
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32332e302f32342d3234203d3e2034383437.roa
File: 34352e3235312e32332e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: 4VXG86O3BfhyTvVzG5N8kVQyiqO12W0zEq20Yes1Pns=
Subject key identifier: CD:7A:B2:D2:EC:3A:A4:A2:09:5E:0D:02:A1:07:7A:27:CB:48:AB:BF
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 5CBE467DBE9FD61FBB48B517DF6C916AB4A66525
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32332e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 09:05:20 +0000
ROA not before: Thu 04 Jun 2026 09:00:20 +0000
ROA not after: Thu 03 Jun 2027 09:05:20 +0000
asID: 4847
IP address blocks: 45.251.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:be:46:7d:be:9f:d6:1f:bb:48:b5:17:df:6c:91:6a:b4:a6:65:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 09:00:20 2026 GMT
Not After : Jun 3 09:05:20 2027 GMT
Subject: CN=CD7AB2D2EC3AA4A2095E0D02A1077A27CB48ABBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:59:9a:9b:57:05:d0:28:ee:cb:98:8a:11:
ed:bc:3c:b3:f5:e3:4c:5f:69:ef:69:8b:2d:a7:69:
d8:80:19:8c:01:69:02:d7:c7:4f:b3:b1:3c:97:95:
11:f7:f9:63:02:85:e6:8c:8e:c7:9f:cd:d5:9e:f5:
72:85:d0:9e:08:d5:61:40:00:66:1b:59:bf:ad:b5:
fb:91:7d:be:07:02:a2:f7:61:8b:b0:67:53:48:e4:
13:8e:85:92:09:ae:5e:b6:5e:49:d8:4f:69:62:b6:
7f:74:a7:d5:3e:cf:f4:25:e4:f0:73:b5:d2:d9:f8:
e7:65:89:a0:a6:e6:33:f9:70:e7:71:9b:ba:37:c6:
8f:ad:41:8e:6c:9a:d8:05:fb:38:70:3c:53:cc:7d:
e6:36:bc:aa:25:a8:24:df:fc:64:61:d9:3f:f4:72:
fc:15:65:87:cb:71:9f:80:c5:08:73:37:47:64:f2:
4e:c7:84:47:6d:91:16:85:3c:91:98:c0:2d:3b:0a:
26:fc:17:2b:0b:ae:34:aa:a7:1a:90:54:17:e5:e7:
42:4f:65:d9:24:f1:43:a7:00:5b:da:64:cc:fd:de:
04:ca:14:af:dd:06:ed:4e:c3:00:4b:89:57:c9:41:
8d:35:ba:34:fd:a3:70:08:ff:51:5b:06:54:47:29:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7A:B2:D2:EC:3A:A4:A2:09:5E:0D:02:A1:07:7A:27:CB:48:AB:BF
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34352e3235312e32332e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.23.0/24
Signature Algorithm: sha256WithRSAEncryption
94:72:52:73:be:73:2c:ad:5a:cb:35:23:6e:79:48:ea:5f:7a:
b8:6a:c8:3b:fa:c2:f1:c9:9e:c0:98:a0:a9:38:ff:ce:87:0e:
3a:fb:5d:c7:4e:35:56:41:18:7c:ab:07:87:64:c1:13:2e:b5:
f2:9d:27:72:d3:6f:4b:74:02:57:89:a4:fa:06:d2:29:b4:1c:
d9:47:e0:b0:88:db:2e:29:3e:68:1e:41:c2:cd:48:07:b4:5c:
39:bf:ea:da:f8:04:8d:4b:8f:71:f2:d3:1c:94:ff:12:7b:01:
76:c1:6b:92:33:49:fb:f2:f0:8e:d7:4c:b2:49:dc:39:1e:ae:
d8:20:53:9c:b1:ac:6f:2c:2e:6e:17:c2:85:5d:9d:e0:ce:5b:
cd:d2:e9:13:05:0e:de:48:eb:97:79:03:39:c0:5c:69:66:21:
e9:b0:71:42:7a:c4:ce:5b:cc:af:2a:b7:50:b6:8d:52:ce:56:
98:2b:67:4c:8e:4a:2d:07:bf:10:41:cb:6e:94:59:31:16:ba:
35:ff:49:c0:41:98:cf:ce:0d:0b:b2:e6:a0:bf:72:4d:25:be:
57:9d:bd:9a:55:83:b3:59:32:07:62:fc:1d:6a:14:32:d4:63:
62:86:a3:d8:71:a1:e9:39:65:fd:08:6f:80:f8:a8:9c:61:32:
af:a0:9d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:53 2026 by rpki-client