
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32302e302f32342d3234203d3e2034383437.roa
File: 34352e3132342e32302e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: 7Ai5355UCmtNkZAudgsxmPeA4qw8KrEHxgbTkFG5WHc=
Subject key identifier: 26:D6:65:5A:1F:57:1C:9D:88:70:43:AD:D5:F6:47:30:44:3D:39:5E
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 4EEACDDF0388673BF2CAAAAFB1D80C9696A21D50
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32302e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 08:49:04 +0000
ROA not before: Thu 04 Jun 2026 08:44:04 +0000
ROA not after: Thu 03 Jun 2027 08:49:04 +0000
asID: 4847
IP address blocks: 45.124.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:ea:cd:df:03:88:67:3b:f2:ca:aa:af:b1:d8:0c:96:96:a2:1d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:44:04 2026 GMT
Not After : Jun 3 08:49:04 2027 GMT
Subject: CN=26D6655A1F571C9D887043ADD5F64730443D395E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:38:5c:b6:cc:bb:2a:6d:54:4f:17:d2:d7:07:
9b:96:1a:c4:1e:27:3b:7a:06:d1:b2:a2:9d:57:3f:
5f:21:94:8e:88:59:6f:c1:fd:98:0a:6f:6b:a2:05:
1b:ab:19:07:ad:fa:46:63:b4:be:5f:3b:61:82:19:
87:d4:a0:3d:3b:d7:9f:84:07:8b:5f:ff:e9:30:e5:
f0:e7:76:e2:c8:d4:49:ba:d1:e5:6b:c7:03:bb:34:
a2:5e:b4:3e:87:1a:d8:97:78:1c:06:a3:ad:b6:21:
e6:49:82:b5:dd:db:19:a7:b5:24:99:cc:c6:1f:4c:
bb:e6:8b:37:56:b0:95:df:f7:a9:bc:c5:ad:34:45:
4b:c9:0c:f1:de:cb:ae:ec:50:79:5d:ba:b0:7e:98:
94:3d:c8:d4:9d:06:1c:46:7e:56:38:12:88:e2:bb:
7b:51:42:f0:36:36:fc:ff:89:e1:57:f9:25:a7:76:
7d:f6:24:d0:8e:e7:da:38:2a:35:17:6d:ac:01:ff:
07:5e:be:d3:b3:2d:c0:48:85:16:72:ff:fa:26:e0:
96:cf:c8:98:f0:8c:38:fd:68:7b:a1:5d:27:3b:d7:
44:9b:ce:56:d4:ff:47:a2:c3:7c:28:ad:86:d3:55:
b2:74:f8:02:2b:ea:b7:49:9a:f2:dc:9a:27:d9:cd:
b1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:65:5A:1F:57:1C:9D:88:70:43:AD:D5:F6:47:30:44:3D:39:5E
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32302e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.20.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0b:8f:d4:a3:6f:19:b1:05:32:f0:42:70:69:7c:ec:f5:57:
f8:7f:2b:dd:59:37:50:b0:8c:ad:73:10:02:0d:73:e6:da:09:
38:b4:7f:c3:a2:8c:a6:9a:5d:b3:8a:c7:8c:fc:24:eb:e4:41:
d1:de:15:a8:a8:f7:f3:b9:a3:a5:46:fe:06:48:f1:19:20:a3:
e4:47:d2:7e:2d:49:d9:c5:65:ea:b6:2a:48:00:54:d6:fe:3e:
01:15:60:b8:c8:18:83:5f:03:03:31:8b:27:15:cd:6e:6f:0e:
f8:15:18:f4:7a:03:b1:04:0b:3f:2f:6f:83:b3:81:b8:7b:2f:
6f:c5:a0:4d:e1:18:05:28:01:c1:a3:89:9f:d0:b2:08:79:87:
27:a9:23:e3:30:9f:3d:f3:1a:1f:2a:50:34:3f:b8:d4:06:74:
0b:8a:8f:e4:7e:75:6f:3d:23:6e:4f:73:cd:1c:d2:13:32:54:
e9:d1:43:b5:dc:fd:73:e4:ab:76:61:4d:89:75:4a:33:d6:74:
14:d1:39:83:e9:9d:55:c4:46:f1:49:1a:a1:0e:49:c6:d6:56:
7e:b3:ed:99:2f:89:72:e8:07:04:61:aa:a9:4f:e5:29:c4:b2:
ce:0b:3d:55:f4:61:85:aa:78:11:06:12:92:da:e7:28:99:51:
9e:08:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:32 2026 by rpki-client