
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33322e302f32342d3234203d3e20313338343231.roa
File: 34352e3235332e33322e302f32342d3234203d3e20313338343231.roa (raw, json)
Hash identifier: ilsBP7o67RcdylITYfN+7ydiSv+9OrQwu+PVoY3bQrU=
Subject key identifier: 6D:EB:A1:84:C1:44:98:CE:4A:BF:E5:4E:C7:1F:E4:36:E3:11:1C:9B
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 66D869FDB26A9129FDA16B19DFC7414E97AB75A0
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33322e302f32342d3234203d3e20313338343231.roa
Signing time: Mon 11 May 2026 07:00:48 +0000
ROA not before: Mon 11 May 2026 06:55:48 +0000
ROA not after: Mon 10 May 2027 07:00:48 +0000
asID: 138421
IP address blocks: 45.253.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:d8:69:fd:b2:6a:91:29:fd:a1:6b:19:df:c7:41:4e:97:ab:75:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: May 11 06:55:48 2026 GMT
Not After : May 10 07:00:48 2027 GMT
Subject: CN=6DEBA184C14498CE4ABFE54EC71FE436E3111C9B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:27:45:c3:dd:6c:d4:25:c6:db:f6:bd:07:8e:
fb:32:c3:85:df:0e:65:30:12:95:cd:46:7c:b7:ec:
cc:db:f3:63:46:ef:4f:b3:43:b8:1b:0a:0c:68:a7:
5d:36:21:ee:e6:52:ab:79:fc:e6:04:82:c0:50:f0:
d2:8c:12:35:dd:4f:3c:b2:a4:1d:60:3d:66:b4:1c:
a4:ec:b0:74:71:99:65:70:7c:bb:b3:b0:f4:e9:8d:
56:c1:94:e6:26:7b:79:22:81:27:f9:f0:96:8c:bc:
b5:00:6b:98:5a:28:df:95:16:d5:d4:7c:83:c3:7d:
37:5c:ae:83:2a:f8:e4:29:c9:9c:fe:23:90:c0:fc:
10:10:c2:71:89:35:9d:33:96:b5:44:95:c6:ee:5e:
49:55:2e:a9:9d:5e:af:05:08:fd:5a:bd:a4:ec:ee:
e6:d1:aa:78:d8:a6:d7:21:69:85:c0:56:e1:e2:dc:
38:7b:93:b8:42:ae:5b:ce:33:8f:45:3e:4b:5d:94:
3a:bc:38:79:0d:e8:a8:78:e2:cf:37:cd:3c:35:bb:
58:40:30:f6:c7:bf:f9:15:eb:e1:f9:cd:1a:1e:f7:
b9:0e:b2:12:14:e5:2e:45:99:fd:c2:58:83:72:cb:
51:d1:9c:7f:6d:99:0c:a7:4a:f5:70:79:4b:d3:f1:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:EB:A1:84:C1:44:98:CE:4A:BF:E5:4E:C7:1F:E4:36:E3:11:1C:9B
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3235332e33322e302f32342d3234203d3e20313338343231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.253.32.0/24
Signature Algorithm: sha256WithRSAEncryption
68:75:d3:ac:02:f1:37:88:95:4b:f8:3f:2f:a7:b8:82:4a:97:
28:d9:31:6e:d8:84:e9:a0:8e:dd:1f:fa:f7:19:80:b9:93:dc:
38:f0:b5:c3:3d:6d:1b:e9:be:c9:70:a0:c6:2f:c2:73:19:ec:
70:09:56:9f:ad:08:3e:a0:24:49:63:d0:3e:0f:f4:41:61:a0:
a9:15:f4:c3:d0:5e:7e:f1:06:e5:53:90:ac:a2:ec:04:2f:53:
ab:c9:82:e5:d1:d7:b0:6a:72:84:67:a9:ee:89:a6:e5:72:44:
32:9c:0a:48:23:55:44:4f:54:a1:e6:6a:ff:a2:e0:d8:9f:88:
12:c9:a7:35:7f:7e:c4:99:74:93:a3:f3:30:64:eb:6a:10:de:
14:b7:a3:18:4c:8b:fc:4b:58:b6:fc:19:42:4e:e8:d0:56:da:
10:58:a3:8b:87:79:3c:10:d3:bd:0a:0b:a0:a4:e2:99:52:20:
7d:48:55:a8:38:b1:31:29:d5:e7:3e:b2:18:45:b0:e2:1a:0b:
c4:5e:82:45:2a:18:ca:46:13:ad:76:d0:78:39:71:45:24:1f:
c0:18:e2:80:27:06:2d:72:c1:39:b2:58:45:38:a4:75:66:15:
fb:d6:a1:fd:fe:5c:bb:a4:46:63:97:b7:03:23:d6:ef:ed:63:
d6:41:32:6b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed May 13 15:06:49 2026 by rpki-client