
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313333303333.roa
File: 34352e3234382e382e302f32322d3232203d3e20313333303333.roa (raw, json)
Hash identifier: jGrFXhvkX6ucSPd3A1QSV4wlEOY4gNmyKvUbx/Zhk2o=
Subject key identifier: FB:3A:93:DE:6D:55:9F:D5:CA:FD:5E:A4:8F:F5:10:38:47:0D:7D:9D
Certificate issuer: /CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Certificate serial: 6F800A48F79E8566E6D617D3470A389E17D3DC19
Authority key identifier: B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313333303333.roa
Signing time: Tue 22 Sep 2026 04:13:57 +0000
ROA not before: Tue 22 Sep 2026 04:08:57 +0000
ROA not after: Tue 21 Sep 2027 04:13:57 +0000
asID: 133033
IP address blocks: 45.248.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 09:52:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:80:0a:48:f7:9e:85:66:e6:d6:17:d3:47:0a:38:9e:17:d3:dc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B1F9550677201454EB206CCFD059783FCDDB44F0
Validity
Not Before: Sep 22 04:08:57 2026 GMT
Not After : Sep 21 04:13:57 2027 GMT
Subject: CN=FB3A93DE6D559FD5CAFD5EA48FF51038470D7D9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a7:a3:c0:50:0f:55:89:b8:4d:7d:c2:1d:fd:
0d:72:63:6b:fb:42:89:83:cb:4f:a6:02:a1:0b:aa:
0d:79:2f:a8:6a:f0:4c:16:82:dc:f8:9a:4f:dd:cc:
c9:61:fa:09:d4:0b:41:c9:92:e6:1b:ad:ad:21:7f:
d1:9d:d5:75:96:b4:d9:36:80:6e:0f:5b:9d:e3:58:
74:07:be:b5:04:a9:38:90:39:12:0d:2f:07:5e:78:
22:1d:95:47:96:c1:4f:a0:65:6d:c8:bf:70:d1:ee:
7c:d7:ea:1c:6f:f6:f5:af:a5:83:54:23:2b:87:a9:
98:58:b0:bb:9e:7e:75:3b:33:b2:b7:3f:d5:f2:a8:
20:ad:a0:2f:da:99:3a:a6:5b:98:c2:fe:b0:40:dd:
92:7d:6d:82:c8:a9:0e:a6:1a:74:23:71:cc:68:b1:
17:55:61:02:74:14:7e:73:44:27:a4:93:01:b9:68:
c0:52:23:ab:e0:35:11:f1:09:55:fa:71:53:d3:92:
df:28:80:cf:2c:29:19:a9:c0:fd:29:2a:31:8a:fa:
af:9f:0e:2b:a4:4d:fb:7e:aa:37:af:68:d8:81:af:
6c:49:b3:9e:12:ca:83:05:af:8f:71:6b:2b:bb:de:
dc:25:8d:f2:b1:a3:f5:e8:52:4e:0e:4e:30:67:26:
5d:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3A:93:DE:6D:55:9F:D5:CA:FD:5E:A4:8F:F5:10:38:47:0D:7D:9D
X509v3 Authority Key Identifier:
keyid:B1:F9:55:06:77:20:14:54:EB:20:6C:CF:D0:59:78:3F:CD:DB:44:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/B1F9550677201454EB206CCFD059783FCDDB44F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B1F9550677201454EB206CCFD059783FCDDB44F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714815489/0/34352e3234382e382e302f32322d3232203d3e20313333303333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.8.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:5b:bb:9d:e4:48:c5:13:d9:93:d1:66:61:00:7a:ee:d8:5b:
