
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230342e302f32342d3234203d3e2030.roa
File: 34352e3131332e3230342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: azwF4QxJ4o7RUv11JVeJn4yL6J0MCJE7wPtk5VKUtmc=
Subject key identifier: 38:5A:77:95:C1:02:D4:C7:EF:27:42:68:17:03:D8:1A:7B:9B:B6:FA
Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial: 6DC6754DBF411FBCA5FF48EE6C5192CE42D570EF
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230342e302f32342d3234203d3e2030.roa
Signing time: Sat 27 Jun 2026 17:35:11 +0000
ROA not before: Sat 27 Jun 2026 17:30:11 +0000
ROA not after: Sat 26 Jun 2027 17:35:11 +0000
asID: 0
IP address blocks: 45.113.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 00:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:c6:75:4d:bf:41:1f:bc:a5:ff:48:ee:6c:51:92:ce:42:d5:70:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Validity
Not Before: Jun 27 17:30:11 2026 GMT
Not After : Jun 26 17:35:11 2027 GMT
Subject: CN=385A7795C102D4C7EF2742681703D81A7B9BB6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:69:44:ec:f9:93:26:ad:0b:56:ae:6a:bd:71:
6c:ec:70:1e:49:a7:72:12:18:e6:82:ef:43:fb:3b:
a5:c9:e7:9f:86:c5:39:60:b1:59:b7:93:d0:cc:24:
f6:92:c5:66:9d:d9:a0:88:7d:1f:1c:31:82:2f:ff:
21:4d:dc:97:c9:5a:da:27:7b:91:ed:76:d7:2f:46:
ae:0e:48:54:98:9b:b3:b8:08:0d:97:6f:bf:78:7c:
cb:b4:ee:74:4a:8a:e7:8c:59:1f:83:57:7a:08:4b:
27:6a:32:cf:76:a4:c6:54:57:01:a7:ee:95:11:0c:
42:b4:41:f8:f3:c4:f4:a7:44:52:0d:6b:e5:6e:a1:
8a:14:06:b3:93:4c:10:df:94:81:2c:c7:a7:6d:71:
bc:dc:f2:45:78:6a:df:50:cf:93:8f:de:3e:47:17:
18:56:28:5d:94:85:c0:a3:7c:25:94:11:55:42:5a:
09:32:f3:f4:67:bd:3e:21:6d:ff:af:11:8b:cb:3f:
38:94:3d:9a:8f:e6:4c:41:9d:b4:4c:1d:eb:16:3e:
ab:5e:ce:13:c6:1f:8a:91:41:f7:6a:76:c0:d6:ea:
77:cb:81:80:70:21:44:72:ba:9f:9b:e0:9a:62:51:
42:4a:02:4b:cc:ba:45:f5:98:5b:43:6d:92:da:e5:
00:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:5A:77:95:C1:02:D4:C7:EF:27:42:68:17:03:D8:1A:7B:9B:B6:FA
X509v3 Authority Key Identifier:
keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230342e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.204.0/24
Signature Algorithm: sha256WithRSAEncryption
91:e8:f3:fb:91:24:58:d7:a8:cc:3a:d8:d1:c7:9f:c8:40:9a:
49:0d:b5:92:29:20:18:7f:fb:28:ba:eb:04:98:16:01:4e:45:
95:d9:23:83:a6:a3:b9:77:5e:3a:53:3c:94:99:f0:6b:ba:bd:
26:7c:8c:ec:ac:23:25:34:d8:9a:fb:18:56:9a:36:e1:76:49:
6b:8b:76:bd:97:36:69:7a:31:38:d5:6a:aa:dd:13:81:07:db:
cf:7f:e5:d9:72:aa:4a:4f:d2:75:5f:57:04:c7:c8:1e:93:ef:
b7:6e:4e:25:11:fb:54:c3:00:77:e9:c5:10:8b:59:ab:ad:de:
d2:65:5e:f9:88:46:fb:ce:fc:9d:b9:d7:2e:7b:2d:42:60:06:
c5:58:da:48:0d:9f:7d:90:4f:a1:84:65:98:da:93:a4:60:6b:
65:9b:9f:40:20:09:80:69:be:de:4e:d5:44:0d:c8:34:81:d1:
45:b8:ea:83:46:f3:d2:a7:28:a9:2a:b4:f9:fb:a5:9d:d3:2e:
93:5a:8e:a5:80:8e:9b:b1:a1:f4:6b:da:ce:4a:6b:08:16:ef:
4e:22:cc:65:99:73:2f:fc:16:70:19:54:a7:6d:d0:64:e6:42:
73:65:67:6f:a3:aa:a4:71:99:a4:cf:29:ed:e6:33:e3:51:47:
3e:d9:5c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:24 2026 by rpki-client