
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32302e302f32322d3234203d3e2034383437.roa
File: 34352e3235312e32302e302f32322d3234203d3e2034383437.roa (raw, json)
Hash identifier: gWFtTaANcLtZ4SZqDjr2odDyJiaeryVHzUzUZ3owqKE=
Subject key identifier: 1E:11:7D:62:6C:A7:F3:30:79:BA:61:E1:6A:51:CA:C1:60:C4:68:0A
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 2F2B15B7FFD54CC4C92444F9D25CE81CCA7B8387
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32302e302f32322d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:03:19 +0000
ROA not before: Thu 04 Jun 2026 08:58:19 +0000
ROA not after: Thu 03 Jun 2027 09:03:19 +0000
asID: 4847
IP address blocks: 45.251.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:2b:15:b7:ff:d5:4c:c4:c9:24:44:f9:d2:5c:e8:1c:ca:7b:83:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:58:19 2026 GMT
Not After : Jun 3 09:03:19 2027 GMT
Subject: CN=1E117D626CA7F33079BA61E16A51CAC160C4680A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:15:08:d8:e8:48:14:18:21:10:bc:e2:c9:12:
48:b2:ff:75:d1:83:59:96:22:c6:07:77:b5:97:0a:
2c:aa:bc:3b:4c:26:54:ec:6d:78:59:b6:97:c0:0a:
d3:c8:8e:cf:34:c9:87:7b:9a:72:c4:04:18:58:f2:
cb:99:98:a7:fd:57:c3:85:1e:5f:b1:d3:4c:e1:0e:
b7:78:c1:5d:54:71:b1:8f:54:b7:2d:46:82:f5:95:
31:64:71:33:3d:03:c8:ed:bb:57:11:f1:2d:8d:6c:
ca:fe:d2:51:bb:c3:1a:30:7f:b9:6a:83:c7:6b:2b:
4a:3f:66:a2:75:39:91:26:7a:e6:24:6c:fe:80:59:
f5:ef:cf:8e:b6:4c:5a:0b:6d:dd:db:5b:19:49:90:
b5:ce:99:95:34:e2:bd:a8:75:81:ee:bb:05:51:2d:
6b:15:eb:32:8d:33:b9:8f:a3:81:bc:5d:a7:bb:ca:
33:95:87:7e:a5:a7:ed:fc:8f:81:8d:2d:d4:06:bf:
61:1f:28:c9:bf:fa:98:28:37:48:f8:42:23:9c:82:
f1:4b:d5:40:6c:13:66:0c:6b:ee:5f:cf:c6:02:86:
68:5c:f5:28:94:3e:1c:bd:81:c1:67:b7:00:25:d9:
1d:49:28:a3:a8:c9:18:56:25:ee:27:9c:a1:0f:be:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:11:7D:62:6C:A7:F3:30:79:BA:61:E1:6A:51:CA:C1:60:C4:68:0A
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32302e302f32322d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.20.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:85:25:48:ce:f7:a4:21:d2:ab:61:8c:4a:19:41:ea:6f:24:
0c:0a:20:60:8d:91:9d:d0:04:38:20:50:e4:df:f8:67:45:61:
dd:02:91:fd:49:a6:4b:d0:98:42:e4:bb:94:46:a0:5c:dd:0a:
ad:58:86:04:98:70:21:a3:5e:e5:1e:b9:db:49:9b:97:58:e0:
04:dc:de:00:cd:e4:f2:d2:74:b1:61:78:a4:0c:da:9c:e1:48:
6c:7e:c1:5c:1b:be:0a:69:02:50:d3:a0:3c:0d:9f:77:33:31:
1a:0c:33:42:bd:57:4a:88:f8:8b:55:61:c8:9a:e1:2d:da:3b:
78:22:95:aa:0d:24:23:98:1e:62:a7:88:6a:af:14:ac:3a:59:
4e:6c:74:ad:5f:25:48:d2:ca:44:ee:68:a8:7b:3f:62:f5:2b:
9a:e9:32:b8:1c:bc:2e:00:46:b1:c7:73:3c:22:18:19:45:4d:
19:40:f5:bf:f0:15:cd:6c:8d:7d:ef:ff:27:2b:a9:68:a4:f9:
36:31:a6:8f:50:11:1a:8b:15:76:6b:28:e5:94:de:14:de:e3:
4b:2c:19:a0:77:19:d5:b7:ff:7c:24:3c:3b:13:e4:67:4e:b5:
fe:27:7e:02:03:47:9b:8a:2a:cc:d7:5f:94:df:ac:ae:ad:df:
ee:e2:de:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:07 2026 by rpki-client