
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e203536303430.roa
File: 34352e3235312e31302e302f32342d3234203d3e203536303430.roa (raw, json)
Hash identifier: dEWkLtMMH2qD6XB42Ckm0p1n+UWQDeIS+yciQ4uFhGY=
Subject key identifier: 0E:60:F0:64:D1:22:80:72:98:45:5F:6A:BF:20:5D:40:FE:BF:70:00
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 0CD2E251D8BCACA0AB91B6A7D2875158922C1E61
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e203536303430.roa
Signing time: Fri 29 May 2026 05:51:33 +0000
ROA not before: Fri 29 May 2026 05:46:33 +0000
ROA not after: Fri 28 May 2027 05:51:33 +0000
asID: 56040
IP address blocks: 45.251.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:d2:e2:51:d8:bc:ac:a0:ab:91:b6:a7:d2:87:51:58:92:2c:1e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:46:33 2026 GMT
Not After : May 28 05:51:33 2027 GMT
Subject: CN=0E60F064D122807298455F6ABF205D40FEBF7000
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:36:9b:41:93:b0:a5:90:51:74:78:e3:83:13:
cb:de:c0:74:fc:e1:f5:b3:47:e3:07:fe:1a:67:51:
6c:83:20:88:52:be:ba:87:53:aa:5d:c7:64:fe:9f:
7c:04:81:c8:5d:19:af:5a:3c:30:02:59:74:4d:68:
d0:0f:c7:26:ba:57:d7:71:be:fd:2e:18:8d:88:36:
0a:0a:7c:8c:bd:08:6d:59:60:9a:a1:d0:cf:13:7f:
fb:cb:22:95:c2:eb:b7:ae:c3:14:3f:1a:4b:8f:f3:
11:f8:2f:fd:fa:6f:8e:d1:00:1a:80:43:cc:79:ad:
3d:fe:3e:ae:28:1f:36:9c:7b:f4:45:9d:87:33:78:
d2:54:30:a9:6e:4b:ed:4e:e6:1f:f4:4a:da:49:fc:
b5:90:f5:bf:22:e1:c6:eb:52:d8:96:ce:e7:3e:b3:
8b:db:5c:11:4f:c4:cb:a0:b3:60:de:56:ed:db:bf:
79:da:17:61:fe:58:11:31:55:5f:1f:48:a4:fc:a6:
3f:ec:97:dc:3d:48:11:a1:8f:b0:b0:e6:cc:aa:2f:
52:09:1e:1a:13:4e:60:90:e4:bc:02:27:50:cc:82:
73:3f:81:a0:95:0e:cc:8c:fc:e0:aa:57:bd:44:22:
5c:2b:b2:77:4b:a3:9d:f3:3b:d3:03:8f:18:a8:0f:
e5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:60:F0:64:D1:22:80:72:98:45:5F:6A:BF:20:5D:40:FE:BF:70:00
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3234203d3e203536303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
52:03:75:cc:9d:4f:ae:00:f5:b1:5a:5d:cb:c7:32:b3:5d:c2:
72:5f:65:2e:e6:4b:82:cb:f9:86:63:d9:c7:b4:42:7e:02:c6:
cf:27:5f:62:ca:a6:43:62:36:15:2c:d7:05:fe:e4:e0:bb:c8:
09:72:33:9f:d7:2b:0a:cc:8f:aa:67:f5:80:33:17:e9:c7:ae:
3a:0b:9a:6d:ce:45:c5:6d:b4:6d:54:64:3f:4d:5e:fd:ca:da:
45:b2:af:2d:b3:da:fb:85:9d:a7:3c:54:eb:16:ef:81:2b:d7:
04:19:0f:51:7c:1b:35:14:96:ef:4f:50:94:b8:6e:7c:50:8a:
96:b6:9b:8f:78:ed:04:86:ff:c6:8d:d6:9a:e0:84:4a:cb:fc:
27:26:65:24:dd:d7:6b:4f:33:0c:2d:9c:ac:d9:1e:dd:29:cf:
d4:5a:4d:73:29:64:32:18:52:ab:90:0a:ff:1a:60:95:7a:a3:
38:b9:40:95:a6:3b:dc:91:ab:bf:59:13:cd:17:52:3a:6f:60:
c4:dc:16:2a:9f:be:da:73:08:4e:f2:09:f6:0a:a3:91:43:3a:
91:5e:80:45:05:a9:52:51:42:3a:7e:18:b0:91:46:b9:de:9e:
f4:0e:65:61:60:ec:0c:38:e6:0e:e3:9f:99:54:15:ca:32:3d:
ac:5c:d2:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:23 2026 by rpki-client