
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37322e302f32322d3234203d3e203233373234.roa
File: 34352e3235342e37322e302f32322d3234203d3e203233373234.roa (raw, json)
Hash identifier: +sFVmb0ilpOCQElg2i46jQp0UuEd972SGcmuZhruNuU=
Subject key identifier: EC:01:41:71:03:A1:2C:89:5C:B2:E4:4C:E4:F6:1E:9F:90:55:F0:09
Certificate issuer: /CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Certificate serial: 70C4E302B64457B707697258A48597DCB465BB3E
Authority key identifier: 37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37322e302f32322d3234203d3e203233373234.roa
Signing time: Fri 10 Apr 2026 06:07:17 +0000
ROA not before: Fri 10 Apr 2026 06:02:17 +0000
ROA not after: Fri 09 Apr 2027 06:07:17 +0000
asID: 23724
IP address blocks: 45.254.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 06:38:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c4:e3:02:b6:44:57:b7:07:69:72:58:a4:85:97:dc:b4:65:bb:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379467D9F9D2DBFEFEB8095755004EDD42CE00E6
Validity
Not Before: Apr 10 06:02:17 2026 GMT
Not After : Apr 9 06:07:17 2027 GMT
Subject: CN=EC01417103A12C895CB2E44CE4F61E9F9055F009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d4:58:2e:e0:b3:74:e3:5e:b2:e6:71:e6:77:
85:cd:7d:a6:30:36:96:76:51:d5:8a:42:49:b2:d1:
76:49:5b:20:c6:8c:a1:60:4d:c2:b9:0b:38:95:84:
5b:ae:35:b9:19:04:b6:aa:ab:a6:5a:50:7f:f9:7e:
81:af:0d:d1:50:60:1a:1f:58:0a:d4:1f:6e:8e:6d:
f7:d4:a2:b0:5a:74:fb:99:31:0f:40:c6:25:3b:99:
8a:07:45:49:f3:7f:5b:86:6f:59:70:e0:f3:c0:54:
98:05:69:5f:85:fd:21:ed:1a:a9:3b:d9:64:0d:73:
3e:2a:be:29:31:2d:67:c3:4b:71:38:b1:7a:1e:cd:
b3:ae:26:6c:93:cf:2e:e9:2b:1b:38:07:83:2d:bb:
34:5c:ae:f6:dd:ef:e8:ca:ab:84:7f:7d:1f:eb:42:
a6:55:a8:5a:d4:f3:a9:ff:d0:01:d5:e0:e2:27:31:
1a:69:9e:4c:e9:a5:a1:0d:7b:ab:c5:fb:5e:93:33:
2b:75:8f:c3:aa:05:45:05:19:8c:3d:4a:8e:40:91:
43:70:6a:72:7b:d8:cd:59:60:c5:92:18:d1:1c:4a:
f8:83:d9:d9:3f:0b:ef:0d:e1:78:3b:2d:bd:69:dc:
78:79:96:7b:39:be:39:ed:e1:c1:c2:15:05:0b:83:
dd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:01:41:71:03:A1:2C:89:5C:B2:E4:4C:E4:F6:1E:9F:90:55:F0:09
X509v3 Authority Key Identifier:
keyid:37:94:67:D9:F9:D2:DB:FE:FE:B8:09:57:55:00:4E:DD:42:CE:00:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/379467D9F9D2DBFEFEB8095755004EDD42CE00E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094819527910227971/0/34352e3235342e37322e302f32322d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.254.72.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:06:50:a5:a3:a3:65:51:ec:09:ec:d5:b1:8f:06:f7:f8:39:
5d:5b:9b:0f:e6:e0:6b:36:0a:22:3e:cd:ff:ba:84:86:ab:63:
35:74:69:db:d2:6c:93:b4:7d:0d:fe:5a:0f:53:fd:fc:f6:64:
e4:50:f7:8f:ec:7a:64:4c:a9:f6:6d:fa:d2:89:08:c6:fa:56:
26:8b:ca:69:b1:64:90:69:da:28:0e:1f:c3:fe:d7:1b:1a:97:
b0:c2:f4:9b:8c:a4:d4:65:fd:71:c7:32:49:cf:21:ae:58:b7:
b9:0b:1c:25:dd:62:ba:c3:27:a0:e0:e9:e6:ce:b5:6a:a9:92:
7a:6f:9c:35:1d:d2:d9:a5:66:33:08:0e:07:36:82:5c:37:67:
c1:3d:57:af:66:81:cd:1f:f1:1b:bc:2e:6f:2e:4f:67:ca:27:
aa:f3:de:15:ed:36:58:db:67:30:15:5b:1f:ec:d0:5d:ca:49:
32:9d:1e:44:b9:7a:87:36:95:fe:b9:24:fe:8a:4b:d3:f8:25:
58:2b:da:df:bd:57:7a:8f:1e:0d:cd:34:35:41:1d:89:cf:11:
48:b7:d9:d7:fe:ca:f4:a9:79:d1:ec:4a:a6:e7:03:c8:6f:54:
b5:e1:75:0c:85:fd:c0:50:cf:b4:bd:01:d0:46:b2:cc:36:0e:
7d:9f:02:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:26:43 2026 by rpki-client