
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35342e302f32342d3234203d3e203633353939.roa
File: 34352e3235312e35342e302f32342d3234203d3e203633353939.roa (raw, json)
Hash identifier: cTOAofuVrZB6PvajehxRqJi1HOjgKdwuykVDBV6ic3Y=
Subject key identifier: 3B:44:08:AE:77:7B:17:66:54:B3:E0:46:3D:65:68:60:F6:C4:87:B3
Certificate issuer: /CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Certificate serial: 7B8A84C45B92597B4E85FA12E12703744D6857F5
Authority key identifier: 48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35342e302f32342d3234203d3e203633353939.roa
Signing time: Thu 30 Apr 2026 07:05:04 +0000
ROA not before: Thu 30 Apr 2026 07:00:04 +0000
ROA not after: Thu 29 Apr 2027 07:05:04 +0000
asID: 63599
IP address blocks: 45.251.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 02:05:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:8a:84:c4:5b:92:59:7b:4e:85:fa:12:e1:27:03:74:4d:68:57:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4853A1B317C47AA72B45FD086B1BD9E2F5AB6133
Validity
Not Before: Apr 30 07:00:04 2026 GMT
Not After : Apr 29 07:05:04 2027 GMT
Subject: CN=3B4408AE777B176654B3E0463D656860F6C487B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:79:48:5b:1a:5a:55:b3:0c:79:44:9c:67:97:
ad:a7:31:d0:24:ae:7e:4d:3c:19:7f:b3:46:a7:6e:
19:33:3a:be:82:4a:10:0f:61:6a:86:2e:ac:b2:36:
7c:a7:e3:08:c9:1f:f1:04:cf:2c:92:28:6b:8c:11:
bd:16:bc:8e:38:50:71:f1:c4:a0:e9:56:df:cb:51:
c1:19:1d:da:bd:f9:a7:ea:64:6e:15:56:13:34:7b:
c3:8d:73:00:c0:50:a8:f5:ba:3e:67:5b:9e:1b:0e:
2a:e2:aa:ed:53:d2:71:f3:4b:2e:f9:60:b2:ae:5c:
e2:76:f3:41:ad:fc:b6:5d:0b:51:2e:f2:25:95:98:
a5:c9:f6:c2:40:b6:d5:51:c4:a8:57:5f:26:0d:19:
37:db:b4:c2:ae:91:7c:11:bb:2f:a6:e7:1e:ae:48:
fb:cf:35:f8:e6:1f:91:38:ae:53:41:59:46:32:6a:
df:d4:f7:23:72:5e:e6:2d:09:f7:67:dc:48:88:7b:
32:c2:35:dd:17:eb:f1:72:b7:5e:c0:06:b6:3c:62:
b4:a6:30:d2:f9:01:42:4c:15:d8:05:3f:fb:82:80:
fd:97:0c:e2:c6:12:d6:d9:4f:30:0d:5b:72:30:3c:
1d:3b:63:24:15:f3:6a:e4:26:b8:ef:81:89:1b:ff:
27:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:44:08:AE:77:7B:17:66:54:B3:E0:46:3D:65:68:60:F6:C4:87:B3
X509v3 Authority Key Identifier:
keyid:48:53:A1:B3:17:C4:7A:A7:2B:45:FD:08:6B:1B:D9:E2:F5:AB:61:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4853A1B317C47AA72B45FD086B1BD9E2F5AB6133.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748241923/0/34352e3235312e35342e302f32342d3234203d3e203633353939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:2b:d5:a3:96:4c:ac:b7:34:f4:f1:1c:b9:49:7a:eb:37:12:
67:09:27:8c:6a:ed:1e:ee:93:ce:7b:63:c2:ff:8a:c8:3f:9c:
94:6f:f6:38:61:3a:cb:98:90:6a:af:0a:52:89:63:a2:6e:3c:
2f:22:05:13:ea:a4:c8:e3:da:78:7b:46:44:f1:af:b2:46:fb:
14:ff:91:65:d4:44:15:9f:37:f3:c9:3e:3a:a9:c4:44:01:29:
4f:3d:2c:cc:9b:de:71:9d:77:98:d7:21:ad:f9:c1:3f:31:05:
ec:41:9d:3d:44:c4:6c:63:c7:b0:c3:3a:62:40:dd:fa:91:8b:
ec:04:ec:ea:06:d6:fc:36:a3:8f:1c:50:42:7b:c4:e0:c5:5e:
fb:ae:d5:b1:e4:65:35:41:c7:76:02:0e:e8:d4:9f:15:3a:3d:
3f:80:40:90:ad:8b:42:16:5c:4e:fb:04:9e:a2:a2:da:bf:73:
c0:d9:f4:ec:9a:a6:d3:4e:4a:0f:44:1c:ba:64:69:65:eb:22:
b7:05:83:bc:f5:d9:37:22:ac:70:a6:4d:23:8d:12:03:77:43:
22:e9:7d:d5:99:33:dd:f5:fd:6c:e2:40:aa:d1:36:8a:38:aa:
d2:03:4d:21:e1:4a:90:b5:78:f4:7b:b2:ac:fb:f2:15:b8:32:
ba:3f:c6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:14:56 2026 by rpki-client