
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39362e302f32322d3232203d3e2039383038.roa
File: 34352e3235312e39362e302f32322d3232203d3e2039383038.roa (raw, json)
Hash identifier: NH1gynqSs7G2vkZrLnXyhx0zx1/5I1+9TU/pNnIMyi0=
Subject key identifier: 63:59:89:32:2C:A3:E7:2F:DC:65:5F:84:20:B1:AF:86:32:DB:2E:4D
Certificate issuer: /CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Certificate serial: 57AB0CE6371E57070935B2557A5EB3C540F8B44D
Authority key identifier: B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39362e302f32322d3232203d3e2039383038.roa
Signing time: Thu 16 Jul 2026 01:50:01 +0000
ROA not before: Thu 16 Jul 2026 01:45:01 +0000
ROA not after: Thu 15 Jul 2027 01:50:01 +0000
asID: 9808
IP address blocks: 45.251.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 12:51:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:ab:0c:e6:37:1e:57:07:09:35:b2:55:7a:5e:b3:c5:40:f8:b4:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5148646F2C451864E20696E4F1C926A098BC8D2
Validity
Not Before: Jul 16 01:45:01 2026 GMT
Not After : Jul 15 01:50:01 2027 GMT
Subject: CN=635989322CA3E72FDC655F8420B1AF8632DB2E4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:7e:db:2d:91:17:5f:48:e6:47:bf:12:95:
54:be:38:33:13:11:a7:fd:26:fd:62:fe:f5:c4:e1:
3a:e8:65:cd:82:41:48:b6:e7:7c:31:2d:29:5d:7e:
c6:3f:ee:ef:95:a0:4c:3b:fc:13:5e:cc:78:82:ce:
4c:4b:26:fd:95:82:f6:70:87:42:42:ce:1c:7a:c7:
b0:0e:94:98:c7:2e:96:6b:0e:ce:a3:ef:ae:d1:ff:
96:6b:2e:8c:c3:45:bd:e9:aa:e4:f2:f0:de:55:64:
89:f8:ea:4e:07:0e:76:e2:95:9e:ab:25:da:0b:6f:
8a:4f:ac:d7:9c:02:a4:e8:66:ba:a6:57:01:13:1d:
4b:2a:bd:3f:88:84:28:28:25:ea:74:e2:3a:f5:2b:
70:4d:3e:1d:ba:6e:cc:4a:12:42:b4:da:65:31:e5:
78:fc:8b:53:fe:ac:c2:da:df:dc:86:ad:a0:c8:49:
5a:35:f5:56:22:35:c2:cc:db:35:4f:4b:12:02:1c:
ac:a5:8f:73:98:93:fb:ff:a4:b3:7a:9a:25:01:b4:
6a:b5:56:ee:ed:88:38:6a:d2:77:1f:d9:d0:c0:40:
4e:6c:5c:35:9f:d5:8a:f5:f4:b3:82:cb:d2:38:ca:
35:0c:1b:c4:f6:d7:35:ce:f9:87:f7:85:6b:19:5f:
a6:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:59:89:32:2C:A3:E7:2F:DC:65:5F:84:20:B1:AF:86:32:DB:2E:4D
X509v3 Authority Key Identifier:
keyid:B5:14:86:46:F2:C4:51:86:4E:20:69:6E:4F:1C:92:6A:09:8B:C8:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/B5148646F2C451864E20696E4F1C926A098BC8D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B5148646F2C451864E20696E4F1C926A098BC8D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1109354036869464085/0/34352e3235312e39362e302f32322d3232203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.251.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:92:71:12:84:be:77:2c:4e:5e:1f:f8:04:ae:08:50:a6:49:
16:bc:0d:0d:cc:3a:5a:ba:37:e7:80:06:89:e4:8c:c2:2e:7f:
fb:5e:50:2a:32:b4:13:d6:db:71:22:9e:88:77:68:a5:c0:57:
e3:90:0a:d3:15:07:ea:e1:7c:94:ba:63:77:1d:2a:bf:d0:ce:
ef:73:d9:87:aa:09:3c:f3:a7:4f:af:4e:a0:de:ee:f0:a1:42:
c3:c9:ad:2b:48:87:47:e0:e4:4a:05:8a:95:b4:f1:05:ad:32:
82:9d:f3:d1:77:97:1f:58:e3:b8:af:79:97:3c:ac:31:40:32:
f8:89:e0:4f:b6:3c:a7:1b:02:13:f3:2a:ef:c1:aa:22:cf:e7:
15:33:33:57:93:62:5b:52:3f:6a:e9:45:75:7f:d6:0c:24:a1:
03:e2:ea:fa:dd:05:0b:4b:03:09:d7:bf:28:30:b0:65:99:5a:
0c:fd:9d:e9:e5:1f:8f:fb:c3:91:8b:eb:aa:3d:ac:bb:ad:5c:
55:e2:5e:cf:51:95:8d:d8:a6:94:50:b6:30:1c:49:04:2c:72:
55:85:15:1b:7c:da:37:e3:30:19:24:41:fb:14:7f:bd:f3:97:
26:ea:19:0b:8f:50:93:7b:56:c4:7d:00:28:5e:af:61:19:a7:
a3:fb:1d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:34 2026 by rpki-client