
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33322e302f32322d3234203d3e203539303438.roa
File: 34352e3235332e33322e302f32322d3234203d3e203539303438.roa (raw, json)
Hash identifier: n1BTm9UP69WcsuQuC5kHOK16RBL86Org0mYrYPHvq2M=
Subject key identifier: C6:79:DC:18:99:B9:FA:53:73:B4:D2:08:AC:2C:0C:F0:64:7A:C4:38
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 11F8C069DE666B76924F24B5CA341E98250FDEF5
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33322e302f32322d3234203d3e203539303438.roa
Signing time: Mon 11 May 2026 07:00:48 +0000
ROA not before: Mon 11 May 2026 06:55:48 +0000
ROA not after: Mon 10 May 2027 07:00:48 +0000
asID: 59048
IP address blocks: 45.253.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f8:c0:69:de:66:6b:76:92:4f:24:b5:ca:34:1e:98:25:0f:de:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: May 11 06:55:48 2026 GMT
Not After : May 10 07:00:48 2027 GMT
Subject: CN=C679DC1899B9FA5373B4D208AC2C0CF0647AC438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:62:f7:c5:40:b1:a9:17:04:60:4a:8c:ca:
55:ce:87:57:b4:32:11:1e:90:f3:7b:a9:6a:f1:2b:
db:a6:94:15:27:3f:0e:cc:51:0f:d0:d4:be:9c:7c:
36:6f:5b:56:1e:97:b9:5d:71:4f:21:61:70:7e:d9:
2d:86:f5:0b:2c:30:26:a6:95:8f:46:e6:d1:3f:ca:
d3:6e:70:d5:14:ee:81:cf:c2:47:e0:c6:77:81:f5:
38:71:94:26:08:08:ee:9f:23:ba:76:ec:55:05:a6:
79:12:45:48:bb:5a:68:63:41:aa:64:62:3f:6d:82:
f8:41:6d:14:bc:0d:32:ad:c6:77:8f:ad:0c:3e:1a:
89:fa:97:e1:43:60:3f:b3:ff:11:d1:26:14:49:b7:
59:ad:31:88:06:73:c6:bb:9f:e3:2f:7c:a2:d8:ba:
fc:0d:18:b8:a6:c1:95:68:e9:60:0d:0b:ed:1c:bd:
8f:8e:f0:24:4d:43:65:5b:c3:8b:c4:e9:94:af:c3:
dd:9e:3e:f2:7e:0b:e8:a0:f2:39:ea:4e:a7:c0:af:
13:f4:e8:27:d2:16:b3:9c:4f:91:cd:d5:c0:74:4e:
6b:93:d1:36:b5:6f:af:08:24:95:f6:45:c7:8d:f4:
81:a2:25:31:f6:bb:b3:30:c5:74:41:75:d3:26:ff:
97:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:79:DC:18:99:B9:FA:53:73:B4:D2:08:AC:2C:0C:F0:64:7A:C4:38
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33322e302f32322d3234203d3e203539303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.32.0/22
Signature Algorithm: sha256WithRSAEncryption
69:84:6d:86:df:ed:dd:d6:e8:27:e1:99:dc:4e:79:4d:1e:8f:
c8:71:f0:a2:3f:61:10:df:e7:27:d0:e1:86:7e:44:0e:ec:65:
63:f9:57:0f:a6:28:f2:47:58:58:05:1b:f6:db:96:49:97:0f:
52:f0:60:df:bb:1f:36:a7:43:23:e4:4d:50:4f:ec:86:19:b6:
aa:45:aa:1e:0b:bd:b8:da:d6:2e:74:94:69:8b:07:ab:33:51:
94:4c:b5:16:36:5d:96:5f:53:81:1e:2d:9d:f3:d6:fe:b1:eb:
c9:ed:a5:d9:21:69:65:21:32:e9:9e:cf:e3:bd:e4:e1:f6:4d:
95:bb:f2:2d:14:3d:7e:ca:b7:1f:10:f3:03:7e:02:ec:ed:21:
e3:3b:3d:38:a1:ea:06:63:7e:0a:2f:69:ba:c6:b5:6f:d2:05:
8b:de:f6:3e:3d:73:7c:35:ae:64:ac:56:65:03:50:25:fe:ac:
2f:60:c1:99:39:d0:82:32:d8:19:af:40:54:0e:36:80:72:a7:
f5:3d:c6:de:20:7e:8c:58:88:85:f3:36:a6:61:e8:59:44:b9:
b9:ce:2d:24:07:96:b8:c3:cd:4b:93:b8:0c:a0:2a:1f:b2:dc:
b8:2d:95:b7:51:4d:a8:da:2a:5e:59:1f:9d:f1:0a:ca:2f:58:
ab:b4:24:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:56 2026 by rpki-client