e:c9:ec:92:89:0f:ee:e3:1e:7a:7b:57:
65:26:05:4e:36:f7:94:f0:fc:18:67:26:1e:08:9a:dc:aa:da:
e2:ac:68:4e:e2:c6:e3:ba:2d:ca:f1:9f:23:ae:a1:77:13:67:
7c:1a:fb:ab:2e:d0:cf:01:93:9b:c1:85:15:11:3e:20:ac:71:
db:e3:d0:92:68:51:64:8d:7d:a0:57:df:30:19:d4:81:88:02:
e1:f3:90:14:ef:8b:13:51:41:4d:e5:cb:4c:35:ad:c6:95:76:
b0:ba:c3:5f:84:5f:c5:c8:e3:67:7b:76:6b:4c:92:c2:ed:25:
15:b4:68:8a:a5:a6:43:cf:ea:4a:85:fe:20:b4:9a:d6:95:96:
a6:0a:fa:30:82:bb:de:b9:42:6e:10:20:0d:3d:4c:72:3b:e1:
78:c9:a6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 13:54:25 2026 by rpki-client