
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa
File: 34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa (raw, json)
Hash identifier: HOfOfgw/0tw8uL48WO+lG0vSL+fX5+Bi8T2yXk4uMzw=
Subject key identifier: B8:8B:34:74:6C:D0:67:41:C2:E7:7B:F0:3A:F2:A5:C6:25:DF:E4:5A
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 0A09151D84A7C7279CE8395BD10E1A0FC0CFDC86
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa
Signing time: Wed 13 May 2026 00:53:46 +0000
ROA not before: Wed 13 May 2026 00:48:46 +0000
ROA not after: Wed 12 May 2027 00:53:46 +0000
asID: 131565
IP address blocks: 45.116.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:09:15:1d:84:a7:c7:27:9c:e8:39:5b:d1:0e:1a:0f:c0:cf:dc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: May 13 00:48:46 2026 GMT
Not After : May 12 00:53:46 2027 GMT
Subject: CN=B88B34746CD06741C2E77BF03AF2A5C625DFE45A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cd:15:8a:d3:fe:05:e3:92:95:7c:d3:ca:26:
98:a3:0a:84:ae:6f:bc:0e:6a:cd:1f:f0:dc:ef:1f:
3c:6e:14:e3:57:39:28:bd:e4:73:aa:cc:20:f8:14:
e5:11:e7:03:f1:56:1b:17:f3:2f:e0:ce:b1:b3:f3:
61:72:4b:53:ac:d4:1f:aa:bb:05:fd:17:9b:29:4a:
2b:2a:e0:b5:63:f3:6d:47:19:e9:b6:15:14:f5:7c:
e8:e6:25:67:89:b9:3b:0b:6a:f4:b6:ec:60:e7:ed:
30:ba:01:d2:f8:e2:ce:6a:ab:25:18:86:c2:12:27:
80:39:f0:f0:9e:b0:9c:62:09:ac:45:65:c0:01:04:
fe:a6:1e:8c:bb:ed:5b:c9:59:4e:89:a5:20:30:e9:
15:5c:f8:40:e4:24:a5:8d:fc:bd:0e:b0:7a:59:0d:
ef:73:49:ab:ad:02:4b:41:32:94:78:7d:5f:fb:c9:
e6:bd:24:7e:b0:3d:f4:d3:d3:da:fd:dc:8c:f6:d6:
35:89:b0:d7:a4:b9:e7:d4:6d:9a:17:f4:c6:19:32:
24:f5:4e:ea:07:66:03:76:9a:df:08:68:e6:d5:b8:
cd:e1:d1:77:7c:c0:e3:4d:28:d1:a9:66:8a:75:af:
fb:65:95:40:3a:51:38:4b:d0:e6:71:49:9f:80:7d:
77:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8B:34:74:6C:D0:67:41:C2:E7:7B:F0:3A:F2:A5:C6:25:DF:E4:5A
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131362e3135322e302f32322d3232203d3e20313331353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.116.152.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:be:e5:24:91:e1:4e:33:e7:b1:e9:d2:65:77:a1:75:b1:ab:
3c:62:56:3d:31:2b:20:ad:51:b7:be:42:94:70:ab:98:dc:5e:
e5:1d:bc:50:e5:d5:24:b7:58:b2:d6:1f:32:f5:49:90:98:6b:
14:32:94:72:0e:f8:a2:41:7a:87:94:29:fa:69:be:e9:6c:a3:
d8:17:7a:fb:57:08:f7:cf:c9:e2:11:64:04:3e:4f:28:58:31:
a0:3a:8c:69:ea:eb:e1:cb:d7:3a:41:2e:da:86:8d:78:c9:57:
0c:fb:71:6f:1a:22:7d:2c:0e:06:ff:d3:79:73:7c:2b:17:8c:
9e:b4:41:04:e0:2c:44:73:c9:45:f7:35:e7:4c:5c:f1:e9:0b:
ba:a2:aa:c2:2d:3c:15:90:02:11:7a:04:f8:bf:e7:ab:87:ed:
27:a4:db:d6:20:6d:60:3b:9a:52:87:d6:8a:51:0c:72:35:3d:
e7:91:de:07:bf:21:93:31:d7:78:9b:78:db:46:2e:0f:c9:2a:
8a:09:1d:06:70:1f:ee:e9:f1:bc:67:21:a8:57:77:d7:f6:2e:
db:fb:c6:36:76:30:39:23:b7:ee:e1:af:fb:fb:85:aa:d5:3c:
ab:29:62:23:b0:f6:1b:d4:48:0a:bd:75:4c:66:37:7b:96:00:
b2:af:e3:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:22 2026 by rpki-client