
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39322e302f32322d3232203d3e203538353139.roa
File: 34352e3235312e39322e302f32322d3232203d3e203538353139.roa (raw, json)
Hash identifier: ePQdZvLEBEPecmiRi/mFtngHDwQwodel2INEy7X9N4E=
Subject key identifier: 2E:61:63:4E:01:78:4F:ED:78:6F:73:CA:8F:D6:84:82:14:B3:5E:48
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 1F27219528FBC59DC2614F20EBB4B34A575641B1
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39322e302f32322d3232203d3e203538353139.roa
Signing time: Thu 02 Jul 2026 03:38:03 +0000
ROA not before: Thu 02 Jul 2026 03:33:03 +0000
ROA not after: Thu 01 Jul 2027 03:38:03 +0000
asID: 58519
IP address blocks: 45.251.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:27:21:95:28:fb:c5:9d:c2:61:4f:20:eb:b4:b3:4a:57:56:41:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 2 03:33:03 2026 GMT
Not After : Jul 1 03:38:03 2027 GMT
Subject: CN=2E61634E01784FED786F73CA8FD6848214B35E48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:05:e0:bb:dd:76:bf:cd:62:f0:23:9a:e3:8b:
7d:93:97:cb:0f:76:90:42:12:78:3b:b2:83:ee:a7:
fe:41:1d:e0:5f:55:dd:34:18:7b:09:51:64:c3:3b:
a3:1f:b2:cd:e7:61:ff:90:4c:20:12:7e:5e:13:5a:
3d:97:70:57:86:96:e8:4c:ff:c6:cf:f0:71:02:b2:
0e:63:d3:8a:7c:5d:1f:72:78:60:61:b6:0a:e1:3b:
23:6b:ec:03:1d:f4:f4:7f:ec:5e:1d:c0:82:31:5e:
5a:85:8f:8a:0f:01:d8:e8:4e:c2:00:3a:dd:46:64:
d9:fe:33:b7:e4:b5:20:ac:69:c7:88:5b:93:a7:cc:
0e:71:b0:7c:cf:ca:88:c3:1d:47:91:9b:82:e6:2d:
11:5a:54:1f:36:9c:72:0b:a2:f8:46:9a:26:97:91:
13:29:0d:d0:14:4e:31:31:0b:3e:10:87:96:1d:60:
42:19:60:36:e6:d9:a5:d0:d4:4f:3b:5b:3c:12:13:
f5:26:19:e1:b6:dc:92:2c:3d:81:d2:c3:21:ed:8d:
55:7d:74:b9:95:5a:47:b7:55:70:39:0c:a5:be:dd:
85:a9:d5:c3:ff:d7:73:38:78:ef:85:a8:67:8d:b3:
e7:ea:b8:36:73:3f:e9:64:b4:be:a1:77:63:1b:f1:
51:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:61:63:4E:01:78:4F:ED:78:6F:73:CA:8F:D6:84:82:14:B3:5E:48
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39322e302f32322d3232203d3e203538353139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.92.0/22
Signature Algorithm: sha256WithRSAEncryption
67:1a:0f:e7:fa:18:08:18:35:b4:af:a6:47:90:ca:c2:d6:d8:
28:2e:fa:76:1d:6a:38:08:23:fc:fa:a9:6f:c3:1b:c0:7e:6c:
ad:e6:ff:55:83:54:f8:c8:3c:66:66:1a:52:ef:1d:51:41:d5:
ca:02:f1:4b:be:0f:42:90:90:d3:a8:66:17:9a:ee:bc:b7:a5:
db:98:50:48:ad:2a:39:5f:91:93:dc:fa:80:74:22:69:ea:93:
46:c8:7d:5a:1c:65:6f:1d:88:ed:87:d8:e3:37:5f:69:48:a7:
81:df:18:84:df:07:3a:a9:09:16:e3:79:97:e2:1d:cb:fe:0e:
71:29:80:e9:30:4d:9c:c9:b0:93:cf:c0:73:08:f4:a1:a2:11:
00:b4:03:32:4a:62:82:30:15:c4:be:9f:58:6f:bb:a8:56:9f:
12:f2:65:66:5b:31:11:f3:19:3b:2f:ab:62:fe:0d:a8:63:1a:
ba:10:2c:d9:a5:fb:e4:63:c9:7d:f0:c4:eb:53:56:63:db:e9:
f7:6c:fb:51:22:18:46:dc:3e:52:c5:a7:51:cd:fa:67:de:3b:
b6:de:75:32:92:96:6e:16:38:38:9b:7b:a2:59:8b:40:88:79:
6c:b3:72:2c:49:a2:31:b4:2f:45:43:92:f8:c0:ea:67:fe:74:
69:7a:af:39
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUHychlSj7xZ3CYU8g67SzSldWQbEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEw
OThCQzhEMjAeFw0yNjA3MDIwMzMzMDNaFw0yNzA3MDEwMzM4MDNaMDMxMTAvBgNV
BAMTKDJFNjE2MzRFMDE3ODRGRUQ3ODZGNzNDQThGRDY4NDgyMTRCMzVFNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBeC73Xa/zWLwI5rji32Tl8sP
dpBCEng7soPup/5BHeBfVd00GHsJUWTDO6Mfss3nYf+QTCASfl4TWj2XcFeGluhM
/8bP8HECsg5j04p8XR9yeGBhtgrhOyNr7AMd9PR/7F4dwIIxXlqFj4oPAdjoTsIA
Ot1GZNn+M7fktSCsaceIW5OnzA5xsHzPyojDHUeRm4LmLRFaVB82nHILovhGmiaX
kRMpDdAUTjExCz4Qh5YdYEIZYDbm2aXQ1E87WzwSE/UmGeG23JIsPYHSwyHtjVV9
dLmVWke3VXA5DKW+3YWp1cP/13M4eO+FqGeNs+fquDZzP+lktL6hd2Mb8VFdAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQULmFjTgF4T+14b3PKj9aEghSzXkgwHwYDVR0j
BBgwFoAUtRSGRvLEUYZOIGluTxySagmLyNIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
OTM1NDAzNjg2OTQ2NDA4NS8wL0I1MTQ4NjQ2RjJDNDUxODY0RTIwNjk2RTRGMUM5
MjZBMDk4QkM4RDIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjUxNDg2NDZGMkM0NTE4NjRFMjA2OTZFNEYxQzkyNkEwOThCQzhEMi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA5MzU0MDM2ODY5NDY0MDg1LzAvMzQzNTJlMzIzNTMx
MmUzOTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzODM1MzEzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi37XDANBgkqhkiG9w0BAQsFAAOCAQEAZxoP5/oYCBg1tK+mR5DKwtbYKC76
dh1qOAgj/Pqpb8MbwH5sreb/VYNU+Mg8ZmYaUu8dUUHVygLxS74PQpCQ06hmF5ru
vLel25hQSK0qOV+Rk9z6gHQiaeqTRsh9Whxlbx2I7YfY4zdfaUingd8YhN8HOqkJ
FuN5l+Idy/4OcSmA6TBNnMmwk8/Acwj0oaIRALQDMkpigjAVxL6fWG+7qFafEvJl
ZlsxEfMZOy+rYv4NqGMauhAs2aX75GPJffDE61NWY9vp92z7USIYRtw+UsWnUc36
Z947tt51MpKWbhY4OJt7olmLQIh5bLNyLEmiMbQvRUOS+MDqZ/50aXqvOQ==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:31 2026 by rpki-client