
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36302e302f32332d3332203d3e203633363231.roa
File: 34352e3235332e36302e302f32332d3332203d3e203633363231.roa (raw, json)
Hash identifier: h3hgYMM6wscWMHWADwo0yl9qLdr18NnGzf8c0YA7qFo=
Subject key identifier: 25:D5:0B:9D:A1:F2:9C:B9:70:11:D3:E9:23:B2:7B:16:42:FF:08:A0
Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial: 47C16FCF867488F16D7C681E9F85A2136BDC1169
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36302e302f32332d3332203d3e203633363231.roa
Signing time: Fri 29 May 2026 10:05:07 +0000
ROA not before: Fri 29 May 2026 10:00:07 +0000
ROA not after: Fri 28 May 2027 10:05:07 +0000
asID: 63621
IP address blocks: 45.253.60.0/23 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:c1:6f:cf:86:74:88:f1:6d:7c:68:1e:9f:85:a2:13:6b:dc:11:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Validity
Not Before: May 29 10:00:07 2026 GMT
Not After : May 28 10:05:07 2027 GMT
Subject: CN=25D50B9DA1F29CB97011D3E923B27B1642FF08A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:ce:b3:a0:cd:43:19:47:9e:48:bf:48:8c:
6d:5a:ed:33:71:1f:56:de:f7:2e:30:f2:5f:c2:ab:
10:79:e8:24:28:a0:bc:32:f1:7a:d2:b7:ba:47:fe:
7a:7b:9c:9c:01:6d:6b:8f:7c:2e:39:75:b5:59:76:
e0:20:f3:b5:19:43:96:c9:03:9d:08:2d:cb:27:6b:
b7:45:e2:4a:9e:67:8f:04:3e:63:77:a3:d0:fa:17:
03:d1:96:6b:2f:68:18:4d:a7:76:1d:ca:7d:63:9a:
ed:dc:e1:51:ce:d6:64:13:d6:20:cc:5b:d6:0e:10:
6f:95:ae:7e:69:3e:d4:fb:ac:5b:63:59:e6:8a:47:
20:03:f0:30:c9:9b:ed:f5:2b:bb:bf:a4:22:38:da:
8b:f9:70:5d:02:8f:0c:ae:b3:2f:08:ea:8f:d7:d6:
b9:47:5d:df:55:47:82:de:df:bd:fd:0e:39:56:5e:
0e:00:d4:f2:7d:6e:3e:61:9d:fd:75:19:9c:c3:72:
f3:9f:7f:ed:af:92:38:53:8c:3c:9c:19:c5:8a:56:
21:e0:06:22:bb:db:8e:14:2f:e0:bc:32:14:9c:04:
de:46:2a:e0:2c:f0:52:cc:0c:81:06:9d:cd:d4:bc:
80:5a:1d:04:2b:e0:bf:22:25:b9:cd:d5:99:67:b7:
27:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:D5:0B:9D:A1:F2:9C:B9:70:11:D3:E9:23:B2:7B:16:42:FF:08:A0
X509v3 Authority Key Identifier:
keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36302e302f32332d3332203d3e203633363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.60.0/23
Signature Algorithm: sha256WithRSAEncryption
83:e8:3b:13:d4:44:15:b2:54:02:7a:70:b7:57:59:e0:45:1c:
02:7c:82:ba:6f:ae:ab:15:52:54:c1:56:e1:38:c8:08:84:90:
66:cf:81:94:7d:1c:db:bf:fc:cf:1e:81:5e:4b:45:5c:14:4c:
bd:a1:47:0a:b8:c4:e3:30:53:5f:3d:9e:d0:3a:ca:d2:40:b7:
9b:a4:c4:62:5d:e3:0d:04:c5:bb:7b:c8:88:90:2c:47:2e:5f:
1d:1f:16:f9:0d:23:34:e4:12:7d:86:7c:86:04:b8:c2:c8:84:
bf:e6:0d:6f:40:9e:2c:3f:37:81:7b:75:15:ca:c6:f7:47:e2:
95:f9:de:1f:b5:29:21:32:ba:e9:00:19:e2:78:81:35:78:ee:
52:b0:20:c3:66:96:5a:03:35:78:20:fb:fb:5b:c7:61:f8:95:
45:f4:06:08:b2:28:58:1b:ce:69:d2:00:f2:88:41:d7:78:e8:
b1:07:1e:b4:d6:8f:ab:bc:6f:b1:9f:1a:3b:7f:4e:92:91:d5:
7a:6e:59:bb:3b:8f:42:bd:6f:86:c4:80:9a:7f:20:c3:b5:c4:
c5:72:94:f4:23:75:c1:62:86:32:dc:98:60:47:68:bd:ea:ae:
fe:32:95:89:e4:bb:ca:71:c5:13:31:bb:d3:d5:f2:cd:44:07:
e4:a2:ea:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:16 2026 by rpki-client