a3:2c:03:38:66:85:eb:8b:86:1e:3d:95:d9:47:17:19:b6:f8:
67:fd:f8:a4:31:ca:8a:c5:a4:93:71:1c:b8:b1:0a:aa:eb:64:
77:08:bc:6d:3f:17:16:4e:b3:af:a4:07:58:b7:51:a2:db:1a:
ea:72:44:38:0c:f2:10:c8:d7:2b:0f:14:b6:02:09:41:c1:ad:
14:fd:f5:fc:55:02:cd:74:fd:a5:f6:42:de:92:9a:e7:b9:2f:
3e:97:7b:41:45:e1:06:8f:3a:f7:2b:42:50:d5:07:3b:5e:6e:
d7:2b:03:b2:c6:1e:04:0f:20:1a:a6:f3:a4:cf:a3:36:e1:a8:
6d:e3:30:3b:76:32:ee:f7:fe:ea:dc:b7:d7:83:7e:8a:40:df:
ad:2b:ef:9b:f7:4b:72:af:98:dd:76:fa:80:bc:9c:5b:b9:df:
54:4a:be:0b:cf:cd:cb:f6:5f:5c:d2:fd:9e:a0:17:d2:fb:05:
93:31:7b:f2:8e:5f:44:71:bb:ce:0a:d4:63:77:fc:41:06:fe:
c1:45:a2:67:76:e0:9e:e9:d3:b1:d4:c2:df:35:80:98:be:20:
dc:e9:3d:77:06:68:b9:d1:6b:f5:61:82:1b:3f:7b:1a:4f:b0:
6c:20:7e:db
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUb4AKSPeehWbm1hfTRwo4nhfT3BkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZD
RERCNDRGMDAeFw0yNjA5MjIwNDA4NTdaFw0yNzA5MjEwNDEzNTdaMDMxMTAvBgNV
BAMTKEZCM0E5M0RFNkQ1NTlGRDVDQUZENUVBNDhGRjUxMDM4NDcwRDdEOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmp6PAUA9VibhNfcId/Q1yY2v7
QomDy0+mAqELqg15L6hq8EwWgtz4mk/dzMlh+gnUC0HJkuYbra0hf9Gd1XWWtNk2
gG4PW53jWHQHvrUEqTiQORINLwdeeCIdlUeWwU+gZW3Iv3DR7nzX6hxv9vWvpYNU
IyuHqZhYsLuefnU7M7K3P9XyqCCtoC/amTqmW5jC/rBA3ZJ9bYLIqQ6mGnQjccxo
sRdVYQJ0FH5zRCekkwG5aMBSI6vgNRHxCVX6cVPTkt8ogM8sKRmpwP0pKjGK+q+f
DiukTft+qjevaNiBr2xJs54SyoMFr49xayu73twljfKxo/XoUk4OTjBnJl0zAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU+zqT3m1Vn9XK/V6kj/UQOEcNfZ0wHwYDVR0j
BBgwFoAUsflVBncgFFTrIGzP0Fl4P83bRPAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3OTc5NjcxNDgxNTQ4OS8wL0IxRjk1NTA2NzcyMDE0NTRFQjIwNkNDRkQwNTk3
ODNGQ0REQjQ0RjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjFGOTU1MDY3NzIwMTQ1NEVCMjA2Q0NGRDA1OTc4M0ZDRERCNDRGMC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc5Nzk2NzE0ODE1NDg5LzAvMzQzNTJlMzIzNDM4
MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzMwMzMzMy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAi34CDANBgkqhkiG9w0BAQsFAAOCAQEAp1u7neRIxRPZk9FmYQB67thboywD
OGaF64uGHj2V2UcXGbb4Z/34pDHKisWkk3EcuLEKqutkdwi8bT8XFk6zr6QHWLdR
otsa6nJEOAzyEMjXKw8UtgIJQcGtFP31/FUCzXT9pfZC3pKa57kvPpd7QUXhBo86
9ytCUNUHO15u1ysDssYeBA8gGqbzpM+jNuGobeMwO3Yy7vf+6ty314N+ikDfrSvv
m/dLcq+Y3Xb6gLycW7nfVEq+C8/Ny/ZfXNL9nqAX0vsFkzF78o5fRHG7zgrUY3f8
QQb+wUWiZ3bgnunTsdTC3zWAmL4g3Ok9dwZoudFr9WGCGz97Gk+wbCB+2w==
-----END CERTIFICATE-----
Generated at Sun Oct 11 16:35:33 2026 by rpki-client