
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa
File: 34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa (raw, json)
Hash identifier: rLCj0HBQYOVbcabzmYNkYLw4AhULEsHLtpCZIKNuZW4=
Subject key identifier: A0:83:14:69:0D:20:2C:02:6A:C7:E6:27:FD:93:2D:EB:A3:17:4E:5F
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 371CE3990BF547ACD9F9A4F4FA98B8E15460289B
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa
Signing time: Wed 13 May 2026 00:46:43 +0000
ROA not before: Wed 13 May 2026 00:41:43 +0000
ROA not after: Wed 12 May 2027 00:46:43 +0000
asID: 131565
IP address blocks: 45.115.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:1c:e3:99:0b:f5:47:ac:d9:f9:a4:f4:fa:98:b8:e1:54:60:28:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: May 13 00:41:43 2026 GMT
Not After : May 12 00:46:43 2027 GMT
Subject: CN=A08314690D202C026AC7E627FD932DEBA3174E5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c0:bb:44:e5:a9:3c:06:de:06:92:43:a0:ef:
f7:0c:e1:e0:c2:ca:b0:6a:c2:2e:ec:1f:19:2c:f3:
59:f7:50:29:71:82:8d:13:c3:01:44:9c:47:01:3e:
12:77:d3:25:9e:51:51:41:6c:1a:63:81:f7:71:00:
fa:6e:41:63:71:df:1d:f0:65:51:5c:76:4b:47:3d:
5f:e6:dc:b6:26:71:b4:2b:4f:37:2c:89:36:ee:b1:
23:86:98:58:a8:02:31:ce:4f:1e:40:84:52:7a:d3:
b2:3d:36:e5:6d:8e:aa:9c:4d:e7:40:b4:f4:02:81:
f5:d9:08:fc:30:7f:54:4e:8d:f4:d4:ff:04:c6:15:
ed:ff:6c:65:1b:c0:bf:65:cd:6c:6d:5b:aa:28:98:
eb:04:c8:d0:00:ba:5d:b5:5a:2e:57:e0:e2:70:05:
e2:c4:43:de:41:cf:0f:34:8c:76:99:fe:1b:ba:ea:
45:43:f0:39:d5:5c:2b:ea:fb:c5:3b:3f:65:fd:48:
7b:4f:40:3a:08:3d:ce:fe:b5:93:7a:d5:76:09:e4:
26:8d:70:99:8c:64:f5:af:7c:70:0e:33:17:ec:b1:
45:28:f6:f9:d1:aa:13:81:68:50:e8:ce:3d:06:fe:
06:10:dc:8f:94:51:8f:56:99:3d:7a:72:34:d8:3f:
c1:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:83:14:69:0D:20:2C:02:6A:C7:E6:27:FD:93:2D:EB:A3:17:4E:5F
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131352e3230302e302f32322d3232203d3e20313331353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.200.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:e9:3a:7a:6c:c1:50:4d:dc:fe:57:e3:fd:c6:a9:26:d2:c9:
16:04:64:ab:de:09:42:12:40:67:66:c7:e0:95:c8:f6:58:b3:
1a:86:93:c8:68:5e:5a:a7:86:1a:57:f2:4a:88:f3:25:b7:3f:
92:9e:86:ea:c2:e0:5a:3b:81:d4:f3:d4:f3:a2:c4:be:2c:fd:
52:80:36:e9:f8:cc:72:2c:06:74:a4:07:ca:9b:39:5a:be:4a:
d9:0d:72:4b:bf:10:21:93:4c:c8:95:25:26:f0:5c:4e:fd:95:
fc:ce:7e:33:4d:39:67:55:1f:05:0e:44:86:6d:3a:c3:84:4f:
82:23:a5:c3:ad:85:d7:f7:3f:74:45:81:c5:2d:b3:e6:af:44:
58:9c:55:40:89:ab:40:33:a4:09:0a:65:dc:83:56:57:ae:c5:
1d:8a:22:7c:3f:44:31:a3:e3:f2:05:1d:bd:d4:6f:f9:04:c3:
c9:ff:b4:e6:0b:9c:7d:8c:5a:22:91:d3:af:d5:c7:73:e4:69:
a9:6b:ce:ba:0d:b9:cb:b0:a0:5e:76:a5:ce:6f:ca:4f:5e:ef:
4c:99:77:9e:b6:37:de:04:d8:4c:e9:eb:87:15:40:2a:74:c7:
84:3e:48:a1:cb:2d:1b:0f:c6:47:5d:4d:33:31:db:9e:0c:9c:
06:1b:b6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:27 2026 by rpki-client