
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32332d3233203d3e203536303436.roa
File: 34352e3131372e31302e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier: wqnesz7AUg2T9om9JeG8MPTImRCx0ioSQ+Vo10a4qWQ=
Subject key identifier: F0:20:89:15:AF:5C:7A:18:33:3A:88:4E:6D:26:83:19:19:55:64:2A
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 67A2AA73AD6B00AA26D99853C94D50CC53D5E4FB
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32332d3233203d3e203536303436.roa
Signing time: Wed 23 Sep 2026 07:59:04 +0000
ROA not before: Wed 23 Sep 2026 07:54:04 +0000
ROA not after: Wed 22 Sep 2027 07:59:04 +0000
asID: 56046
IP address blocks: 45.117.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:a2:aa:73:ad:6b:00:aa:26:d9:98:53:c9:4d:50:cc:53:d5:e4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 23 07:54:04 2026 GMT
Not After : Sep 22 07:59:04 2027 GMT
Subject: CN=F0208915AF5C7A18333A884E6D2683191955642A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:63:45:8b:24:bf:e6:83:23:5b:01:ae:12:
30:f1:4c:40:bf:8a:d4:32:93:47:58:76:9d:12:c7:
92:f2:b7:41:3d:45:6c:1b:c5:a4:0d:f4:0a:e8:0d:
20:1b:19:9e:1f:01:63:f0:8e:0e:cb:5a:db:e0:0d:
c9:f1:25:3d:40:0b:28:6f:a2:15:9a:c9:88:b4:eb:
17:23:b8:ff:ba:86:94:42:c2:27:ff:03:6a:93:82:
06:58:e7:62:23:aa:5f:01:a4:6b:8c:af:67:40:a7:
73:8b:58:d6:0d:52:92:1b:72:cd:6c:b7:3c:6c:0a:
07:61:b3:84:c6:fa:16:87:16:69:06:82:67:c5:85:
d7:74:52:7d:71:fe:f7:44:40:79:32:d3:27:6c:6d:
cd:01:9f:e0:13:b7:d9:f8:2a:72:eb:d1:9d:9a:04:
ce:3d:fc:07:36:ea:22:7f:d3:b0:c3:95:7b:9e:e2:
8e:b4:77:2f:24:a7:f1:64:9a:72:90:70:a3:72:4f:
27:14:8f:c9:fe:50:19:53:8e:ef:85:7d:59:f4:76:
16:4e:04:48:df:7d:11:43:a7:51:68:0d:dd:a9:8f:
85:d8:96:9b:47:05:01:cd:37:67:a8:82:9a:87:a4:
6c:86:b8:82:81:f3:03:4b:d0:d2:5f:39:39:ad:f2:
f0:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:20:89:15:AF:5C:7A:18:33:3A:88:4E:6D:26:83:19:19:55:64:2A
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e31302e302f32332d3233203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.10.0/23
Signature Algorithm: sha256WithRSAEncryption
27:df:22:91:dc:3a:27:0e:4f:89:58:3b:ef:4e:11:b8:a5:52:
14:8a:2a:be:04:e3:de:6b:06:7d:a4:ed:e0:03:d5:3e:e1:e1:
f8:8e:f6:54:25:c1:15:ca:17:dd:82:39:1e:e8:50:cc:5e:d0:
23:1c:83:a2:5a:a5:92:d7:a2:1b:cb:07:44:3d:7e:4a:1b:c7:
4e:ba:84:50:95:d3:bc:42:56:3c:68:77:03:d8:d5:11:1a:bf:
ec:81:5b:fe:2a:37:3d:9c:d8:a0:25:f9:cf:4d:df:83:14:75:
1a:e6:aa:b6:a3:0e:fd:70:31:da:71:e5:8d:ad:a0:d5:8a:22:
ef:ed:e5:6b:06:71:91:5f:92:b2:a6:15:e0:75:6b:6d:6c:f6:
8f:9c:6f:f2:fe:4d:18:0e:07:a2:e6:91:1c:71:76:5c:f2:18:
19:6e:bf:08:fd:c1:16:c8:9b:11:24:b5:98:b1:6c:e4:ea:65:
e6:75:bd:59:fd:6b:ba:75:96:0a:6a:74:fd:b4:09:8e:48:20:
97:ed:ee:73:ce:3a:84:eb:7e:dc:16:d1:73:8c:44:05:53:73:
62:a6:d5:21:9f:50:a9:af:2c:b5:e0:ab:b5:9f:a0:86:17:1c:
29:1a:00:b2:34:04:97:e3:8f:4d:be:69:b0:2a:3a:3d:4e:c9:
67:d7:20:a4
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUZ6Kqc61rAKom2ZhTyU1QzFPV5PswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA5MjMwNzU0MDRaFw0yNzA5MjIwNzU5MDRaMDMxMTAvBgNV
BAMTKEYwMjA4OTE1QUY1QzdBMTgzMzNBODg0RTZEMjY4MzE5MTk1NTY0MkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmGNFiyS/5oMjWwGuEjDxTEC/
itQyk0dYdp0Sx5Lyt0E9RWwbxaQN9AroDSAbGZ4fAWPwjg7LWtvgDcnxJT1ACyhv
ohWayYi06xcjuP+6hpRCwif/A2qTggZY52Ijql8BpGuMr2dAp3OLWNYNUpIbcs1s
tzxsCgdhs4TG+haHFmkGgmfFhdd0Un1x/vdEQHky0ydsbc0Bn+ATt9n4KnLr0Z2a
BM49/Ac26iJ/07DDlXue4o60dy8kp/FkmnKQcKNyTycUj8n+UBlTju+FfVn0dhZO
BEjffRFDp1FoDd2pj4XYlptHBQHNN2eogpqHpGyGuIKB8wNL0NJfOTmt8vBNAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU8CCJFa9cehgzOohObSaDGRlVZCowHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzQzNTJlMzEzMTM3
MmUzMTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAS11CjANBgkqhkiG9w0BAQsFAAOCAQEAJ98ikdw6Jw5PiVg7704RuKVSFIoq
vgTj3msGfaTt4APVPuHh+I72VCXBFcoX3YI5HuhQzF7QIxyDolqlkteiG8sHRD1+
ShvHTrqEUJXTvEJWPGh3A9jVERq/7IFb/io3PZzYoCX5z03fgxR1GuaqtqMO/XAx
2nHlja2g1Yoi7+3lawZxkV+SsqYV4HVrbWz2j5xv8v5NGA4HouaRHHF2XPIYGW6/
CP3BFsibESS1mLFs5Opl5nW9Wf1runWWCmp0/bQJjkggl+3uc846hOt+3BbRc4xE
BVNzYqbVIZ9Qqa8steCrtZ+ghhccKRoAsjQEl+OPTb5psCo6PU7JZ9cgpA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 05:45:08 2026 by rpki-client