
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36322e302f32342d3332203d3e203633363231.roa
File: 34352e3235332e36322e302f32342d3332203d3e203633363231.roa (raw, json)
Hash identifier: 64gxrmcWCGFymrozTJAeOwyiWTaSxZbZumF/VaNZJYI=
Subject key identifier: C1:1F:D8:EB:54:99:3D:36:DA:DC:B0:B5:1F:CA:AF:19:84:16:BF:9B
Certificate issuer: /CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Certificate serial: 11279AA5C6E7074B65FC32745FDD5ABB07B3C07A
Authority key identifier: 32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36322e302f32342d3332203d3e203633363231.roa
Signing time: Fri 29 May 2026 10:04:06 +0000
ROA not before: Fri 29 May 2026 09:59:06 +0000
ROA not after: Fri 28 May 2027 10:04:06 +0000
asID: 63621
IP address blocks: 45.253.62.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 10:53:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:27:9a:a5:c6:e7:07:4b:65:fc:32:74:5f:dd:5a:bb:07:b3:c0:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320188B3FA38DA0F4192F7201AD7D377656BF5C0
Validity
Not Before: May 29 09:59:06 2026 GMT
Not After : May 28 10:04:06 2027 GMT
Subject: CN=C11FD8EB54993D36DADCB0B51FCAAF198416BF9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:e6:5e:f8:8d:35:62:6f:bb:7f:01:cd:23:
9b:b9:87:b2:ba:7d:66:db:1e:b6:6f:5d:b4:0e:5a:
53:69:ce:65:6c:35:e7:88:dc:26:1a:55:9b:88:ba:
2e:82:e6:37:49:fe:66:c6:d9:70:5e:c9:11:f0:db:
60:b5:31:17:a6:7e:c4:89:40:79:b3:dc:aa:98:14:
21:f0:a3:71:25:9e:8d:f4:81:93:68:33:0a:88:a7:
9f:a3:0d:6b:b2:0b:34:02:76:04:0e:38:35:70:ba:
43:5a:fd:90:90:a1:52:28:92:6f:94:e7:cd:87:e1:
df:49:eb:d3:52:30:88:63:11:b3:0e:98:78:d4:43:
7f:de:45:b2:8a:b2:ca:54:d9:65:e1:ae:57:8f:1f:
22:83:52:aa:1a:19:6f:2a:d2:93:c5:1c:63:4f:a5:
e1:cd:5a:aa:8b:b4:76:08:b5:fa:e1:47:2b:c4:2a:
88:14:3f:c9:a0:bf:c6:2e:d2:f0:e6:21:f0:46:4b:
73:1b:a6:40:25:41:3f:41:f1:fd:82:06:e0:1d:6c:
43:ae:2b:bc:d9:25:84:77:39:f9:b5:b0:fd:98:3e:
0e:76:27:29:46:05:c1:96:ef:27:c3:ea:5f:a5:0c:
b1:ea:ad:c1:ea:fa:b4:35:b4:c7:e8:fb:bc:fe:36:
e1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:1F:D8:EB:54:99:3D:36:DA:DC:B0:B5:1F:CA:AF:19:84:16:BF:9B
X509v3 Authority Key Identifier:
keyid:32:01:88:B3:FA:38:DA:0F:41:92:F7:20:1A:D7:D3:77:65:6B:F5:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/320188B3FA38DA0F4192F7201AD7D377656BF5C0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/320188B3FA38DA0F4192F7201AD7D377656BF5C0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112680023891902481/0/34352e3235332e36322e302f32342d3332203d3e203633363231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.62.0/24
Signature Algorithm: sha256WithRSAEncryption
97:ad:d2:83:ff:21:62:11:48:75:2a:a3:d7:c9:0e:43:a0:0b:
8e:7f:19:d1:66:3f:6f:ed:c7:1d:10:6e:7b:d5:c3:f5:15:de:
8c:21:d1:35:4e:9c:ec:97:b4:d4:0a:cb:01:f1:7f:7e:2d:ad:
d8:9c:3e:44:9e:08:9a:6b:58:20:a6:c2:13:34:09:4f:97:dc:
8b:ce:08:5c:4a:fa:89:c6:a4:74:a2:6e:67:39:76:0d:70:a6:
39:26:c5:16:38:82:2d:7f:4a:21:81:cf:e5:6b:4a:c4:77:55:
b2:4e:fb:25:f9:53:0f:dd:1a:7e:10:c6:a2:b5:19:be:7e:61:
bc:30:ce:4b:a6:93:6d:d2:51:80:c2:d8:0b:8f:30:4f:61:c3:
7a:53:5e:24:15:ab:32:fe:ad:3c:db:7d:4e:e5:c7:77:b0:e1:
ad:a0:8e:fd:fd:12:9a:ee:a8:f7:36:32:de:13:6a:76:b3:cf:
d2:93:f8:f3:25:79:93:7a:e5:59:a8:39:5d:ef:8e:7c:fb:48:
fe:84:71:f4:16:6f:7c:22:66:99:77:51:77:9a:e7:aa:37:f4:
13:cb:a2:51:7f:6b:97:dd:06:67:5d:dc:e5:53:cb:3b:d5:8b:
f5:ed:9c:83:2e:fc:bb:c2:d4:dd:74:84:7b:ef:15:47:d6:4b:
14:12:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:52 2026 by rpki-client