
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230352e302f32342d3234203d3e2030.roa
File: 34352e3131332e3230352e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier: BD64OSACeGxAeO4KURjOtf7p0Hi9TEXugn1QNLI3BW0=
Subject key identifier: BB:81:0F:21:E7:99:51:DB:C3:B3:48:C0:22:E7:81:36:C5:A8:EE:07
Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial: 404AAFDE768EC12F3DE052DC5A7CF9BF40713AAF
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230352e302f32342d3234203d3e2030.roa
Signing time: Sat 27 Jun 2026 17:35:39 +0000
ROA not before: Sat 27 Jun 2026 17:30:39 +0000
ROA not after: Sat 26 Jun 2027 17:35:39 +0000
asID: 0
IP address blocks: 45.113.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 08 Jul 2026 00:17:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4a:af:de:76:8e:c1:2f:3d:e0:52:dc:5a:7c:f9:bf:40:71:3a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Validity
Not Before: Jun 27 17:30:39 2026 GMT
Not After : Jun 26 17:35:39 2027 GMT
Subject: CN=BB810F21E79951DBC3B348C022E78136C5A8EE07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:8f:69:e6:19:43:cc:28:4a:54:e4:03:46:
7c:05:1a:2b:50:f9:89:bb:70:71:80:a5:17:91:1c:
15:97:c8:32:14:27:24:45:11:d9:a5:e8:0e:a4:8f:
8e:09:a8:c5:c2:e3:5d:11:9c:2d:11:c8:5f:09:1a:
6b:96:58:5a:4c:c1:c0:13:49:2e:de:28:49:76:d0:
78:a6:07:54:5e:a1:02:a3:8d:ad:88:06:be:d7:78:
23:b6:56:bf:26:17:36:0f:ec:c0:8c:4a:9d:27:01:
5a:39:ce:c2:2e:40:f9:37:e2:49:59:b0:04:cd:7b:
33:e6:cd:03:31:c4:d7:08:69:fe:2a:d6:3e:85:67:
b0:81:18:f7:0b:8e:9b:fa:18:e1:8c:a0:d0:90:1a:
f7:0f:8b:d9:05:33:7e:97:61:97:63:60:48:a1:9e:
65:bc:28:e6:40:ec:78:b0:6f:ca:61:68:ea:c5:70:
2e:5a:e6:19:0d:d0:70:0d:9d:3a:5c:1b:65:a5:ea:
09:bb:5f:cb:63:da:89:0f:c9:7b:c1:9e:cc:20:76:
7c:90:57:5f:1a:f5:8e:64:5c:b5:bf:3d:6b:66:17:
ba:6e:8a:e0:3a:82:f9:45:a9:c3:d6:ef:e1:bd:02:
15:e5:44:f5:ce:09:d3:4b:55:a6:81:ba:79:5a:3f:
14:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:81:0F:21:E7:99:51:DB:C3:B3:48:C0:22:E7:81:36:C5:A8:EE:07
X509v3 Authority Key Identifier:
keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230352e302f32342d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.205.0/24
Signature Algorithm: sha256WithRSAEncryption
48:da:bb:21:7b:8b:67:41:da:4f:03:35:bc:d7:75:86:26:6c:
41:9e:6b:83:ba:8a:5b:24:19:27:72:45:10:b2:d9:95:16:95:
37:66:d2:13:02:5c:62:ce:25:3f:00:5d:1c:4c:f9:3f:ce:16:
b6:67:0e:72:a1:a5:15:76:40:16:45:03:0d:ad:48:58:af:31:
a1:29:21:d8:8f:20:d2:2f:73:7c:4e:53:0c:07:d4:a9:35:a3:
f6:7e:d5:0a:a3:69:53:e5:d5:b0:32:e9:a5:bb:cb:14:93:ba:
b3:89:40:45:40:79:73:f3:86:fd:40:06:c3:9d:0b:26:18:69:
7f:c8:ab:be:10:ac:49:06:9d:2a:e9:e0:34:28:b5:05:a3:40:
5f:eb:34:97:5e:46:09:9d:17:38:d9:e7:37:0f:35:b0:e0:ca:
76:03:c9:9e:78:a0:d7:76:11:85:c1:5f:f0:2a:3b:90:cf:54:
99:94:6b:01:c1:af:aa:05:59:c7:44:b2:cc:d3:9f:d9:f2:e7:
ec:23:1a:11:ca:9e:5b:ea:ce:7f:fe:15:35:44:8e:94:fa:53:
db:1c:15:05:53:dd:0a:f8:ee:61:cd:48:e1:ad:dd:ef:15:b6:
91:7b:00:5f:9f:72:db:42:bd:0c:a9:39:0e:cc:66:46:1c:9f:
95:91:9c:64
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUQEqv3naOwS894FLcWnz5v0BxOq8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2
MjlEMEYzRTAeFw0yNjA2MjcxNzMwMzlaFw0yNzA2MjYxNzM1MzlaMDMxMTAvBgNV
BAMTKEJCODEwRjIxRTc5OTUxREJDM0IzNDhDMDIyRTc4MTM2QzVBOEVFMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLgY9p5hlDzChKVOQDRnwFGitQ
+Ym7cHGApReRHBWXyDIUJyRFEdml6A6kj44JqMXC410RnC0RyF8JGmuWWFpMwcAT
SS7eKEl20HimB1ReoQKjja2IBr7XeCO2Vr8mFzYP7MCMSp0nAVo5zsIuQPk34klZ
sATNezPmzQMxxNcIaf4q1j6FZ7CBGPcLjpv6GOGMoNCQGvcPi9kFM36XYZdjYEih
nmW8KOZA7Hiwb8phaOrFcC5a5hkN0HANnTpcG2Wl6gm7X8tj2okPyXvBnswgdnyQ
V18a9Y5kXLW/PWtmF7puiuA6gvlFqcPW7+G9AhXlRPXOCdNLVaaBunlaPxRZAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQUu4EPIeeZUdvDs0jAIueBNsWo7gcwHwYDVR0j
BBgwFoAU6+i05up8WLLlbjxZn4ahMmKdDz4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODY1NjI3MTU1ODQ0MzAyNy8wL0VCRThCNEU2RUE3QzU4QjJFNTZFM0M1OTlGODZB
MTMyNjI5RDBGM0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRUJFOEI0RTZFQTdDNThCMkU1NkUzQzU5OUY4NkExMzI2MjlEMEYzRS5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4NjU2MjcxNTU4NDQzMDI3LzAvMzQzNTJlMzEzMTMz
MmUzMjMwMzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAC1x
zTANBgkqhkiG9w0BAQsFAAOCAQEASNq7IXuLZ0HaTwM1vNd1hiZsQZ5rg7qKWyQZ
J3JFELLZlRaVN2bSEwJcYs4lPwBdHEz5P84WtmcOcqGlFXZAFkUDDa1IWK8xoSkh
2I8g0i9zfE5TDAfUqTWj9n7VCqNpU+XVsDLppbvLFJO6s4lARUB5c/OG/UAGw50L
Jhhpf8irvhCsSQadKungNCi1BaNAX+s0l15GCZ0XONnnNw81sODKdgPJnnig13YR
hcFf8Co7kM9UmZRrAcGvqgVZx0SyzNOf2fLn7CMaEcqeW+rOf/4VNUSOlPpT2xwV
BVPdCvjuYc1I4a3d7xW2kXsAX59y20K9DKk5DsxmRhyflZGcZA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:43:24 2026 by rpki-client