
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32332d3233203d3e203536303436.roa
File: 34352e3234382e382e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier: 6zhpUMtgDv3kMaSfCELgsRbjjSJUWJkdb2is4VMTB+E=
Subject key identifier: CC:D8:A2:2F:82:08:02:D3:CB:5C:97:C4:B5:11:9B:78:49:DA:46:93
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 541F60C67ECC5EB1420B400E4BC01FB388216AE1
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32332d3233203d3e203536303436.roa
Signing time: Tue 22 Sep 2026 04:12:19 +0000
ROA not before: Tue 22 Sep 2026 04:07:19 +0000
ROA not after: Tue 21 Sep 2027 04:12:19 +0000
asID: 56046
IP address blocks: 45.248.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:06:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:1f:60:c6:7e:cc:5e:b1:42:0b:40:0e:4b:c0:1f:b3:88:21:6a:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 22 04:07:19 2026 GMT
Not After : Sep 21 04:12:19 2027 GMT
Subject: CN=CCD8A22F820802D3CB5C97C4B5119B7849DA4693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8d:47:95:1b:f1:38:18:ed:bf:03:8e:c6:b8:
8e:3e:69:83:e8:cb:96:51:19:25:b4:45:d6:f8:7a:
66:5c:95:8c:8c:fd:8a:8a:bd:2b:ca:ec:ea:35:e8:
7f:ff:42:1f:e1:90:84:47:ee:1f:a9:af:0f:26:dd:
3a:c5:b0:da:f6:60:49:0b:ea:f9:0c:01:0c:74:60:
b6:a0:51:35:59:ee:09:69:11:4a:4c:30:12:d4:f1:
a8:31:72:54:ba:44:12:cd:85:ab:8d:ce:28:94:09:
94:02:ed:cb:f9:18:d6:3d:39:6c:72:a8:e1:e5:32:
58:2e:c3:02:23:b6:f3:31:94:d9:94:37:af:45:4f:
19:fc:c4:b1:6a:6a:09:e0:37:f3:2a:00:c2:b5:81:
7d:c5:55:c4:7a:d4:17:3d:34:20:dd:90:c8:47:01:
f4:86:47:59:8c:88:08:60:d6:36:0d:13:7e:25:b1:
84:52:f6:09:21:6c:06:ac:83:91:df:b7:cc:da:1f:
4e:38:8c:8f:0d:47:1e:03:d5:92:50:03:a1:d9:78:
12:f0:12:96:0e:a4:f2:83:47:c2:55:d7:6d:9a:88:
b4:4c:6e:b8:c1:ef:2f:11:c1:da:3b:22:f7:58:8b:
b4:b5:96:f6:5f:a9:fa:ec:22:65:c9:9c:ca:ad:62:
fb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:D8:A2:2F:82:08:02:D3:CB:5C:97:C4:B5:11:9B:78:49:DA:46:93
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32332d3233203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.8.0/23
Signature Algorithm: sha256WithRSAEncryption
6d:bf:b6:88:ea:c5:9a:d6:eb:e5:c6:ea:82:e2:b6:72:d3:98:
49:16:63:59:a2:0a:49:23:a8:a7:1b:5e:28:b1:96:66:3e:bd:
54:21:41:ca:2b:70:11:fb:27:57:80:10:98:71:16:6d:a5:0b:
1b:81:e4:97:e2:d5:aa:1b:13:b4:0f:84:09:6e:2a:57:8f:99:
ee:17:39:8f:a2:82:01:d7:a1:dc:72:ef:84:d1:85:8e:d5:75:
58:09:91:3d:be:83:4d:9b:16:81:51:9f:0d:82:19:aa:5d:59:
43:b9:cd:cb:3f:ca:c1:27:43:ce:44:79:58:fc:9b:72:7b:f0:
4f:06:2f:16:dd:fa:fc:ea:6f:b9:04:c0:ad:c4:1b:a6:5a:81:
6d:f0:43:0a:1d:09:a4:0c:bb:df:ec:7f:6f:cf:4a:af:42:dd:
6c:48:70:05:d8:66:75:ce:ab:1a:7e:f3:e1:75:9f:91:85:ad:
31:52:a3:2f:53:b5:b5:82:7b:eb:a1:49:75:d9:0d:f5:4b:19:
07:74:46:07:90:27:74:df:a5:42:3e:4b:c5:e0:67:64:6d:f0:
67:15:55:0b:c4:79:83:a6:f4:2d:38:48:5b:6b:85:d6:16:b6:
11:19:53:0a:17:01:6b:21:c9:0d:a6:1f:f3:8a:2f:ba:45:65:
46:18:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 06:24:46 2026 by rpki-client