
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32332d3234203d3e2034383437.roa
File: 34352e3235312e32322e302f32332d3234203d3e2034383437.roa (raw, json)
Hash identifier: yTSFlG0WctUYfrNdR3l+9L/g6txY49ScGaIjbWDt9wk=
Subject key identifier: 43:2D:78:66:98:89:FA:6E:38:03:D8:27:4E:55:2E:A0:F2:0B:E8:D5
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 456A9EE61AED0A628A851FE0D314D7E8ABAB28BC
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32332d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:04:14 +0000
ROA not before: Thu 04 Jun 2026 08:59:14 +0000
ROA not after: Thu 03 Jun 2027 09:04:14 +0000
asID: 4847
IP address blocks: 45.251.22.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:6a:9e:e6:1a:ed:0a:62:8a:85:1f:e0:d3:14:d7:e8:ab:ab:28:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:59:14 2026 GMT
Not After : Jun 3 09:04:14 2027 GMT
Subject: CN=432D78669889FA6E3803D8274E552EA0F20BE8D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:28:ec:74:8c:82:64:e8:08:60:74:2a:03:ee:
cd:87:0a:3b:8b:a5:47:71:8a:63:d3:40:3e:b4:d5:
e7:70:50:4b:3e:e0:3e:82:db:07:a3:01:bb:25:6a:
82:89:8a:8d:11:fb:8c:f2:90:88:71:2f:a4:62:17:
06:72:2a:86:1c:1a:e3:10:63:af:fc:28:68:6f:e6:
34:74:59:84:f7:f3:b7:53:00:df:a6:2d:d3:d0:82:
66:33:5c:88:fe:40:d0:dd:83:9a:8a:a8:a4:1d:ab:
c6:9d:2b:80:55:d6:65:4c:4c:57:80:be:30:c2:19:
8c:1a:77:c4:02:51:df:be:55:b0:82:32:77:d5:c9:
f1:98:64:17:7e:26:7e:77:b7:4f:e3:3b:e2:1c:87:
2f:75:44:ef:c9:36:ff:13:8c:b3:d3:d0:41:42:5b:
c6:2c:12:4c:ef:e6:50:80:41:ca:f0:96:71:2a:b0:
0e:b5:9f:9b:4a:26:46:93:82:c3:ad:8f:7a:18:c8:
8a:cc:a1:89:a0:88:af:5a:15:76:d5:c1:d8:f8:29:
2e:74:d5:8c:58:25:be:17:24:49:10:09:ce:10:b4:
b9:5f:9a:9e:fb:4f:45:43:74:a9:fa:85:48:27:78:
b6:89:d8:d4:99:aa:2f:4d:86:34:44:72:d7:e2:b3:
b8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:78:66:98:89:FA:6E:38:03:D8:27:4E:55:2E:A0:F2:0B:E8:D5
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32332d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.22.0/23
Signature Algorithm: sha256WithRSAEncryption
54:13:29:77:44:37:d0:82:c2:fa:00:ea:33:86:95:4f:67:45:
d1:29:11:72:54:cc:2d:cb:8d:6b:e0:8d:90:95:c0:2e:f0:1e:
ed:ae:82:89:28:53:de:92:08:4c:9d:77:84:a2:d0:90:1e:36:
be:dc:59:57:35:63:d8:5a:ef:59:02:37:b8:b6:83:12:1b:10:
ae:15:e3:21:3c:20:35:43:41:fa:19:25:48:45:17:c7:67:b8:
5b:d5:86:22:dd:5c:9d:63:7b:2d:f6:ba:10:dc:c8:ed:e7:7a:
f5:58:73:41:8e:24:39:dd:5f:50:7c:8d:ec:ca:f1:c3:a4:ed:
dd:62:db:b3:e1:dd:3b:ef:58:84:0b:7a:fe:a0:7d:ce:a6:3d:
cb:ac:ce:b3:e9:6a:4a:93:71:66:64:e1:09:55:3d:bb:11:ee:
17:3a:ec:16:d6:bc:6a:09:51:71:04:fc:f9:28:ad:3c:5a:78:
32:ec:32:5f:09:cd:e9:b4:67:89:49:69:c2:6a:0a:c7:4b:a5:
d1:58:b1:c8:43:2c:bd:66:62:fe:05:46:03:c8:f0:57:42:94:
34:cf:e2:a7:3a:32:8c:3d:d6:aa:f9:58:a8:15:21:8a:cd:da:
95:b8:24:9b:bf:d4:ba:94:17:4e:70:14:7a:24:87:e9:9c:7a:
7c:9c:6b:fb
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIURWqe5hrtCmKKhR/g0xTX6KurKLwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwODU5MTRaFw0yNzA2MDMwOTA0MTRaMDMxMTAvBgNV
BAMTKDQzMkQ3ODY2OTg4OUZBNkUzODAzRDgyNzRFNTUyRUEwRjIwQkU4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdKOx0jIJk6AhgdCoD7s2HCjuL
pUdximPTQD601edwUEs+4D6C2wejAbslaoKJio0R+4zykIhxL6RiFwZyKoYcGuMQ
Y6/8KGhv5jR0WYT387dTAN+mLdPQgmYzXIj+QNDdg5qKqKQdq8adK4BV1mVMTFeA
vjDCGYwad8QCUd++VbCCMnfVyfGYZBd+Jn53t0/jO+Ichy91RO/JNv8TjLPT0EFC
W8YsEkzv5lCAQcrwlnEqsA61n5tKJkaTgsOtj3oYyIrMoYmgiK9aFXbVwdj4KS50
1YxYJb4XJEkQCc4QtLlfmp77T0VDdKn6hUgneLaJ2NSZqi9NhjREctfis7hvAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQUQy14ZpiJ+m44A9gnTlUuoPIL6NUwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzQzNTJlMzIzNTMx
MmUzMjMyMmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAEt+xYwDQYJKoZIhvcNAQELBQADggEBAFQTKXdEN9CCwvoA6jOGlU9nRdEpEXJU
zC3LjWvgjZCVwC7wHu2ugokoU96SCEydd4Si0JAeNr7cWVc1Y9ha71kCN7i2gxIb
EK4V4yE8IDVDQfoZJUhFF8dnuFvVhiLdXJ1jey32uhDcyO3nevVYc0GOJDndX1B8
jezK8cOk7d1i27Ph3TvvWIQLev6gfc6mPcuszrPpakqTcWZk4QlVPbsR7hc67BbW
vGoJUXEE/PkorTxaeDLsMl8Jzem0Z4lJacJqCsdLpdFYschDLL1mYv4FRgPI8FdC
lDTP4qc6Mow91qr5WKgVIYrN2pW4JJu/1LqUF05wFHokh+mcenyca/s=
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:52 2026 by rpki-client