
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e392e302f32342d3234203d3e203536303436.roa
File: 34352e3131372e392e302f32342d3234203d3e203536303436.roa (raw, json)
Hash identifier: Rl2df6KXpf17O6KDvOB4Y6apUNABZOlrzN9e6/3Z7yQ=
Subject key identifier: FF:7A:C2:DC:55:A4:11:FA:D7:99:C0:54:D7:ED:62:EB:79:3C:F0:FB
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 6609513B3757F565F144113113102813AA5BB070
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e392e302f32342d3234203d3e203536303436.roa
Signing time: Fri 18 Sep 2026 01:26:04 +0000
ROA not before: Fri 18 Sep 2026 01:21:04 +0000
ROA not after: Fri 17 Sep 2027 01:26:04 +0000
asID: 56046
IP address blocks: 45.117.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 29 Sep 2026 17:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:09:51:3b:37:57:f5:65:f1:44:11:31:13:10:28:13:aa:5b:b0:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 18 01:21:04 2026 GMT
Not After : Sep 17 01:26:04 2027 GMT
Subject: CN=FF7AC2DC55A411FAD799C054D7ED62EB793CF0FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:87:0f:fc:ba:3e:42:bf:de:10:6b:61:a0:
52:41:a7:0e:d1:df:70:a2:41:8c:db:38:33:87:a5:
ea:4d:e4:f5:a9:7d:cc:e8:dc:db:a2:4c:c6:65:ae:
ec:80:7a:87:a6:68:4d:9f:72:38:0d:81:b4:fd:c1:
af:ba:a5:0f:7b:53:8d:84:79:fb:10:14:b9:30:d7:
1b:85:c5:b8:15:6f:72:b8:a6:ed:d8:3a:3f:d7:8d:
2a:0e:a2:46:9c:cb:a1:06:ad:db:f7:9b:8d:ba:45:
57:af:e3:76:3a:8f:2c:0a:a4:49:33:15:23:39:23:
ba:d0:63:d4:26:96:ae:17:bd:d9:04:b9:4d:e7:ef:
76:77:80:70:8c:25:96:7e:68:a7:5d:02:0a:3f:0c:
52:15:28:e3:a4:59:83:9d:ca:47:11:37:9e:12:1b:
9a:aa:fe:51:cd:31:12:7f:ce:dd:57:8e:15:14:c0:
f4:b6:d4:dc:3e:f8:ee:9c:73:18:cd:f0:cf:3d:d3:
b4:0e:e6:f1:c2:93:75:a3:dc:56:93:bc:4e:b2:40:
3e:ef:d7:bc:62:d8:dc:8c:13:24:b2:54:e7:56:13:
04:b6:3f:d2:12:a2:9b:f1:b6:1f:f7:7d:e0:4f:eb:
d8:e1:b2:49:77:24:b3:01:72:ea:c4:29:97:1b:83:
92:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:7A:C2:DC:55:A4:11:FA:D7:99:C0:54:D7:ED:62:EB:79:3C:F0:FB
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3131372e392e302f32342d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.117.9.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2e:8c:9d:34:46:98:2e:b4:3b:54:e8:0c:2e:d2:cc:51:50:
1e:4d:be:3c:70:5e:aa:60:41:6f:64:0b:c0:b8:4a:40:87:14:
0c:a6:9e:da:2b:7a:4c:93:9d:17:9d:e4:c0:bc:94:64:fb:65:
66:78:63:aa:78:61:6a:38:80:96:cd:11:a5:ca:ec:87:87:cc:
86:21:a3:43:0f:b3:02:5e:cc:a0:6b:0d:85:85:7d:69:5e:01:
84:fe:91:7e:cf:85:04:15:cf:89:5d:2d:80:44:71:be:6b:a0:
56:a5:44:cd:54:aa:cb:d3:d7:38:50:df:31:8e:28:c7:5e:e8:
75:73:c7:10:1c:e7:cb:33:36:5d:31:f6:52:72:fd:81:12:1c:
c3:fd:d5:d2:6e:c6:f1:d4:69:b8:2f:ec:2f:ef:4f:17:e9:e8:
2f:78:6a:7c:0e:1a:34:52:cd:e5:66:d3:85:e6:3d:25:43:f3:
04:79:ba:6f:12:e5:55:0c:4a:2f:c0:38:9e:03:5f:26:5e:8a:
06:a5:6c:35:5e:c5:92:7b:0f:c6:63:93:b6:a6:05:13:d7:f9:
37:59:7b:40:36:17:4c:96:ce:07:12:5e:22:7e:9a:f9:09:fc:
a2:fc:85:41:6f:d1:49:9a:38:ba:0b:89:bb:08:18:17:6e:f3:
96:e6:98:86
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIUZglROzdX9WXxRBExExAoE6pbsHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA5MTgwMTIxMDRaFw0yNzA5MTcwMTI2MDRaMDMxMTAvBgNV
BAMTKEZGN0FDMkRDNTVBNDExRkFENzk5QzA1NEQ3RUQ2MkVCNzkzQ0YwRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5IcP/Lo+Qr/eEGthoFJBpw7R
33CiQYzbODOHpepN5PWpfczo3NuiTMZlruyAeoemaE2fcjgNgbT9wa+6pQ97U42E
efsQFLkw1xuFxbgVb3K4pu3YOj/XjSoOokacy6EGrdv3m426RVev43Y6jywKpEkz
FSM5I7rQY9Qmlq4XvdkEuU3n73Z3gHCMJZZ+aKddAgo/DFIVKOOkWYOdykcRN54S
G5qq/lHNMRJ/zt1XjhUUwPS21Nw++O6ccxjN8M8907QO5vHCk3Wj3FaTvE6yQD7v
17xi2NyMEySyVOdWEwS2P9ISopvxth/3feBP69jhskl3JLMBcurEKZcbg5IrAgMB
AAGjggIPMIICCzAdBgNVHQ4EFgQU/3rC3FWkEfrXmcBU1+1i63k88PswHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzQzNTJlMzEzMTM3
MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1MzYzMDM0MzYucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAAtdQkwDQYJKoZIhvcNAQELBQADggEBABwujJ00RpgutDtU6Awu0sxRUB5Nvjxw
XqpgQW9kC8C4SkCHFAymntorekyTnRed5MC8lGT7ZWZ4Y6p4YWo4gJbNEaXK7IeH
zIYho0MPswJezKBrDYWFfWleAYT+kX7PhQQVz4ldLYBEcb5roFalRM1UqsvT1zhQ
3zGOKMde6HVzxxAc58szNl0x9lJy/YESHMP91dJuxvHUabgv7C/vTxfp6C94anwO
GjRSzeVm04XmPSVD8wR5um8S5VUMSi/AOJ4DXyZeigalbDVexZJ7D8Zjk7amBRPX
+TdZe0A2F0yWzgcSXiJ+mvkJ/KL8hUFv0UmaOLoLibsIGBdu85bmmIY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:56:09 2026 by rpki-client