
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e20313331353638.roa
File: 34352e3235312e392e302f32342d3234203d3e20313331353638.roa (raw, json)
Hash identifier: eh43kayAPS4cAoPUBBHGJFnT/oUhFUByWKVrDadeFKA=
Subject key identifier: 18:C6:60:A5:32:5D:09:A1:C7:81:1F:E5:37:0B:B3:A2:23:4F:4A:21
Certificate issuer: /CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Certificate serial: 7F29887DDF596260F9E52C93536D3E1F96874C55
Authority key identifier: 77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e20313331353638.roa
Signing time: Fri 29 May 2026 05:50:39 +0000
ROA not before: Fri 29 May 2026 05:45:39 +0000
ROA not after: Fri 28 May 2027 05:50:39 +0000
asID: 131568
IP address blocks: 45.251.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 09:59:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:29:88:7d:df:59:62:60:f9:e5:2c:93:53:6d:3e:1f:96:87:4c:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77F12FCFBD1F1C5EE54102A663E246A6B318ABF9
Validity
Not Before: May 29 05:45:39 2026 GMT
Not After : May 28 05:50:39 2027 GMT
Subject: CN=18C660A5325D09A1C7811FE5370BB3A2234F4A21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b2:21:82:18:92:b8:94:e3:fb:73:3f:46:4a:
94:4e:af:7e:63:ac:38:97:f0:29:19:fd:b1:5e:95:
cf:07:b8:4f:0d:83:50:f2:ae:ba:54:29:93:db:6f:
00:f4:c9:e3:c3:be:ca:b1:d9:fa:b3:62:bc:cb:84:
68:3c:37:c0:fa:4b:66:ad:60:5f:55:dc:e0:47:74:
ec:82:00:14:28:98:39:e7:54:19:15:b3:48:20:27:
15:2a:80:9d:18:92:1e:48:ac:02:f4:79:14:fb:6a:
d7:99:36:69:a0:61:c0:fb:2d:5c:bb:73:3d:41:7f:
36:73:4d:c0:a6:89:96:7c:43:5b:73:83:d5:e2:63:
da:4a:a8:51:ad:15:99:8e:8f:86:db:74:df:12:05:
2c:59:e9:56:8f:67:7c:73:5a:07:77:fc:01:95:29:
c9:ce:6e:4a:06:d6:19:a3:3e:b9:b7:e4:bc:1b:72:
08:12:e4:f0:ca:31:57:6b:5c:1f:b3:59:14:0a:dc:
bc:a9:0f:72:eb:a1:f8:81:cf:1d:e7:5c:49:9b:f2:
05:57:ee:a3:9a:31:8a:ca:43:74:e0:ab:eb:12:75:
0d:a1:29:99:35:e3:95:83:88:ec:ab:92:b3:27:7a:
d4:f8:03:31:26:6f:f3:8a:21:26:70:ab:ee:b3:82:
a5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:C6:60:A5:32:5D:09:A1:C7:81:1F:E5:37:0B:B3:A2:23:4F:4A:21
X509v3 Authority Key Identifier:
keyid:77:F1:2F:CF:BD:1F:1C:5E:E5:41:02:A6:63:E2:46:A6:B3:18:AB:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/77F12FCFBD1F1C5EE54102A663E246A6B318ABF9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095974252194103297/0/34352e3235312e392e302f32342d3234203d3e20313331353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.9.0/24
Signature Algorithm: sha256WithRSAEncryption
28:2a:a9:5d:cc:f6:d0:a5:27:be:44:6c:92:e0:8b:66:68:8d:
00:35:07:8e:70:bd:db:67:e6:44:a3:93:0c:f3:43:2c:db:8f:
ca:67:a0:79:5f:39:8f:1b:33:98:42:93:9e:44:e8:d0:b7:57:
43:85:a9:df:e3:bb:30:88:7a:93:66:71:a4:20:d2:37:bd:b5:
d4:65:34:89:99:d3:d5:3c:2e:96:58:58:c8:36:0f:6e:6f:1f:
87:33:40:8c:7b:43:9c:93:fc:72:1d:b6:46:49:4f:be:d6:1d:
a8:80:3a:ff:31:8a:6c:55:81:29:12:0c:95:6c:a4:d1:e7:d2:
9c:e9:01:bc:a0:40:f2:b1:e1:80:92:88:c8:65:94:d2:73:ba:
01:40:3d:7f:be:ce:d1:a4:ac:4f:29:48:b9:ce:f7:9a:dd:7e:
b3:27:cf:88:da:b0:ca:37:82:87:af:1a:79:8f:a6:10:2a:72:
29:cb:11:e8:a9:b7:0e:d9:f4:d2:fa:27:d0:32:bc:90:ed:a4:
2a:ba:5c:9d:06:2c:5e:23:cf:c0:b5:8a:61:8b:ce:62:6c:c1:
ce:cb:67:ac:c5:ca:72:3c:a9:5b:9d:a1:52:a9:71:69:4e:a6:
d2:13:6d:c4:86:c6:7a:cc:44:ed:42:c9:27:ad:d0:31:2f:5c:
ae:8a:00:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:54 2026 by rpki-client