
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132362e302f32332d3233203d3e2034383131.roa
File: 34352e3132342e3132362e302f32332d3233203d3e2034383131.roa (raw, json)
Hash identifier: H0W0ZzMY9r/4L4IYlDPBE2irQJ2OcuMVgZQOZnH89qs=
Subject key identifier: D4:8D:84:3D:96:55:46:B3:AF:C1:67:64:3E:AD:E2:D5:17:F0:B7:05
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 3586C86F00B8B50C99D68AECD5FDF5345663C206
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132362e302f32332d3233203d3e2034383131.roa
Signing time: Sun 23 Aug 2026 15:04:48 +0000
ROA not before: Sun 23 Aug 2026 14:59:48 +0000
ROA not after: Sun 22 Aug 2027 15:04:48 +0000
asID: 4811
IP address blocks: 45.124.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 10:44:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:86:c8:6f:00:b8:b5:0c:99:d6:8a:ec:d5:fd:f5:34:56:63:c2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Aug 23 14:59:48 2026 GMT
Not After : Aug 22 15:04:48 2027 GMT
Subject: CN=D48D843D965546B3AFC167643EADE2D517F0B705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:4d:ee:77:c7:e6:cd:e0:40:c2:56:0a:d9:
da:fe:a7:83:c5:b0:9b:90:dd:d6:a5:90:bd:9c:a1:
b7:14:7c:72:cd:ea:3d:77:84:b3:d2:6f:b2:19:ae:
6b:ae:e1:3e:54:95:3b:8a:43:8b:2f:31:fc:88:bf:
03:f2:9b:02:dc:f3:b3:38:d0:6a:2b:2d:11:7a:69:
97:31:10:90:b2:ac:38:24:1d:59:b2:10:cf:84:dd:
75:0d:51:ad:ce:cb:48:b0:db:f7:5e:b0:f1:4f:47:
9c:c3:bf:f0:b8:6e:d9:c3:7f:2b:ae:9b:a9:97:29:
8f:05:40:ed:f1:be:f1:3b:bb:43:ad:67:5c:f9:88:
91:5a:f0:ec:e9:40:45:54:e9:f9:b6:b0:5f:23:aa:
2a:7e:a9:dd:35:16:ec:49:d6:4e:da:02:29:04:f2:
78:8c:6d:97:90:16:e3:5b:3b:f9:15:5b:c7:bc:cf:
16:f9:bd:38:7d:36:35:5e:1b:ef:ef:be:a1:68:34:
53:9b:e3:96:60:ba:ca:66:06:b1:69:02:fd:d0:a0:
5f:bc:06:f6:66:36:72:95:37:fd:bc:15:bc:8d:c3:
a0:fd:87:e7:08:0d:67:b1:94:c3:66:c2:a6:47:a0:
8a:2a:81:96:db:9c:b2:e5:b8:d7:52:cd:03:12:de:
be:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8D:84:3D:96:55:46:B3:AF:C1:67:64:3E:AD:E2:D5:17:F0:B7:05
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132362e302f32332d3233203d3e2034383131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.126.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:1a:e7:ff:16:1f:44:bc:4c:43:e1:9f:2c:22:45:2e:b7:38:
3e:de:17:e8:0e:e1:1b:6a:95:33:f2:9f:8f:2f:59:2b:4c:c1:
ad:a7:34:46:2e:15:1e:4e:51:b4:9c:70:b4:57:6f:3e:a6:4f:
bc:71:5e:b9:14:39:02:27:2e:34:2b:1b:f0:b3:a6:b1:37:a5:
8e:9f:19:2d:91:e0:80:e4:65:4e:b5:09:6c:09:09:05:42:1f:
e8:9d:07:f8:60:d3:06:0b:28:16:0e:5a:28:ca:f9:b0:45:3f:
12:32:00:3f:1a:2b:66:45:7b:e1:74:a0:63:75:2b:ae:48:20:
a0:aa:2c:94:f6:ff:0e:fe:8f:8c:35:99:30:a8:f5:2e:26:30:
85:06:e4:a3:39:78:dc:85:e0:d5:73:0d:d2:ec:33:31:b0:77:
43:d4:72:0b:80:2d:1c:79:09:15:1f:d4:45:c5:93:a9:e4:ab:
e3:bb:5b:6c:d5:2e:6d:a7:6a:8f:b6:06:2d:26:3b:85:d6:45:
0c:e5:25:eb:d6:2a:1f:19:62:54:e0:e8:9a:ba:3e:48:ad:dd:
1a:c6:9b:6a:44:4a:53:57:7f:88:46:b1:b5:e0:d3:ee:2a:b1:
d9:02:5a:c9:55:11:13:f3:7e:5e:02:ac:e9:7d:e3:1a:71:1f:
d0:d1:a9:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:43:22 2026 by rpki-client