
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32322d3232203d3e203633363333.roa
File: 34352e3235342e382e302f32322d3232203d3e203633363333.roa (raw, json)
Hash identifier: QtpkCaAbIIcmF/w+6AQIgwsDzeZjED0NUe3lVS+FSxI=
Subject key identifier: 80:2C:AA:A5:5E:88:78:CB:1F:3F:97:EC:7C:30:4A:9B:89:34:93:1C
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 60ED1128604A4419984D91C45E64458A71C98448
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32322d3232203d3e203633363333.roa
Signing time: Tue 23 Jun 2026 13:11:35 +0000
ROA not before: Tue 23 Jun 2026 13:06:35 +0000
ROA not after: Tue 22 Jun 2027 13:11:35 +0000
asID: 63633
IP address blocks: 45.254.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ed:11:28:60:4a:44:19:98:4d:91:c4:5e:64:45:8a:71:c9:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jun 23 13:06:35 2026 GMT
Not After : Jun 22 13:11:35 2027 GMT
Subject: CN=802CAAA55E8878CB1F3F97EC7C304A9B8934931C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:01:eb:98:97:1d:eb:b3:12:10:fa:ef:6a:
c7:f3:db:c6:97:4d:a1:a3:bc:c4:3a:8a:c4:ed:12:
2c:16:b6:cc:16:78:af:65:f2:18:18:53:de:8d:f1:
f5:e5:82:56:bb:25:1a:50:18:e5:e2:1e:7b:a2:40:
2c:61:48:d9:7f:24:63:92:63:10:b5:d0:47:c9:76:
98:e0:c9:d7:ce:31:8a:b3:04:d4:9a:a6:1f:d7:20:
5c:c3:df:b4:bb:d5:9e:a3:48:ca:8d:13:e7:89:57:
b5:9a:f3:4a:a1:78:27:eb:71:27:99:b0:32:14:21:
d5:e3:3a:d5:c6:ae:81:32:e8:08:a2:a0:25:8b:eb:
39:99:62:b4:76:7b:6e:81:22:b6:dc:92:ab:0e:5b:
44:c8:e1:21:b7:37:e4:df:b4:d8:89:7f:8d:21:bf:
bd:e1:6b:86:a9:21:2f:03:aa:c2:45:42:1a:3f:b0:
6d:03:7e:28:61:db:04:ac:56:88:c1:58:8c:b2:5f:
1d:fb:cc:1b:62:67:11:97:36:8e:0b:14:92:6f:6f:
09:1f:c6:44:ea:60:93:39:17:ca:c1:11:7a:b0:9f:
99:26:b7:20:5f:8c:b3:a3:63:da:e3:4c:ea:38:13:
a5:9c:d9:a8:c0:d9:73:41:a3:39:96:e8:44:de:38:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:2C:AA:A5:5E:88:78:CB:1F:3F:97:EC:7C:30:4A:9B:89:34:93:1C
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32322d3232203d3e203633363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.254.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:b7:5b:9b:e0:1d:d6:44:5f:96:55:a1:ff:28:5d:ae:89:16:
e9:82:81:39:4d:9d:1a:f3:8e:cc:24:e0:b5:1a:75:62:ae:0b:
0a:02:59:14:e8:42:2a:1c:08:f1:93:5f:98:e2:89:2a:25:17:
e0:e6:f6:fc:34:b3:be:85:56:ca:35:e1:0b:2b:4c:56:c7:d2:
73:64:b5:fe:f7:54:4f:8c:ad:a0:c7:19:5f:2e:af:dc:3a:81:
e5:e0:9f:d2:9f:dd:5f:22:6a:69:e8:95:7a:4a:16:37:b2:97:
c1:e2:3e:80:2f:44:28:36:8a:43:5d:de:30:54:ad:dd:b2:44:
4b:b4:dd:6d:39:16:ee:75:8f:1a:40:34:81:d8:2b:87:84:9b:
6d:a7:00:79:38:53:86:d3:6f:02:44:dd:38:a7:ba:cd:f1:c3:
68:9f:e3:82:88:5b:79:08:16:14:16:45:91:c0:b2:51:08:69:
fd:ea:1b:e1:51:42:91:65:91:29:9f:08:08:a9:d5:45:59:eb:
08:c1:fc:e7:d3:b1:2d:69:61:f3:32:b5:de:a3:44:0f:0d:33:
63:8c:4e:0c:7d:c2:0e:cf:8f:2f:4e:8f:9d:e2:4d:52:3a:75:
52:c1:77:e0:a0:c5:55:49:b4:f1:6c:69:fd:53:76:15:77:c9:
36:ca:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:18 2026 by rpki-client