
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3235203d3e2034383337.roa
File: 34352e3235312e31302e302f32342d3235203d3e2034383337.roa (raw, json)
Hash identifier: lxWBXtkoDjIMhkl3+hLEslLPl1BR9O2TaK20k98rp9Q=
Subject key identifier: 6A:03:4D:11:6A:44:59:40:5C:5F:72:94:AF:9E:95:D8:8C:43:9E:DD
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 51049F6994064851E1F19D6C690B93C7CD34A2D7
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3235203d3e2034383337.roa
Signing time: Fri 29 May 2026 05:51:32 +0000
ROA not before: Fri 29 May 2026 05:46:32 +0000
ROA not after: Fri 28 May 2027 05:51:32 +0000
asID: 4837
IP address blocks: 45.251.10.0/24 maxlen: 25
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:04:9f:69:94:06:48:51:e1:f1:9d:6c:69:0b:93:c7:cd:34:a2:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:46:32 2026 GMT
Not After : May 28 05:51:32 2027 GMT
Subject: CN=6A034D116A4459405C5F7294AF9E95D88C439EDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:19:42:cc:5a:94:ed:aa:ef:b3:e7:f7:62:23:
30:12:0a:f0:61:da:9b:73:3d:54:a6:3d:8c:22:64:
3b:4d:17:34:15:70:d6:da:b6:cc:bc:39:fd:28:79:
45:48:04:b8:8b:1a:42:c0:08:45:8e:1d:8f:39:2b:
20:11:2b:f5:30:64:4d:b8:f0:ea:a0:bd:ba:03:ac:
7c:4b:e3:4b:ef:40:02:6b:e6:a9:46:5d:dc:61:b5:
e5:d6:50:d6:7a:37:08:de:9a:5a:db:b8:30:05:8e:
8f:f0:84:fb:18:67:f2:46:98:e9:39:76:62:a6:85:
dc:cb:00:0a:c3:20:0c:b0:07:6a:33:64:bc:9b:11:
fc:4f:b8:a4:51:46:03:8a:de:68:c0:9e:a6:ed:42:
39:1b:f8:64:56:55:01:fc:8f:b1:54:e6:0c:34:70:
84:7c:63:8a:9f:89:b5:1d:fc:2b:2b:7c:bb:06:34:
a2:82:e9:53:ea:ca:22:9e:2e:68:9a:f9:63:c5:8e:
5b:b4:ef:31:b0:41:1e:fe:04:39:b8:18:42:8b:e5:
53:27:35:2b:8f:92:f5:d1:26:9b:34:10:99:9f:a4:
55:4f:e0:d7:9e:e2:f9:c2:9d:88:2b:1d:38:1c:fc:
ad:e0:f8:ab:7a:d1:1d:36:4a:8b:14:0c:6f:82:0c:
48:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:4D:11:6A:44:59:40:5C:5F:72:94:AF:9E:95:D8:8C:43:9E:DD
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31302e302f32342d3235203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.10.0/24
Signature Algorithm: sha256WithRSAEncryption
05:be:94:a8:41:cb:d4:1f:d4:ba:7e:4e:9d:2f:52:d6:20:88:
53:c2:30:7b:71:ff:f5:51:f4:8f:ae:51:9b:da:6d:10:3f:81:
02:40:32:27:5e:27:a4:67:70:5f:e7:7f:31:be:81:b5:2e:de:
3b:91:b9:ee:32:32:17:b0:22:e9:67:fb:8c:1b:f5:98:db:9d:
fd:7e:e3:7d:42:06:66:ca:eb:d1:38:ea:15:cb:cb:fa:0d:ae:
94:0d:7d:9c:a8:a8:2e:f6:b9:ea:6e:11:ac:52:85:63:a8:98:
58:0b:06:b4:54:fd:27:79:bf:fc:8f:ef:df:33:6c:b5:7a:f2:
a3:92:e1:aa:fa:f7:97:d6:4d:ce:cc:09:38:f2:43:ed:a8:3e:
35:7e:bf:93:23:17:fd:9b:a3:fc:20:11:78:72:ef:52:bf:34:
b7:13:18:81:cf:f7:26:cd:40:f4:25:87:2c:02:78:92:26:6d:
29:e2:7d:fd:f0:a9:9a:4e:69:3c:da:fc:c3:d9:5d:9b:99:9d:
72:65:8d:3d:bf:59:63:6c:45:52:59:07:fa:94:59:4d:e5:87:
20:ec:9e:95:d7:88:93:80:c3:29:5b:8f:58:15:e1:7d:1f:35:
79:4d:9c:a3:86:69:fc:0a:70:57:72:f7:e4:04:57:5d:88:e4:
7b:54:60:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:40 2026 by rpki-client