
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3234203d3e20313333373735.roa
File: 34352e3235312e31312e302f32342d3234203d3e20313333373735.roa (raw, json)
Hash identifier: NRmCJeXPZkPDt7O4xJ8Rg6Vw6y5jOnbUo/SkzcJTjJM=
Subject key identifier: D6:89:FF:E0:E9:91:AB:0D:EA:E5:D6:64:EB:18:B3:A6:8F:23:0D:24
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 02DA2960C41BCBCEE649AB76D9C154C24E75B6BF
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3234203d3e20313333373735.roa
Signing time: Fri 29 May 2026 05:52:31 +0000
ROA not before: Fri 29 May 2026 05:47:31 +0000
ROA not after: Fri 28 May 2027 05:52:31 +0000
asID: 133775
IP address blocks: 45.251.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:da:29:60:c4:1b:cb:ce:e6:49:ab:76:d9:c1:54:c2:4e:75:b6:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:47:31 2026 GMT
Not After : May 28 05:52:31 2027 GMT
Subject: CN=D689FFE0E991AB0DEAE5D664EB18B3A68F230D24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:10:88:83:38:13:30:34:5a:93:69:8c:ea:53:
f7:f9:30:76:84:eb:ab:2f:49:a0:64:25:1c:76:45:
dd:f0:2e:a7:be:2e:06:88:42:11:b5:93:67:9c:9e:
a1:80:e7:b6:bd:96:f8:1e:9d:1d:5c:64:16:b6:e4:
4c:5c:a5:ad:72:75:15:44:29:c1:ff:e1:35:a9:bc:
8c:f3:b6:50:20:f8:ba:aa:01:e0:5d:ac:c7:2d:d8:
62:29:0c:08:e6:17:38:13:13:67:ec:17:a0:19:b0:
75:94:23:3f:07:98:fd:5f:79:a9:84:f2:d1:40:90:
24:94:d3:19:77:f8:65:17:b4:d8:97:33:86:ed:41:
21:3c:18:73:36:9c:5a:ff:f7:8a:d4:fb:99:a0:f9:
2d:15:6e:63:16:58:6a:92:7f:7d:50:d9:79:f5:b8:
0c:56:cf:ee:12:51:73:b5:ac:13:93:b0:f1:e5:91:
e7:d4:83:46:14:bf:9a:60:db:6e:32:82:67:2d:4c:
74:14:71:dd:d5:43:b8:f9:22:f7:78:e1:b8:19:17:
f9:19:2d:24:75:e7:db:fd:e1:0b:2d:12:28:aa:d3:
63:ea:5c:2e:61:41:62:35:e6:8d:66:5f:27:bd:e6:
73:33:36:3f:2a:bd:b8:bc:60:66:93:53:ce:c2:9b:
6c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:89:FF:E0:E9:91:AB:0D:EA:E5:D6:64:EB:18:B3:A6:8F:23:0D:24
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e31312e302f32342d3234203d3e20313333373735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.11.0/24
Signature Algorithm: sha256WithRSAEncryption
94:72:a6:5c:dc:09:12:85:c0:30:8a:13:8b:9e:7e:93:f8:4f:
d6:99:e5:bd:f3:f5:96:f0:9a:62:5c:80:3e:02:d6:39:8c:74:
89:7f:09:58:3e:c6:96:9d:65:87:09:da:3f:c1:a4:31:54:86:
26:09:2a:50:be:b5:ac:e9:43:7c:97:fa:59:2f:5d:7f:b5:3b:
13:79:0f:72:1c:ec:35:db:28:34:9d:05:44:e1:60:ff:8b:8f:
c7:42:9a:47:bc:1d:41:3f:13:0c:84:b2:f3:89:15:fe:74:fb:
26:45:6c:0a:b2:55:28:1c:2a:0e:91:60:ec:29:c2:ee:37:a8:
51:33:bb:36:ff:63:5a:3a:75:7a:f9:b3:ec:5f:66:53:4e:56:
9c:24:1e:76:c8:05:0d:5c:b6:7c:fc:66:3d:1b:27:52:ea:6b:
f3:42:c4:25:1a:b5:c4:75:23:a7:2c:b1:0c:32:4e:9d:63:4d:
3e:d0:83:a3:1b:61:a2:95:52:31:09:53:e5:ec:ad:7b:97:03:
1e:c1:8d:62:87:ce:bb:9e:ef:a4:00:3e:76:ea:d1:76:9f:5f:
7b:af:e1:c3:74:44:99:c1:0a:f6:ab:bb:3d:d3:8d:00:d3:5f:
ac:a4:d0:11:59:e0:92:14:57:2a:72:29:43:97:4a:25:e8:f8:
72:bd:8a:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:25 2026 by rpki-client