
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e203633363333.roa
File: 34352e3235342e382e302f32342d3234203d3e203633363333.roa (raw, json)
Hash identifier: 2wyVk8ZYds07gMgFgv5tN5PEVXabnwJjCcdDeX5PRh4=
Subject key identifier: 45:35:E5:E7:E4:31:4F:46:7F:66:95:E5:8C:AD:2C:48:9F:89:18:BF
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 3E760CE2FF53735C8A2B9221FDDC510BBC5F7DC6
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e203633363333.roa
Signing time: Tue 23 Jun 2026 13:06:08 +0000
ROA not before: Tue 23 Jun 2026 13:01:08 +0000
ROA not after: Tue 22 Jun 2027 13:06:08 +0000
asID: 63633
IP address blocks: 45.254.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:76:0c:e2:ff:53:73:5c:8a:2b:92:21:fd:dc:51:0b:bc:5f:7d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jun 23 13:01:08 2026 GMT
Not After : Jun 22 13:06:08 2027 GMT
Subject: CN=4535E5E7E4314F467F6695E58CAD2C489F8918BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d0:f6:08:30:7b:b4:41:e8:ac:6c:a2:77:44:
85:ed:8c:5a:2c:ea:8d:55:01:f6:ba:65:e0:0a:23:
0c:f9:78:18:8c:2e:97:85:3b:7d:84:f0:aa:89:60:
76:44:a2:ab:eb:70:5a:0b:c8:19:af:62:4e:03:b3:
0c:16:bc:b7:ba:f8:7b:14:63:96:60:34:43:db:cc:
0f:24:de:44:f6:64:30:4d:95:3d:e0:e7:7a:63:ce:
b6:2e:20:37:88:f8:a8:b5:74:5d:51:46:47:f4:1c:
ae:c5:2d:29:93:b9:76:27:03:09:7e:19:d1:72:92:
18:fb:ef:d2:7b:89:a8:53:e9:2a:a7:2a:f4:05:f7:
e3:83:5e:a9:4e:2a:d1:c9:21:23:13:5c:76:62:36:
4b:18:d5:e3:32:b7:1e:8c:d6:d0:c4:0f:44:85:44:
64:e1:97:99:ec:1b:b3:75:49:05:20:08:99:4c:df:
20:4d:71:d4:3e:60:e7:de:d4:5e:21:0a:f2:eb:f6:
06:d1:f2:09:08:2e:e4:37:b5:94:b0:f8:98:07:02:
bc:2a:83:a2:90:57:d4:40:d8:06:8d:87:82:69:75:
b1:fb:bf:42:ed:79:6d:3a:35:d9:3a:4e:17:82:f0:
1c:cd:10:a8:22:aa:b1:b3:3c:55:59:b1:b8:92:53:
b8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:35:E5:E7:E4:31:4F:46:7F:66:95:E5:8C:AD:2C:48:9F:89:18:BF
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235342e382e302f32342d3234203d3e203633363333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.254.8.0/24
Signature Algorithm: sha256WithRSAEncryption
87:8a:e7:4e:80:16:06:c7:d0:2c:6b:f0:30:be:ed:6c:0f:87:
98:86:a1:49:90:10:17:62:f8:5d:35:f2:8a:78:30:21:46:54:
50:d8:2d:d6:f6:5d:5a:85:b3:0b:11:89:5b:da:85:cc:07:4c:
54:35:33:c8:95:2c:5e:24:34:51:da:f8:d8:35:22:91:22:52:
cd:ed:24:a4:63:0a:b7:93:0a:39:a3:d8:4e:b7:bc:31:42:df:
cd:53:36:45:9c:26:83:dd:6d:1e:d8:7d:70:1a:2c:90:b6:68:
b6:82:cb:a5:4b:15:12:b8:9b:a9:5a:c1:09:1d:2e:9a:4b:fb:
34:b4:f6:32:a1:46:f5:e7:c1:b3:9a:d0:25:9b:a2:02:8b:df:
12:73:4a:16:33:71:79:6e:90:33:84:ba:7a:ce:df:ce:73:cd:
14:69:51:56:77:19:03:f8:89:9b:f3:d7:ee:d2:74:df:7c:39:
f7:f9:00:3a:a7:7b:ef:64:db:c2:ed:7f:6f:4d:f9:4c:f2:c8:
6e:b2:3f:c0:4b:33:c1:1d:51:5f:4c:1f:02:26:54:1a:98:e4:
73:cb:a7:8f:17:ef:64:ca:ad:72:e1:6a:6e:f3:4d:21:39:f1:
4b:1d:7d:3d:33:b9:60:16:9d:bc:c1:2c:92:f2:ba:eb:47:fb:
ae:f6:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:13 2026 by rpki-client