
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35322e302f32342d3234203d3e203633353939.roa
File: 34352e3235312e35322e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier: J5ttVDSRteWIi4hwKsChc1z51WL7/hz22Kunm15KqPk=
Subject key identifier: FC:5A:99:99:1D:CC:51:29:41:B2:8D:2A:C2:E5:ED:98:C3:3D:81:7D
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 304DC1DE468AC912D3AF6A332F65C35D6995730A
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35322e302f32342d3234203d3e203633353939.roa
Signing time: Thu 30 Apr 2026 07:05:04 +0000
ROA not before: Thu 30 Apr 2026 07:00:04 +0000
ROA not after: Thu 29 Apr 2027 07:05:04 +0000
asID: 63599
IP address blocks: 45.251.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:4d:c1:de:46:8a:c9:12:d3:af:6a:33:2f:65:c3:5d:69:95:73:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 30 07:00:04 2026 GMT
Not After : Apr 29 07:05:04 2027 GMT
Subject: CN=FC5A99991DCC512941B28D2AC2E5ED98C33D817D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:47:19:ec:15:f8:72:98:1e:f9:85:78:34:fb:
d5:7d:3e:5b:6e:97:14:7a:fb:ea:67:90:57:94:8f:
77:8f:c1:b3:58:fc:7a:b0:2b:92:92:20:cf:f9:fe:
cf:b6:d3:79:cd:d9:3e:8d:ab:bb:af:b2:57:e0:57:
a6:f4:8d:01:28:c3:af:ae:23:d0:37:fe:ff:3f:3e:
ac:44:85:bf:c3:1d:9e:ad:46:34:07:9a:1e:92:71:
49:df:ea:30:f9:ac:8b:fb:32:b0:cc:38:bc:2b:ec:
9f:a7:65:39:8e:53:01:d0:53:50:4d:ca:23:a3:92:
fb:d4:d4:2d:c5:e4:b9:73:70:b7:c8:1c:69:95:13:
0a:32:68:91:76:94:7a:55:f1:7d:65:6a:27:72:dd:
d3:3d:17:88:60:0c:f4:16:81:1b:9b:80:e3:fb:1d:
df:67:f6:85:3d:b7:fc:2a:99:24:6c:51:05:4d:2d:
2e:28:fb:44:78:09:b3:fa:35:59:96:cc:0e:78:6e:
ed:57:30:76:e6:71:35:19:95:5d:be:7d:e4:fd:19:
2c:a3:d6:22:e1:c3:59:9e:53:58:77:19:3c:14:ec:
3d:4f:01:42:92:73:75:ef:48:02:ee:b8:50:b2:a4:
bd:f9:a2:21:35:b2:6e:13:e0:7f:62:db:94:36:33:
56:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:99:99:1D:CC:51:29:41:B2:8D:2A:C2:E5:ED:98:C3:3D:81:7D
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35322e302f32342d3234203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.52.0/24
Signature Algorithm: sha256WithRSAEncryption
60:95:02:ab:0f:69:b9:aa:31:ed:01:50:6f:79:88:3a:9b:b5:
86:13:91:66:7e:9b:b2:e5:64:67:3e:3c:62:67:41:c8:4b:00:
18:07:3a:74:2c:fc:f9:b9:8b:e3:de:cf:ed:2c:bd:e1:40:05:
7b:88:0e:5c:d0:e5:a2:22:15:ff:28:74:f2:6c:cd:5c:6f:14:
c7:99:20:81:f2:32:dc:77:5a:16:13:00:a8:1b:be:32:65:8c:
2f:4c:fc:ee:73:14:bd:3b:66:58:f2:ba:61:9f:98:e8:11:35:
8a:be:ca:be:d9:d0:bb:5b:18:fa:da:95:68:f8:e5:19:dc:8c:
96:d8:10:e7:87:0e:00:27:4e:8e:51:e0:96:f5:67:8b:0c:dd:
2d:d6:eb:dd:ab:26:c6:57:57:01:4d:99:c0:87:5f:a3:e1:ae:
17:2a:85:f1:0e:1d:a8:d5:38:63:b7:27:11:dc:6f:b5:08:eb:
82:83:4b:5f:ea:52:f6:51:e6:97:1a:a6:81:e6:84:e3:73:b4:
dd:34:56:f5:b5:d6:b7:d2:ec:fb:47:ce:a3:ae:ac:76:93:c3:
cc:f3:08:51:91:b0:13:09:dd:38:e7:85:a1:69:08:6d:ed:e2:
ca:15:1a:d2:ea:78:54:d5:9b:a8:de:2d:65:55:ba:46:e7:1a:
2e:35:41:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:56:59 2026 by rpki-client