
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32312e302f32342d3234203d3e2034383437.roa
File: 34352e3235312e32312e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: LOaqTKAEmoOVoiLTuA0iQedWss36dxMqKKMEM3S6rp8=
Subject key identifier: 65:09:69:A6:F7:DF:4A:81:57:8F:67:4B:16:6F:67:F5:9A:9C:7C:7B
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 3133109F18E7AF4CB19B3D9F339F487D45C58A97
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32312e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:04:51 +0000
ROA not before: Thu 04 Jun 2026 08:59:51 +0000
ROA not after: Thu 03 Jun 2027 09:04:51 +0000
asID: 4847
IP address blocks: 45.251.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:33:10:9f:18:e7:af:4c:b1:9b:3d:9f:33:9f:48:7d:45:c5:8a:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:59:51 2026 GMT
Not After : Jun 3 09:04:51 2027 GMT
Subject: CN=650969A6F7DF4A81578F674B166F67F59A9C7C7B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:33:03:44:dd:f6:66:70:08:de:59:14:cd:1e:
2d:fa:8e:18:4b:25:c9:9f:c4:ae:78:b4:e8:e4:bf:
19:b0:1c:05:28:a6:36:8c:8c:da:c9:2a:45:4a:48:
81:f5:3c:b0:f8:ee:61:92:9b:bb:e1:37:bb:9a:60:
f6:d1:3a:57:6e:07:bf:7c:05:60:3b:5f:a6:22:72:
ea:6b:4f:f7:b6:7b:c4:f2:51:59:e0:12:a3:5a:fe:
81:33:6d:5c:41:d6:47:b8:95:72:fc:51:34:ff:7d:
37:07:ca:4b:b0:7b:0c:09:b8:d8:0b:da:53:08:5f:
4b:1c:66:64:c8:4f:2f:93:5d:30:8c:54:97:ae:79:
94:d1:29:5c:7f:c0:26:d5:c7:26:f6:7a:50:e1:94:
ee:fc:3c:36:be:68:f9:1e:8a:03:c5:85:9a:22:30:
6c:0a:e0:ec:e5:35:db:cf:2f:a7:2c:ad:8d:ba:66:
9f:62:1f:0f:c4:a0:28:3e:13:11:13:e2:01:3e:89:
ce:00:e1:95:8c:d0:67:76:9b:b4:20:3a:16:aa:be:
46:0a:c8:9c:5b:b2:44:b8:f4:93:e8:b9:56:94:18:
64:61:55:42:76:92:af:a1:2d:38:75:08:67:bc:55:
9d:9c:40:f3:6f:0d:10:79:39:63:72:27:13:a8:80:
ef:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:09:69:A6:F7:DF:4A:81:57:8F:67:4B:16:6F:67:F5:9A:9C:7C:7B
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32312e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.21.0/24
Signature Algorithm: sha256WithRSAEncryption
18:fd:5f:f9:be:35:31:ba:6f:8b:79:29:0b:ff:ca:a4:ad:69:
51:62:da:94:fb:6a:06:9d:83:91:39:79:c0:7c:8c:17:1c:29:
97:9e:28:da:f5:82:32:eb:94:7f:cc:55:fc:89:e6:fc:22:af:
0b:84:25:08:de:4c:fe:1c:53:54:68:06:50:5c:26:b6:8d:0a:
93:14:53:07:f2:f0:6e:70:25:28:4a:21:39:89:45:e4:08:87:
a1:20:d2:26:ae:83:cc:cd:8a:f7:b3:de:b1:ec:27:d4:f5:1c:
17:f3:f4:a5:f9:6e:99:36:43:70:8f:45:31:b1:5b:7d:1c:e7:
8a:e9:ef:9a:0c:be:e8:06:2e:78:c1:ba:32:b0:db:ee:85:b2:
88:ec:4e:aa:6f:90:1c:c4:e0:db:d7:3f:a8:34:57:fe:07:19:
45:22:f8:80:6d:6d:7f:fa:c8:33:aa:12:e6:d7:3b:4d:38:cd:
11:60:d1:1e:22:f8:d3:ad:c3:18:f2:1d:82:8b:73:89:02:14:
cc:b8:d3:9a:96:e7:19:04:cc:8d:0a:31:c0:ee:53:df:8e:9d:
5c:68:b6:60:42:16:33:8a:0c:8b:26:ee:4d:dc:24:9e:b0:ee:
81:6b:78:fe:ad:26:1c:82:2e:74:9a:cb:e8:d8:fe:28:58:6e:
9f:84:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:05 2026 by rpki-client