
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130342e302f32322d3232203d3e2030.roa
File: 34352e3234382e3130342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: Olt5MVy17egj99Gius/16ZJ0CP/XuP53qLG1H4AiBCE=
Subject key identifier: 70:F7:E8:DC:02:4D:40:BD:D9:9D:73:53:AB:63:62:2B:BE:EE:D2:20
Certificate issuer: /CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Certificate serial: 4775FE9E4C6BDBFB5C2932871BCF4B6F304CF58F
Authority key identifier: EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130342e302f32322d3232203d3e2030.roa
Signing time: Fri 10 Apr 2026 03:34:53 +0000
ROA not before: Fri 10 Apr 2026 03:29:53 +0000
ROA not after: Fri 09 Apr 2027 03:34:53 +0000
asID: 0
IP address blocks: 45.248.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 14 Apr 2026 09:14:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:75:fe:9e:4c:6b:db:fb:5c:29:32:87:1b:cf:4b:6f:30:4c:f5:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB221959BAB62CA0F2C1844E764159F081AE413B
Validity
Not Before: Apr 10 03:29:53 2026 GMT
Not After : Apr 9 03:34:53 2027 GMT
Subject: CN=70F7E8DC024D40BDD99D7353AB63622BBEEED220
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e1:7a:50:14:90:a3:2d:72:38:fc:98:18:4b:
4e:c1:17:55:b0:c1:a5:2b:17:35:19:5d:d5:9a:95:
84:14:54:a6:31:94:55:43:44:07:60:2c:68:a9:cc:
c5:65:9a:6c:1e:bd:99:43:1d:59:a6:38:a4:c1:d3:
d9:83:4d:67:56:2c:c3:01:49:9f:ad:b4:42:ee:a3:
f2:a2:92:8c:30:97:0b:15:41:c3:52:1b:2f:1a:77:
6e:21:3f:20:09:d0:fc:f5:0b:1c:b4:b2:7f:bd:71:
36:8d:7c:b4:d3:36:e2:ee:54:30:2f:d3:53:d1:44:
ac:44:2c:7a:ff:0a:14:a5:9d:3d:58:7c:d6:61:b1:
8e:16:88:e8:8a:11:bc:ad:78:5d:5a:0b:3d:64:e6:
ae:52:a2:1c:54:a1:9b:49:2f:dd:b8:73:98:22:8d:
e1:3d:77:a8:e1:ba:8d:09:ed:a7:19:6d:75:12:8d:
23:72:ff:f5:bf:e0:33:be:4f:9e:70:a9:dc:30:05:
44:0d:4d:e4:2b:2c:c8:70:51:75:4c:d5:a6:db:c2:
60:32:85:11:ac:df:ee:4f:1b:61:4a:47:25:d2:27:
8f:5b:b9:02:34:39:3d:85:50:3f:65:b6:10:6f:88:
fa:e5:22:5e:75:6d:00:e1:d8:38:8f:a3:05:a7:8b:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F7:E8:DC:02:4D:40:BD:D9:9D:73:53:AB:63:62:2B:BE:EE:D2:20
X509v3 Authority Key Identifier:
keyid:EB:22:19:59:BA:B6:2C:A0:F2:C1:84:4E:76:41:59:F0:81:AE:41:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/EB221959BAB62CA0F2C1844E764159F081AE413B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EB221959BAB62CA0F2C1844E764159F081AE413B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094823639288709122/0/34352e3234382e3130342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:42:7d:1f:92:2e:b9:53:cd:bf:30:b5:14:b0:8c:c6:1e:6c:
e9:cf:4b:e2:60:54:88:cb:b9:a3:90:b1:ba:ee:c7:2c:8b:21:
cb:5b:5d:1b:71:07:aa:bd:fa:5d:e7:29:61:9d:89:00:87:0f:
f3:63:3a:18:42:c3:64:71:21:35:07:68:cd:7e:d3:69:fe:32:
54:b4:9b:2c:b0:33:71:cf:9a:68:13:ca:95:1c:fb:cc:59:d8:
af:7a:b3:43:10:69:46:52:03:11:25:52:6a:7d:0e:c2:47:a1:
58:6e:c1:fa:1b:46:b9:94:e2:4d:36:08:8e:37:51:20:80:78:
93:86:64:9f:67:15:20:33:ba:57:a0:13:f1:63:c9:0e:ed:b5:
42:25:9e:93:67:67:2b:c9:1a:ab:bc:09:ad:c3:9e:68:97:d8:
c8:2b:e9:d5:e9:e1:a5:39:8f:fc:1c:f3:3d:cd:40:14:f1:81:
12:39:fe:c3:6d:12:15:1f:d7:b3:80:c2:83:99:04:31:8e:59:
d7:65:1c:af:3f:a6:74:4b:20:58:b8:06:4d:58:12:bc:93:7e:
4f:fb:b3:43:ac:7a:9f:45:71:b6:f8:ed:c1:7e:68:22:c0:77:
96:ab:0b:0d:6a:81:4c:7a:45:51:ea:80:c4:eb:e3:25:aa:7f:
1c:93:97:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:25 2026 by rpki-client