
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230362e302f32342d3234203d3e2034383038.roa
File: 34352e3131332e3230362e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: zcRmo63dclxgiZ3nFyKCKGrLFhXcY5p/S+EzqtAO7J0=
Subject key identifier: 1E:FA:40:44:0D:42:78:99:DD:B2:64:29:82:BB:17:E2:B7:B6:C6:42
Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial: 1754E79F2770E778CB98C5F68C3497DD7603F8EA
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230362e302f32342d3234203d3e2034383038.roa
Signing time: Sat 30 May 2026 22:12:26 +0000
ROA not before: Sat 30 May 2026 22:07:26 +0000
ROA not after: Sat 29 May 2027 22:12:26 +0000
asID: 4808
IP address blocks: 45.113.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 09:27:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:54:e7:9f:27:70:e7:78:cb:98:c5:f6:8c:34:97:dd:76:03:f8:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Validity
Not Before: May 30 22:07:26 2026 GMT
Not After : May 29 22:12:26 2027 GMT
Subject: CN=1EFA40440D427899DDB2642982BB17E2B7B6C642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6b:cd:b5:0f:43:ae:ec:84:62:d1:09:09:d4:
1a:21:98:44:71:8b:0b:2f:ca:56:06:c2:1e:7f:b5:
a4:60:e6:c4:bd:06:84:7a:4d:fe:c1:b5:34:6a:06:
ac:21:b9:d7:22:68:f0:e0:a3:67:6b:75:25:10:49:
c6:c9:20:aa:4f:9c:40:4e:3e:3c:b7:7c:c6:5e:bf:
30:79:e5:d3:a6:1c:f4:f9:e5:9c:be:2b:ab:ac:81:
a5:3c:96:58:0a:6d:3a:c7:ed:ac:07:6b:59:8e:94:
a1:09:75:76:3d:46:21:bf:63:1d:0f:44:ff:33:28:
eb:0d:41:9e:83:74:b1:61:0c:0d:e9:ce:fe:51:72:
01:8a:50:a3:5a:d9:5c:83:89:7f:1c:16:c6:cf:ef:
c2:3a:99:80:d7:43:ea:7b:df:e4:47:8c:9f:8d:6c:
8f:56:f3:c9:d9:4d:9a:a1:e9:47:55:a0:e3:c8:ba:
64:8f:c7:e7:3d:14:58:1a:ab:48:4e:ec:4c:5c:45:
79:ae:7f:b4:fb:73:a4:79:b6:e6:75:41:5a:50:a1:
06:58:87:71:af:87:89:e1:3b:c7:4b:95:c3:c5:29:
39:a1:5f:a5:08:10:45:a9:59:fd:8f:2f:e1:80:42:
0a:8b:3e:1c:f9:b2:7d:60:08:da:1e:ff:82:1d:7c:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:FA:40:44:0D:42:78:99:DD:B2:64:29:82:BB:17:E2:B7:B6:C6:42
X509v3 Authority Key Identifier:
keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34352e3131332e3230362e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.113.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:86:ca:ee:62:4a:d3:3f:10:83:f1:7a:1b:9f:60:87:67:ef:
32:c1:a0:fd:85:4b:06:3d:39:6d:ba:10:a5:84:f5:b6:3a:93:
79:bb:74:3e:53:8e:0f:74:de:79:ca:7e:c2:cd:5a:a0:53:6d:
a9:9f:16:bd:3d:cf:68:d0:3d:cd:80:b9:1b:37:55:f8:f7:e6:
ee:68:6b:d8:b5:e7:b6:33:7c:f7:1a:f8:7e:be:4a:51:b5:bd:
0c:16:52:d1:08:fd:80:9f:f1:77:0b:02:54:fd:03:8e:ce:52:
4f:9a:b5:5f:d5:3b:7a:d0:ff:d1:62:7a:4e:e4:e8:80:2d:5a:
1a:f9:f3:fd:3c:4d:8a:57:fa:bd:2e:1a:71:c2:90:35:9e:db:
d6:4c:66:86:cb:02:7b:15:22:23:3c:3f:e9:bf:95:66:1b:0f:
cd:b6:bb:21:3f:2f:cd:92:f3:7a:21:38:17:45:a4:a6:c7:a9:
38:60:4c:8e:cb:6f:2a:bc:fe:73:0f:96:bc:ef:d8:a9:e1:6d:
6a:11:83:fc:a1:d6:8b:32:cf:7c:90:19:04:2c:f0:73:38:3c:
74:80:dc:09:5a:d8:18:54:9d:e5:03:b4:dc:a0:b9:51:22:2b:
5d:88:03:d1:33:39:38:1f:18:b8:b5:4d:dc:c3:d9:c5:cc:15:
08:b2:ef:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:05 2026 by rpki-client