
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130302e302f32322d3232203d3e2030.roa
File: 34352e3234382e3130302e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: evePIHhobdrqna9eeXg6NPN2qqunrVRaep6ZbuP+aTQ=
Subject key identifier: 9A:70:E0:AE:7A:A7:B7:C2:B9:7B:FB:E8:03:FE:B3:94:E9:D5:22:38
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: 7B5E81FAAA5689BB16E78BBAB43CEBE445B2A2A9
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130302e302f32322d3232203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:34:53 +0000
ROA not before: Fri 10 Apr 2026 03:29:53 +0000
ROA not after: Fri 09 Apr 2027 03:34:53 +0000
asID: 0
IP address blocks: 45.248.100.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:5e:81:fa:aa:56:89:bb:16:e7:8b:ba:b4:3c:eb:e4:45:b2:a2:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: Apr 10 03:29:53 2026 GMT
Not After : Apr 9 03:34:53 2027 GMT
Subject: CN=9A70E0AE7AA7B7C2B97BFBE803FEB394E9D52238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:71:36:c4:5d:c5:e4:e1:dd:ae:2a:48:56:3e:
e5:7c:84:5c:d7:89:d3:31:d1:06:d7:ca:a3:a6:9d:
82:b7:52:fa:31:8e:03:50:21:6d:21:d1:2f:63:4f:
45:43:49:91:3a:39:43:fa:ab:29:f3:a0:61:0d:4b:
ca:7b:e2:4f:d7:2e:8d:d9:1b:24:d1:69:cd:8b:5d:
58:40:44:0d:78:b2:c9:85:ec:d1:b9:49:93:4d:d5:
aa:ce:98:29:62:9a:23:f0:e9:3c:fe:33:a9:19:4f:
c2:50:15:2b:86:42:f5:77:d2:a9:99:cf:a2:65:d7:
be:b6:2d:a3:4f:c0:27:2e:79:b0:62:b4:5d:5f:23:
2a:1a:24:d8:41:9a:11:c7:90:a7:8e:b6:3d:a1:1d:
9c:06:53:e9:ba:a6:e3:dd:6b:21:88:48:db:1f:f3:
99:e9:f6:ff:d8:d4:70:c0:87:e3:da:5f:4a:54:1e:
f9:1d:61:39:13:bd:6d:47:10:f5:80:74:08:03:c8:
7c:ed:a4:ec:64:6f:f2:14:5f:74:c1:9d:70:36:a1:
22:4d:43:c8:68:93:c5:30:85:f5:20:90:41:b8:04:
53:b3:bb:b7:fa:24:c6:2e:97:05:aa:98:25:2e:12:
6d:c3:f6:8f:09:76:83:58:28:35:79:1d:83:e0:c4:
7e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:70:E0:AE:7A:A7:B7:C2:B9:7B:FB:E8:03:FE:B3:94:E9:D5:22:38
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130302e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.100.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:31:5c:53:2d:22:c8:2f:b0:68:82:1c:e1:5f:ad:fb:5c:12:
dd:72:f0:0f:e7:99:71:db:c5:1a:3e:3b:58:8e:91:94:42:8f:
01:db:12:38:60:07:03:a0:6d:45:fd:eb:aa:8a:ae:25:72:e9:
f6:de:cf:88:55:9f:f6:4d:7b:d1:8c:41:9a:47:fc:dc:83:d6:
a9:d8:77:c2:0a:82:5f:a8:3e:50:5e:a3:6d:0a:7b:ba:29:f9:
3e:e8:82:d9:5c:a5:cf:37:38:f5:0d:31:12:78:e2:98:1c:93:
d9:04:89:67:d7:97:9a:f3:cc:19:8b:9a:f9:71:88:e0:1d:87:
db:9c:90:d4:1a:56:b6:5b:3b:5e:a0:b1:51:6a:da:27:25:76:
01:75:84:61:1a:75:b8:75:24:8c:04:a4:86:a5:ff:8f:bf:3d:
f2:e2:ae:34:81:2c:9e:a2:25:d3:8f:be:f0:09:8d:ce:34:40:
b0:fc:57:59:ac:c7:45:3c:57:03:59:03:34:31:9c:58:2c:fd:
10:62:9c:60:dd:a0:89:82:3b:08:37:af:db:0b:50:61:29:1c:
3a:ed:51:12:d2:ee:8f:87:12:0d:f1:86:94:19:b7:32:42:ff:
6b:f1:9d:3c:ae:d8:30:26:0d:c2:b9:68:25:da:d8:ef:9a:e3:
08:c1:47:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:23:24 2026 by rpki-client