
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114092081023811603/0/34352e3131372e36392e302f32342d3234203d3e203539303634.roa
File: 34352e3131372e36392e302f32342d3234203d3e203539303634.roa (raw, json)
Hash identifier: KEOsUrMYTo7UB6tINn+uRJdhpQQWUcZgNgXhs7+3qhI=
Subject key identifier: 04:42:49:10:9A:B6:10:7B:97:ED:2E:53:6A:40:D2:A4:BB:91:7D:52
Certificate issuer: /CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Certificate serial: 59DF5EBA61F299FC4D63CF3BE399A584DA666D06
Authority key identifier: CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/34352e3131372e36392e302f32342d3234203d3e203539303634.roa
Signing time: Tue 02 Jun 2026 07:36:57 +0000
ROA not before: Tue 02 Jun 2026 07:31:57 +0000
ROA not after: Tue 01 Jun 2027 07:36:57 +0000
asID: 59064
IP address blocks: 45.117.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 13 Jun 2026 03:41:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:df:5e:ba:61:f2:99:fc:4d:63:cf:3b:e3:99:a5:84:da:66:6d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAC43E7DD964B172267BD98B6D82D524ADE91E1E
Validity
Not Before: Jun 2 07:31:57 2026 GMT
Not After : Jun 1 07:36:57 2027 GMT
Subject: CN=044249109AB6107B97ED2E536A40D2A4BB917D52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:ca:2a:80:91:9b:98:cc:07:e5:d7:ca:ec:
e5:4f:ea:94:38:54:7c:9f:d4:d2:29:11:4e:68:e8:
09:77:18:1f:2d:b0:13:d6:8a:db:d3:76:3f:36:c1:
4b:cd:e4:f8:42:63:83:08:ec:e8:01:d9:2e:d0:65:
6e:92:e1:80:d6:10:c1:75:12:80:91:67:08:09:47:
b9:cd:93:81:de:2d:d2:4f:0b:5c:ec:33:29:fd:2d:
4b:4a:04:6b:23:86:e5:99:1c:09:1b:e0:81:3a:c2:
b6:0f:87:6e:84:32:04:17:73:fb:d4:fc:9d:b2:b7:
03:16:08:d8:97:bd:d8:cd:d0:f9:6d:91:c8:17:0a:
6f:80:eb:ff:da:07:34:72:c8:51:36:79:db:48:49:
60:a0:82:09:45:bf:a8:52:9b:74:a4:3e:38:20:81:
ae:14:09:0b:37:87:0e:ee:ac:9c:82:19:50:e7:ab:
6c:37:3c:8c:a0:be:0c:22:0e:0d:14:68:99:36:4e:
32:77:b9:28:b5:ad:35:28:f6:d5:1e:0f:1a:f3:7d:
e5:16:a0:2b:51:90:f2:fc:b4:d0:6b:7c:e9:47:ec:
66:11:14:a0:4a:99:27:87:0c:9f:bc:15:86:71:33:
a2:45:5b:63:35:90:82:59:23:7a:43:4f:c7:13:69:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:42:49:10:9A:B6:10:7B:97:ED:2E:53:6A:40:D2:A4:BB:91:7D:52
X509v3 Authority Key Identifier:
keyid:CA:C4:3E:7D:D9:64:B1:72:26:7B:D9:8B:6D:82:D5:24:AD:E9:1E:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/CAC43E7DD964B172267BD98B6D82D524ADE91E1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114092081023811603/0/34352e3131372e36392e302f32342d3234203d3e203539303634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.69.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:7f:d4:7f:3d:0c:14:6c:b8:7f:cd:1a:46:5a:3a:38:01:2b:
17:93:ff:15:55:49:5a:49:3b:fe:d0:4d:0f:52:de:35:c3:3d:
98:2b:d1:d3:27:da:2a:86:78:7e:95:32:28:f1:2c:cb:1f:dd:
15:4a:db:39:c4:76:96:d5:ca:a6:00:72:cc:44:62:25:4a:9b:
21:63:50:94:09:99:18:52:d1:33:d7:a5:83:e3:bd:83:e3:2e:
ab:53:61:ca:0f:83:95:75:c7:1b:1d:a9:7d:da:e4:4e:42:8e:
d4:58:d6:fe:94:30:31:82:63:71:f1:a1:db:ca:3d:2f:cb:72:
1e:34:bb:63:14:34:36:ea:f5:cd:04:7d:59:83:46:ff:0e:06:
fa:cb:33:b2:c8:7f:d1:e3:52:d4:68:9a:50:a8:3b:ba:50:bc:
bf:1d:67:17:61:53:5f:83:ec:1b:f7:99:5d:fd:e2:9c:62:94:
ad:22:1f:29:fa:a8:b3:ed:2f:d9:1d:16:53:0b:28:08:22:f8:
53:f4:10:47:15:c0:4e:a3:c2:1d:5c:39:6a:38:26:fe:51:b2:
80:d1:1f:9e:48:6e:54:93:3d:65:f5:4e:80:99:2e:09:d5:54:
18:b7:71:35:41:e5:65:24:18:2b:18:cb:c5:fe:99:1d:de:35:
47:9e:64:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:52 2026 by rpki-client