
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa
File: 34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa (raw, json)
Hash identifier: CUo6KI0C02tUysr9K890TtQgm00S71yWpThJcqrvcys=
Subject key identifier: 71:86:84:CB:07:2E:F2:2F:1D:5A:6B:89:4C:D4:EF:F1:C4:A0:78:72
Certificate issuer: /CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Certificate serial: 3EE07A96634779BF5744F8D92F545E453CD4F012
Authority key identifier: 3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa
Signing time: Thu 16 Apr 2026 04:06:43 +0000
ROA not before: Thu 16 Apr 2026 04:01:43 +0000
ROA not after: Thu 15 Apr 2027 04:06:43 +0000
asID: 146772
IP address blocks: 45.248.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:e0:7a:96:63:47:79:bf:57:44:f8:d9:2f:54:5e:45:3c:d4:f0:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3D01CD6928DDE8D26AC96265F1F904C72F1A12B8
Validity
Not Before: Apr 16 04:01:43 2026 GMT
Not After : Apr 15 04:06:43 2027 GMT
Subject: CN=718684CB072EF22F1D5A6B894CD4EFF1C4A07872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:6a:7b:79:fc:73:0f:6e:e8:43:4a:05:24:
4e:0d:71:9a:ae:e2:ab:ff:bd:f9:7f:7d:3a:ca:8a:
0d:76:73:0f:0a:d1:5f:ec:ee:b2:d2:1f:2b:2a:6a:
b9:cd:69:a2:fc:c4:10:2e:2c:4f:94:6b:a3:63:71:
8e:af:81:dd:f7:8f:79:65:09:63:a0:5f:a0:16:36:
7b:aa:03:44:9d:25:f5:56:da:cb:9a:fe:e7:f1:f0:
90:11:de:a4:10:e4:3b:61:50:8a:5f:91:f3:84:c9:
68:eb:0f:2f:55:e8:d5:9a:98:67:c9:ad:23:cf:dd:
d7:4c:f8:cb:a9:15:23:ba:68:79:d1:39:f5:d0:dd:
92:10:43:4e:7d:35:b1:4a:47:13:3e:8b:e3:b9:86:
70:29:a5:bd:aa:e8:26:ca:57:e0:06:3a:cd:3a:08:
91:13:d3:dc:c7:8b:da:f2:89:01:48:6b:76:8a:c3:
2c:da:8d:47:65:bf:70:00:b1:81:c4:cd:96:cf:3e:
65:c7:0d:b9:6c:84:2d:b1:fb:0f:99:22:c7:ae:a9:
2d:52:a2:a5:b2:88:ae:23:84:73:06:6b:b1:2b:6f:
0d:e8:f8:77:b2:03:ec:b8:b9:38:6c:1e:36:39:68:
b2:13:ea:07:ea:2d:5b:85:66:1a:e8:0e:56:92:fe:
bf:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:84:CB:07:2E:F2:2F:1D:5A:6B:89:4C:D4:EF:F1:C4:A0:78:72
X509v3 Authority Key Identifier:
keyid:3D:01:CD:69:28:DD:E8:D2:6A:C9:62:65:F1:F9:04:C7:2F:1A:12:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3D01CD6928DDE8D26AC96265F1F904C72F1A12B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585389265420289/0/34352e3234382e3131302e302f32342d3234203d3e20313436373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.248.110.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bf:d7:02:05:8a:e6:45:d5:33:e6:11:32:b0:14:50:1d:eb:
ec:d2:18:76:e9:90:20:ed:d4:93:9b:62:51:c0:d3:49:71:5c:
87:45:fb:90:3a:a4:65:3c:84:55:4a:fc:5a:95:9b:49:bf:74:
83:3c:21:cb:f5:db:17:17:ed:fe:d8:57:2a:a1:40:46:5e:ad:
92:30:6b:b9:27:18:b0:76:1c:5f:4a:a6:41:9f:cb:33:91:4d:
9d:2f:9e:03:35:49:20:b8:28:e6:03:c5:6b:91:f7:e1:ba:61:
a9:83:87:b5:97:a8:29:00:47:a4:32:77:c3:0d:4d:31:95:32:
a2:5f:8f:9f:06:90:ed:ca:e1:9e:12:ec:cc:61:74:c1:92:87:
a9:a2:2d:a3:b1:9a:81:29:53:3e:5f:95:50:75:4e:07:f6:dd:
73:bc:19:17:46:4e:6a:5e:8c:64:2d:19:3d:ca:46:7d:20:a8:
a0:74:f5:80:6e:f3:9b:39:0e:ac:0d:54:33:a3:97:e2:2f:fa:
4b:de:f6:d3:94:1e:30:96:9c:17:17:2b:3e:a5:33:85:1b:55:
1f:df:7e:17:e6:c9:41:14:7c:6e:c5:23:36:a1:6f:df:fe:b6:
75:7e:33:a5:67:54:e1:da:6d:de:91:d4:2e:64:d2:ff:35:a2:
b8:24:fb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:20:50 2026 by rpki-client