
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132342e302f32322d3232203d3e2034383132.roa
File: 34352e3132342e3132342e302f32322d3232203d3e2034383132.roa (raw, json)
Hash identifier: CXEpAmsvqUr2yoEBoF7EcLtMxD3Q11yE8kM6MZ+Yois=
Subject key identifier: 09:DF:F5:3D:09:12:64:18:04:32:A3:B3:75:0F:DB:CA:86:F6:7C:8B
Certificate issuer: /CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Certificate serial: 5786C080236B77075FDA73BA20FDA15B4FF9EF29
Authority key identifier: 6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132342e302f32322d3232203d3e2034383132.roa
Signing time: Mon 27 Apr 2026 07:56:56 +0000
ROA not before: Mon 27 Apr 2026 07:51:56 +0000
ROA not after: Mon 26 Apr 2027 07:56:56 +0000
asID: 4812
IP address blocks: 45.124.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 15:57:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:86:c0:80:23:6b:77:07:5f:da:73:ba:20:fd:a1:5b:4f:f9:ef:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94
Validity
Not Before: Apr 27 07:51:56 2026 GMT
Not After : Apr 26 07:56:56 2027 GMT
Subject: CN=09DFF53D091264180432A3B3750FDBCA86F67C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:de:82:34:e4:4b:da:f1:6c:05:43:e6:b6:38:
15:ba:a9:74:bc:09:9c:79:a5:5c:ed:94:25:94:30:
93:a8:ee:8a:6a:b5:2c:8d:58:fe:d2:a7:a6:be:77:
c1:c6:c0:e1:d1:a2:39:2d:04:c9:e6:8f:8e:ce:71:
c5:96:ee:f4:3c:2c:1e:7f:b2:1d:52:ff:81:2c:52:
43:df:b6:a4:87:46:a3:d8:00:12:83:01:71:92:1f:
47:0f:ea:8f:50:b2:95:a5:a5:10:36:dc:00:0f:9b:
4c:e7:07:c5:dc:4b:07:76:c9:7b:ee:94:3f:dd:86:
45:44:c3:55:5c:20:71:5f:75:e4:fc:5d:a2:7b:84:
ad:39:8e:69:14:a7:a6:bb:e9:74:36:da:28:ba:65:
04:7b:80:f5:c0:8c:00:96:fd:8f:d2:4f:f6:7e:b2:
9c:7a:a4:50:40:62:11:f2:2f:20:24:04:97:ab:b1:
18:c8:e5:2e:b1:c2:03:53:6b:89:01:7d:a3:fa:61:
28:69:bc:84:29:a7:f3:c3:da:21:ca:41:c8:05:60:
9a:1c:e8:12:b9:9a:f3:73:70:c2:3b:66:60:4b:51:
6a:15:74:f6:38:84:c2:f5:4c:64:94:0c:ba:a5:38:
78:47:bd:5b:ea:a8:23:f8:3b:63:ca:94:0c:51:c3:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DF:F5:3D:09:12:64:18:04:32:A3:B3:75:0F:DB:CA:86:F6:7C:8B
X509v3 Authority Key Identifier:
keyid:6A:89:8B:3E:4E:BB:4C:57:7F:76:BB:D7:F0:D7:51:F8:50:5A:DD:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6A898B3E4EBB4C577F76BBD7F0D751F8505ADD94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097405115268071427/0/34352e3132342e3132342e302f32322d3232203d3e2034383132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.124.0/22
Signature Algorithm: sha256WithRSAEncryption
21:7b:c1:d5:39:e1:31:5b:b8:0e:ae:19:1e:41:a4:d3:88:63:
13:6f:cb:37:51:e6:77:8d:40:4f:9c:f6:0c:55:db:69:33:2d:
04:40:d6:04:fd:e5:29:e8:6d:a1:d6:4e:26:95:56:25:d8:fd:
0c:8b:0d:af:88:a2:2e:f5:9d:c1:fd:96:0b:f0:29:3d:a1:b4:
1a:9f:df:56:16:48:1c:b8:83:1b:3d:8c:b1:77:eb:54:c3:92:
0b:8b:8f:b8:93:1e:a7:80:0f:2a:44:b5:62:46:46:31:09:4d:
78:1d:49:cf:51:ef:a0:6a:f4:ef:fb:54:02:5a:fe:0f:e4:85:
bc:81:02:33:fd:dd:b7:78:e8:ca:39:0d:87:45:48:32:fb:56:
00:dd:07:97:f6:38:cf:02:85:6d:21:61:28:4e:45:e2:f9:0a:
95:25:57:ed:38:a0:4a:70:02:66:30:06:59:c6:89:00:c7:50:
f4:98:17:8a:d7:26:f7:5c:c9:09:65:3f:66:49:8f:0e:23:4c:
c5:4e:b1:2c:b9:9e:90:08:ce:ae:a8:ca:43:b7:4a:1b:7c:fb:
62:72:5d:eb:af:94:43:ff:f0:3f:85:f4:b8:25:b5:a4:67:74:
43:ad:1a:70:98:4f:9b:47:a9:f7:8c:31:5c:9f:fa:e1:a3:56:
a0:36:be:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:46:38 2026 by rpki-client