
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32342d3234203d3e2034383437.roa
File: 34352e3235312e32322e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: MA3pXAy66eAstygV8uQuW4MRp2FgYwUIGoklSLpL1KA=
Subject key identifier: 84:0E:FD:D9:9C:01:E8:23:B6:A8:24:21:2B:B8:9A:3C:85:5B:BF:BC
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 0F23761E90F0D482C869818FED823FA00314808D
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:05:13 +0000
ROA not before: Thu 04 Jun 2026 09:00:13 +0000
ROA not after: Thu 03 Jun 2027 09:05:13 +0000
asID: 4847
IP address blocks: 45.251.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:23:76:1e:90:f0:d4:82:c8:69:81:8f:ed:82:3f:a0:03:14:80:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:00:13 2026 GMT
Not After : Jun 3 09:05:13 2027 GMT
Subject: CN=840EFDD99C01E823B6A824212BB89A3C855BBFBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c1:00:c6:28:de:cf:3e:b0:d4:0a:11:a0:e0:
a8:e3:cf:bc:a9:63:65:7a:3c:3f:e1:3b:1f:ba:6b:
a4:0e:88:6d:73:9a:9d:35:c9:e7:72:bd:d7:9b:fb:
1c:46:bd:09:2f:8e:fc:5f:55:2a:22:0e:0e:5d:97:
d3:73:3f:ab:b3:ec:73:84:25:93:2e:a2:d2:7d:3b:
26:12:4e:98:9a:8e:31:76:6c:46:9d:3a:66:b0:b8:
f9:c7:72:0b:2e:71:b7:eb:2a:8f:49:43:2d:fa:ee:
44:b6:18:4a:2b:d4:f2:4f:6d:89:a3:1e:5f:1e:86:
12:9c:2a:1a:ce:71:c4:d5:90:3a:fc:cc:ba:45:65:
70:a3:da:c1:e3:83:37:7b:39:73:12:43:89:23:16:
20:4c:13:4b:f7:48:5c:bf:e1:16:86:90:9d:ca:f3:
bc:80:a4:53:4d:7d:70:90:f2:a6:82:8e:20:b6:27:
38:2a:33:78:75:c9:26:fa:5e:96:57:e1:9f:94:b4:
a5:f3:75:5c:0b:c9:6b:33:67:5b:bf:09:dc:fd:bf:
86:a0:49:02:3d:98:2b:ff:e9:aa:16:e0:e2:46:e1:
2d:76:0f:a5:a1:a0:91:4a:54:13:82:f8:cc:ee:52:
b0:03:a9:37:47:cd:6a:46:ba:99:b6:f5:27:a5:b0:
0a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0E:FD:D9:9C:01:E8:23:B6:A8:24:21:2B:B8:9A:3C:85:5B:BF:BC
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32322e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
93:52:6f:96:7b:bd:bd:b9:4f:92:f3:76:20:37:c1:95:8f:f4:
e5:1d:4f:fe:33:cd:45:d9:96:70:b1:9c:6c:db:4b:0f:cd:bc:
36:b6:64:8e:e1:59:4e:78:2a:0d:d5:75:a9:fb:c7:51:bb:7b:
00:db:ac:b1:1d:66:2d:f0:fe:6f:44:5c:0a:97:a0:87:1f:06:
26:f9:12:6f:f4:44:de:87:a0:8a:e4:7e:cc:c8:ce:b9:82:59:
56:68:65:2e:f1:9e:b7:1a:96:53:2c:20:74:31:36:5c:e5:16:
84:ab:ea:71:44:1f:a5:f8:11:81:77:bd:54:10:23:73:d1:04:
7f:4d:cd:78:83:ca:3c:7c:88:d3:23:1a:73:c3:65:b6:ad:06:
ba:36:27:15:54:58:d1:ed:a0:00:39:bf:ab:ab:68:23:55:38:
5e:3a:05:4e:0e:e4:93:fd:d8:40:db:47:c2:e7:77:de:f5:fa:
df:b0:a6:ca:c1:e2:f9:55:c2:71:43:4d:94:81:20:01:b6:11:
a6:d8:8a:8a:f0:27:f3:1a:71:18:ff:8c:54:35:24:d1:d8:3e:
82:5f:7b:d6:68:63:68:77:e9:be:00:46:7a:c2:6e:f4:ea:04:
98:08:90:a6:79:f7:16:a7:7f:88:3f:e2:7b:b3:63:3d:70:ad:
b0:e5:fa:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:50 2026 by rpki-client