
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1122709350910001191/0/34352e3235312e3132302e302f32322d3232203d3e203633363037.roa
File: 34352e3235312e3132302e302f32322d3232203d3e203633363037.roa (raw, json)
Hash identifier: RZ39bL2boZr+mHG3dnSmDiIpsnz2ZL5lis9k+FJyFHk=
Subject key identifier: A4:61:DC:AE:9B:21:97:DE:65:A0:88:CE:D2:D1:F2:1C:23:95:F9:FC
Certificate issuer: /CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Certificate serial: 0C0546431DCBEBE2FF85DBFDE47594730602D5BA
Authority key identifier: AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/34352e3235312e3132302e302f32322d3232203d3e203633363037.roa
Signing time: Fri 26 Jun 2026 02:18:54 +0000
ROA not before: Fri 26 Jun 2026 02:13:54 +0000
ROA not after: Fri 25 Jun 2027 02:18:54 +0000
asID: 63607
IP address blocks: 45.251.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:05:46:43:1d:cb:eb:e2:ff:85:db:fd:e4:75:94:73:06:02:d5:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB
Validity
Not Before: Jun 26 02:13:54 2026 GMT
Not After : Jun 25 02:18:54 2027 GMT
Subject: CN=A461DCAE9B2197DE65A088CED2D1F21C2395F9FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:5b:a1:d6:95:98:0b:03:05:4a:ee:bf:23:
98:ef:d2:ab:ad:79:31:41:75:f9:ad:8d:b6:23:cf:
e6:a9:15:e0:60:2c:d2:02:cb:c1:0d:c5:a5:ff:aa:
81:11:15:92:0d:8d:53:e3:69:c1:34:c5:93:9f:ee:
a3:23:c8:7f:f4:e0:35:b8:78:b2:b7:2d:81:e0:63:
7c:c0:a8:b9:08:1c:a5:d1:a0:92:f6:f5:07:97:d5:
0e:e6:ec:87:a8:31:3b:92:3d:0b:fc:77:95:ff:7a:
c0:e6:4d:d0:ee:71:59:93:88:c5:5a:30:72:4d:90:
d7:c7:d5:45:37:63:d2:ed:61:e6:6f:c5:4e:86:fe:
a9:0d:e9:92:54:cb:ac:74:dc:05:cc:67:f5:3f:c2:
a3:67:5a:c3:d3:87:3b:72:a7:8f:64:4a:9f:7a:a7:
36:1a:fe:27:ac:9b:30:71:37:ab:47:72:ec:cb:9b:
c5:59:a9:46:2a:91:76:d9:1e:00:82:46:8a:6a:6c:
92:7a:7d:42:85:b0:6b:62:67:68:d8:65:9d:b8:9e:
a2:ba:f5:42:52:db:0b:99:51:a3:ad:5b:c7:2c:3a:
05:77:62:ad:b9:0f:c2:4e:b2:24:4d:90:34:3f:8f:
b3:5a:5a:fe:1f:a4:da:34:17:fd:33:a1:83:30:95:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:61:DC:AE:9B:21:97:DE:65:A0:88:CE:D2:D1:F2:1C:23:95:F9:FC
X509v3 Authority Key Identifier:
keyid:AE:38:3A:B4:BC:A5:A3:E1:1D:E4:9A:FF:70:49:4D:43:B4:4D:B9:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE383AB4BCA5A3E11DE49AFF70494D43B44DB9AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1122709350910001191/0/34352e3235312e3132302e302f32322d3232203d3e203633363037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.120.0/22
Signature Algorithm: sha256WithRSAEncryption
59:5c:a4:59:a0:5d:ff:0c:84:c3:05:a0:28:82:91:37:a2:e6:
6f:a2:bd:57:9f:56:a6:fc:dc:39:7a:41:85:fe:f4:67:24:2a:
71:6c:8b:aa:cd:91:69:44:9e:89:bf:14:03:90:59:e9:6f:97:
0c:dc:ec:af:65:42:5b:71:01:42:40:ae:d3:fb:05:60:6d:4c:
57:ef:1b:ad:d8:5f:12:54:82:cf:16:73:cc:d4:b2:3f:f9:02:
7f:57:3e:0b:3d:de:be:1e:81:cf:3e:a7:86:db:28:20:3d:26:
eb:1a:b4:40:d4:5b:34:f8:ff:5e:50:8d:a0:33:b3:67:fe:2f:
98:cd:e3:96:0f:1b:a1:f0:d9:40:3c:1a:ae:10:02:a0:02:47:
97:57:ed:ab:91:79:45:4d:c2:e3:b9:82:ab:fe:ed:34:38:1f:
04:cf:89:e9:da:07:74:f7:cc:32:d1:2a:8d:29:ab:9b:c7:e6:
88:2e:6c:80:d0:e8:d5:4d:61:b4:f7:3d:68:9f:ab:e1:21:a7:
98:ce:c1:6e:25:5d:de:ef:f6:b5:bf:3f:dd:98:bf:13:1f:94:
65:c2:24:a3:ff:aa:d7:6b:5f:8b:31:cd:ec:0b:aa:7c:10:93:
5b:c8:b5:fe:e7:89:2a:b5:72:cb:fc:8e:9b:37:72:93:71:c4:
f9:ac:df:92
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:26 2026 by rpki-client