
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32322e302f32342d3234203d3e2034383437.roa
File: 34352e3132342e32322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: k8qbD1pZsJLTL4HS5XDDeCa1ZCg7eDrxW9hBG19DvoI=
Subject key identifier: BD:C2:60:72:3A:C6:04:9B:66:2B:19:20:6C:F1:33:80:A7:05:78:07
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 1086D75127740CC2AA166F12E89585F6D7634927
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32322e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 08:48:48 +0000
ROA not before: Thu 04 Jun 2026 08:43:48 +0000
ROA not after: Thu 03 Jun 2027 08:48:48 +0000
asID: 4847
IP address blocks: 45.124.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:86:d7:51:27:74:0c:c2:aa:16:6f:12:e8:95:85:f6:d7:63:49:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:43:48 2026 GMT
Not After : Jun 3 08:48:48 2027 GMT
Subject: CN=BDC260723AC6049B662B19206CF13380A7057807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:c2:ff:de:8b:c5:6c:d7:17:42:d1:41:ab:
da:31:c2:4d:ab:aa:8f:7a:84:ba:61:9e:23:9a:1f:
b1:77:a8:69:99:88:5e:ce:5d:d6:5f:b7:2a:1a:0a:
79:c6:4a:48:bc:6b:bb:15:8e:c2:38:5f:d2:82:cd:
bd:49:a9:7a:ed:aa:84:63:d7:41:0c:7c:af:c2:a7:
d6:38:ae:b4:ac:40:bd:c4:72:49:69:16:64:54:ee:
29:ed:e8:2e:0b:4c:a5:2e:67:b9:f1:d9:ef:34:64:
0a:9d:8e:05:d2:e0:a3:6e:13:0b:41:3c:87:8e:a0:
b7:de:b5:49:f0:46:4a:47:1e:fc:2a:b0:12:5d:af:
91:ab:9c:26:b5:a6:ad:2f:01:70:f8:5a:cf:a2:0a:
60:b0:ff:99:d3:8f:65:99:01:1d:97:11:32:8f:f7:
f5:d3:4f:21:2a:c1:1d:14:a5:c6:c9:6e:62:7d:fd:
be:4f:6e:6d:4c:d0:fb:29:e7:1e:da:5b:26:f5:35:
d4:6e:19:64:df:c4:5e:7d:57:1c:84:8d:81:af:ea:
49:94:13:f5:e5:2b:dc:3b:4f:a6:e8:08:f3:8d:a2:
ca:01:40:fb:7c:e7:79:87:8a:83:16:b4:53:e1:a4:
c2:73:b5:8d:66:6c:47:b3:cd:1a:83:e8:ca:1a:60:
9b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C2:60:72:3A:C6:04:9B:66:2B:19:20:6C:F1:33:80:A7:05:78:07
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3132342e32322e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.22.0/24
Signature Algorithm: sha256WithRSAEncryption
21:f9:30:ce:c2:8b:af:dd:79:ef:36:f1:e1:19:6b:e3:b9:b4:
d3:9a:98:2d:33:a7:bc:76:75:7c:79:9f:3c:b4:aa:e1:59:31:
60:8d:cd:5a:11:aa:28:d1:3c:99:4f:7e:c4:bd:7e:88:a2:b2:
f6:07:10:28:3c:11:72:af:73:fd:f6:b7:99:e3:55:f3:4a:37:
67:77:a8:56:74:e2:9f:45:4c:bd:66:db:d2:91:1c:db:85:88:
59:cc:ae:c1:fa:20:42:d1:74:3c:11:28:75:ea:a3:d7:93:24:
3c:dd:08:ab:a4:e0:de:45:ca:9e:1d:cb:6c:81:aa:b9:a9:15:
52:62:65:1f:00:4c:e3:5a:27:07:b0:06:db:28:1c:21:79:fb:
09:db:d9:48:35:4a:b7:fc:1e:38:a7:6b:2e:16:c2:c3:2f:1c:
0b:59:bd:23:d5:bd:52:05:10:25:4f:f3:39:6c:1a:c9:3d:b0:
eb:da:30:4c:39:c6:43:74:0e:b9:a7:82:e7:19:0b:10:39:27:
00:0f:95:1e:02:d0:75:bb:db:22:ac:60:3d:c7:9b:8e:e1:68:
62:7c:a6:c1:23:03:96:94:c5:65:b3:a2:a0:2f:56:bb:f2:1a:
99:b6:8d:23:c9:f3:b2:d4:97:88:c4:f2:ff:11:f4:53:36:13:
dd:14:61:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:23:51 2026 by rpki-client