
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/34352e3235312e3134342e302f32322d3232203d3e2030.roa
File: 34352e3235312e3134342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: UHhl5vIywlR9EF1SuP2tWpZscGg6dt5K75MIQmmozxM=
Subject key identifier: 6F:DB:8C:69:68:27:EE:7B:8B:B4:18:25:AB:94:79:06:09:4F:CC:52
Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Certificate serial: 399DC647EF550A5EC3B3465504C900D953FCEC72
Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/34352e3235312e3134342e302f32322d3232203d3e2030.roa
Signing time: Wed 22 Apr 2026 07:03:32 +0000
ROA not before: Wed 22 Apr 2026 06:58:32 +0000
ROA not after: Wed 21 Apr 2027 07:03:32 +0000
asID: 0
IP address blocks: 45.251.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 16:26:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:9d:c6:47:ef:55:0a:5e:c3:b3:46:55:04:c9:00:d9:53:fc:ec:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E
Validity
Not Before: Apr 22 06:58:32 2026 GMT
Not After : Apr 21 07:03:32 2027 GMT
Subject: CN=6FDB8C696827EE7B8BB41825AB947906094FCC52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:f2:07:9f:cf:4c:c5:ae:0f:e4:f1:f3:e3:
e1:f9:2f:ef:40:84:64:14:43:7e:2a:9f:b6:a6:38:
d9:ba:c5:46:1b:4a:dd:58:36:9c:e5:28:87:b9:36:
23:2f:cc:c5:a2:5f:15:6e:bb:22:a4:c0:2e:bc:0f:
ea:e8:87:f3:c6:43:3c:bc:40:a9:b0:b9:15:18:75:
c3:d1:c1:6d:e4:14:8d:64:19:ba:11:ff:80:81:f0:
91:b5:8e:49:03:bf:ff:5f:da:0c:9b:95:c9:18:55:
a8:a3:ca:6a:5a:e5:17:fb:af:8c:5d:c4:11:1a:d1:
e9:19:f8:3d:0e:c5:61:b6:16:a1:0e:e6:30:c8:3b:
8f:88:98:ff:31:18:5b:cc:c1:b2:61:ec:3a:d3:cb:
58:69:d5:61:5d:ce:ba:73:86:24:f4:0f:91:5a:a9:
8e:c0:89:8f:5e:e9:43:df:62:f1:75:c2:6e:9f:62:
83:f2:b6:45:12:0c:42:e1:79:ed:c5:0d:8a:a2:18:
cd:44:c2:b8:c4:ae:27:2c:f3:df:3c:b3:b4:5b:b0:
21:0c:7f:cd:b9:93:98:e0:c7:03:9b:9a:cb:77:5b:
d4:11:0e:1a:50:fc:4c:aa:04:33:4b:d3:4f:f5:8f:
e1:55:22:8a:a1:08:c7:ef:74:e9:f0:56:14:d6:b4:
71:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:DB:8C:69:68:27:EE:7B:8B:B4:18:25:AB:94:79:06:09:4F:CC:52
X509v3 Authority Key Identifier:
keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/34352e3235312e3134342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.144.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:c2:e0:a5:02:5c:0a:dc:ab:63:88:1d:ce:56:5f:78:60:58:
19:c8:9b:5c:3f:ef:7d:f6:c1:be:62:2f:31:98:65:72:6e:ea:
c4:fb:e6:e7:34:8e:cb:28:7c:a7:da:db:9d:70:14:4e:40:66:
38:33:20:7e:de:1a:44:81:f6:d8:0d:87:5d:b8:cf:13:b8:02:
51:da:9e:33:0d:8e:41:f4:e0:c4:8d:69:74:7c:3f:95:c1:b3:
74:43:ef:d1:f9:5d:69:5f:36:76:8e:a0:13:72:de:b8:b2:4e:
9f:5f:0e:a2:1e:40:ae:58:e7:75:0c:18:ea:e7:a6:b9:ff:fd:
2e:c5:38:b5:1d:fd:ee:a2:f5:57:08:3a:3e:01:87:3f:d2:6b:
e0:57:a0:2f:38:79:2b:2b:78:86:c8:6d:3c:18:00:e7:b8:62:
ad:31:5e:ee:3f:87:26:be:b6:b5:63:87:a5:0f:e8:9d:6f:20:
c5:f5:4f:66:6b:40:53:39:d3:d2:6d:16:47:76:ff:c2:2b:7b:
c9:5c:b2:fd:80:f7:9e:e1:b9:1d:bd:b9:1a:0d:27:54:83:80:
f0:de:3c:9a:6e:70:5b:6a:b3:8c:7e:73:33:c2:07:4a:db:94:
6c:78:fb:b7:81:9c:52:9f:78:1d:f4:55:8e:bc:93:68:a0:ce:
a4:c3:4b:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:00:13 2026 by rpki-client