
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e20313336393538.roa
File: 34352e3131362e33352e302f32342d3234203d3e20313336393538.roa (raw, json)
Hash identifier: peLFbPaYay0LuzMzJlXfkUbU5TVbXKkiA9QhHEtSqvo=
Subject key identifier: 4C:15:7C:AE:D5:7E:84:AF:BC:56:BA:CE:2C:91:48:CB:2C:7B:06:46
Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Certificate serial: 4A9A10874EAC8830BB71F7D47AF83F4244257E4F
Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e20313336393538.roa
Signing time: Sat 09 May 2026 01:56:50 +0000
ROA not before: Sat 09 May 2026 01:51:50 +0000
ROA not after: Sat 08 May 2027 01:56:50 +0000
asID: 136958
IP address blocks: 45.116.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 06:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:9a:10:87:4e:ac:88:30:bb:71:f7:d4:7a:f8:3f:42:44:25:7e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A
Validity
Not Before: May 9 01:51:50 2026 GMT
Not After : May 8 01:56:50 2027 GMT
Subject: CN=4C157CAED57E84AFBC56BACE2C9148CB2C7B0646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:95:ff:de:ac:5f:97:85:0e:12:26:2c:91:6a:
af:3d:b8:e1:68:52:48:04:57:aa:c5:a6:f8:99:36:
cb:e5:c6:3c:ff:30:6f:d9:8d:14:6f:f8:26:13:cd:
a6:00:4a:df:67:d4:b8:14:35:4e:11:6f:be:a0:ef:
aa:00:fd:c4:7c:88:e7:60:a5:e2:b4:55:67:a2:72:
ca:a1:fa:2f:c5:b2:92:53:39:03:d5:de:27:da:9f:
dd:50:b6:a8:ff:c0:9b:ac:a3:a5:4c:af:0c:69:8e:
48:db:5c:2e:91:95:4e:28:23:22:af:ff:0c:52:57:
00:5a:22:f2:80:86:e3:01:ff:86:88:96:90:ef:a9:
50:47:29:18:f0:fb:53:cd:4e:aa:37:43:1d:52:d3:
83:8d:cc:95:fb:f8:32:64:fe:83:62:20:3c:1d:59:
23:be:93:d8:f4:ae:c9:d3:10:d1:c6:92:65:b9:11:
71:dd:6d:df:ff:e8:00:7e:44:71:e8:07:89:c6:a7:
d7:aa:61:18:96:5c:8a:c8:91:3d:3c:57:5b:a8:2d:
b6:e8:2e:05:43:1a:9b:28:a5:0a:43:f5:df:2a:5b:
25:de:cc:b8:b3:cd:4e:8e:03:52:2e:67:b2:6b:04:
e7:a6:fc:ca:4f:7e:92:25:08:e6:5b:ae:86:af:e2:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:7C:AE:D5:7E:84:AF:BC:56:BA:CE:2C:91:48:CB:2C:7B:06:46
X509v3 Authority Key Identifier:
keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34352e3131362e33352e302f32342d3234203d3e20313336393538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.35.0/24
Signature Algorithm: sha256WithRSAEncryption
44:4a:a1:da:c4:90:b5:a8:b7:59:02:5c:ca:90:45:5d:1c:d3:
d2:a9:2c:92:14:96:ee:a0:f6:66:50:a6:f1:51:21:f2:4b:03:
fa:1b:e9:a8:1b:9f:c5:b9:18:68:bb:09:18:97:5b:2e:27:ab:
9f:da:3a:39:c7:50:d8:a7:73:31:4b:eb:90:c2:13:90:2c:84:
8e:f8:e9:49:c2:4f:7f:7e:9e:1a:f1:48:07:f7:71:9e:37:92:
f1:8a:18:2c:4f:c9:c0:c3:91:a8:48:00:ee:7b:98:8e:4a:91:
a9:31:11:71:15:0e:16:ec:e4:92:52:39:09:7e:69:7b:c7:e8:
82:30:87:ca:c6:97:b0:1e:28:f9:e5:4d:81:0e:f7:21:82:84:
96:47:88:e3:03:6d:62:dd:32:3f:b5:73:cb:90:94:b8:b9:5b:
c1:69:ff:e1:26:b0:d9:d7:2e:b5:54:22:d0:38:60:ac:ee:b3:
cd:25:d4:07:86:2c:7b:46:5d:a2:17:53:de:1d:32:6a:17:6d:
df:dd:86:53:80:e2:a2:38:56:2e:ec:35:ef:d9:75:a8:28:fd:
0e:6f:48:ca:55:68:fd:65:33:cc:cc:9b:5c:9e:32:57:a8:7b:
3f:7b:f6:20:59:d5:b1:9d:6a:db:60:b2:38:19:73:04:f2:1c:
80:aa:60:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 14:58:43 2026 by rpki-client