
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa
File: 34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa (raw, json)
Hash identifier: ErdNqCr6rLUUPtehXJutXA4Dm9q+vnzD7jD/bqmUhp0=
Subject key identifier: 91:10:93:8C:15:BF:01:1A:F2:C6:FB:58:66:18:4F:7A:2E:97:C5:28
Certificate issuer: /CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Certificate serial: 389774672BF23038275FF1A332E99C12B402ACA6
Authority key identifier: 26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa
Signing time: Thu 07 May 2026 03:26:07 +0000
ROA not before: Thu 07 May 2026 03:21:07 +0000
ROA not after: Thu 06 May 2027 03:26:07 +0000
asID: 131565
IP address blocks: 45.119.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:57:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:97:74:67:2b:f2:30:38:27:5f:f1:a3:32:e9:9c:12:b4:02:ac:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6
Validity
Not Before: May 7 03:21:07 2026 GMT
Not After : May 6 03:26:07 2027 GMT
Subject: CN=9110938C15BF011AF2C6FB5866184F7A2E97C528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b6:10:9e:c0:1b:e8:45:0e:c6:67:33:e9:32:
8e:19:15:53:03:ba:fe:e5:a9:f9:12:83:06:99:be:
96:e7:ad:40:a7:d6:5a:17:c6:ba:16:b8:3f:40:af:
78:50:2d:16:22:e4:09:10:dd:ea:54:0b:57:76:c6:
fb:c9:fe:80:64:fb:70:1a:57:9c:26:6a:ac:e1:6b:
ee:6a:ef:ed:50:47:0d:05:6a:f7:0e:64:94:bb:26:
37:90:40:35:53:db:6c:90:2e:57:38:ba:3d:f3:35:
94:ca:32:d2:dd:17:25:d3:bc:79:86:89:c3:5a:83:
8f:31:d7:ca:48:2e:8d:5b:01:fe:a7:ab:22:4b:f8:
39:37:33:ea:cf:ca:f7:dd:ba:e1:0c:13:77:41:3c:
19:4c:8f:79:a0:2c:c4:79:96:be:07:f7:ec:33:f3:
f5:e9:bd:24:27:32:d9:17:b8:38:7e:69:18:4e:1b:
e0:27:ed:db:54:68:d6:4d:a0:f1:84:3c:4c:ae:5a:
7e:03:e6:0d:3d:c7:84:02:7e:6e:8e:16:21:af:56:
95:ee:b2:b8:11:2c:57:c0:ae:c2:2a:43:1c:e6:54:
10:c0:02:bb:c1:ba:5d:41:aa:e1:87:02:c5:6a:23:
33:8a:3c:5d:ca:7d:25:5c:05:26:ff:95:a8:08:84:
af:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:10:93:8C:15:BF:01:1A:F2:C6:FB:58:66:18:4F:7A:2E:97:C5:28
X509v3 Authority Key Identifier:
keyid:26:27:A5:56:D3:7B:F3:69:6E:F5:EA:9B:0F:F2:8A:61:55:EA:0A:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2627A556D37BF3696EF5EA9B0FF28A6155EA0AA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1104608188126199815/0/34352e3131392e3131362e302f32322d3232203d3e20313331353635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.119.116.0/22
Signature Algorithm: sha256WithRSAEncryption
9a:d8:cc:f6:f0:fa:61:6d:05:0a:22:b5:81:4f:d7:3e:92:67:
b7:a0:62:d5:48:69:ba:f9:2a:20:07:2a:49:ec:e1:18:2a:0d:
39:0b:dd:e7:27:2a:7e:84:1c:f9:75:c4:dc:52:87:44:78:9b:
a1:73:ca:a5:f8:65:c7:3f:ea:c8:d2:03:bc:bf:99:f0:d0:7a:
06:b4:fe:03:4d:0d:43:02:ee:4a:ff:ca:c9:bc:2b:d5:20:2a:
12:7c:57:50:e9:5d:1b:4d:dc:fe:10:7f:1b:a1:62:98:7d:71:
a2:d6:7d:bb:d0:7a:56:20:d8:91:ea:28:de:63:a9:64:28:a2:
b6:79:b4:81:2d:ba:e1:1f:a6:00:9b:b8:92:db:9c:30:1e:53:
7f:c5:72:e2:da:01:e6:f1:9e:6d:cd:2f:b1:1f:71:7b:f5:15:
cd:2a:f1:a4:77:04:0d:ee:8f:78:4e:86:80:3c:1e:48:b5:77:
ce:fe:33:e4:14:88:48:2d:80:4e:3b:02:b9:c0:cc:e5:8c:bc:
ab:15:ab:76:8c:22:53:ef:a9:80:fa:d0:87:9f:86:a8:85:5f:
60:21:f3:30:25:0e:1c:c5:49:6f:a7:49:62:dd:f6:38:ea:45:
d9:cf:22:3a:bb:f7:e2:7e:56:09:1c:be:e8:8b:f1:be:30:f6:
74:84:e5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:23 2026 by rpki-client