
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233372e302f32342d3234203d3e20313332383833.roa
File: 34352e3131352e3233372e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: sMkeGT1XRln9oOEfmFJ8Em5N9owCBnlr5+e52vYRV68=
Subject key identifier: F2:0E:E9:F5:35:51:CC:EC:CE:03:0C:DA:E6:16:0B:95:EF:95:70:E6
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 36A5214AD1EE7C5CA5C71104FDA2772210E6EA39
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233372e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:10 +0000
ROA not before: Wed 08 Apr 2026 05:54:10 +0000
ROA not after: Wed 07 Apr 2027 05:59:10 +0000
asID: 132883
IP address blocks: 45.115.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:a5:21:4a:d1:ee:7c:5c:a5:c7:11:04:fd:a2:77:22:10:e6:ea:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:10 2026 GMT
Not After : Apr 7 05:59:10 2027 GMT
Subject: CN=F20EE9F53551CCECCE030CDAE6160B95EF9570E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:9f:b4:e7:29:db:d3:0a:71:5e:88:a5:b0:
50:2b:28:02:25:32:b3:f6:16:62:a6:29:43:25:da:
d3:87:58:93:ab:62:90:97:52:b2:b6:a5:c8:8b:5a:
5f:88:04:09:9d:c0:8a:7f:ac:45:f5:87:de:5c:ee:
ff:1c:31:90:c1:f0:5f:f4:4f:b4:2e:56:2e:8e:f5:
b4:59:cf:0b:f5:a7:c5:c3:1a:ca:0b:cc:ec:70:58:
27:36:e2:cc:4a:40:df:f5:f3:5b:7f:79:f6:b2:b0:
8e:ee:17:82:f5:dd:4d:f4:f3:27:a2:13:4d:7e:9e:
c8:bf:7c:f1:ed:73:19:94:21:88:3e:7f:4d:6d:fe:
53:1f:e9:a0:29:dc:57:1e:2a:06:96:03:91:92:91:
72:88:56:c0:ba:8c:6e:4f:28:83:b5:fc:04:ae:89:
3f:7f:51:41:77:d3:14:ca:8c:d1:8b:c9:25:0b:34:
54:46:7b:7e:59:01:12:9f:e9:7e:21:37:17:69:f1:
0f:bf:21:f1:8d:d8:ee:77:56:22:7d:bc:ac:35:48:
fd:9d:c6:73:4a:fd:aa:f0:eb:bf:9d:d4:49:43:f3:
9f:f1:95:ef:12:79:1a:20:3a:d4:f1:4d:d3:42:bc:
62:e6:7c:15:09:7b:97:85:04:8e:74:b4:2b:7d:9e:
ca:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0E:E9:F5:35:51:CC:EC:CE:03:0C:DA:E6:16:0B:95:EF:95:70:E6
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233372e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.237.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:0c:3f:8f:f4:c4:97:b3:b4:b0:7c:e3:3d:d8:87:65:48:98:
cc:1b:3e:e4:b6:9c:b9:c9:29:b0:00:5e:82:83:db:18:c7:42:
90:50:62:e5:c0:4a:49:18:73:37:91:f3:08:08:f2:13:71:89:
df:e5:84:7e:4a:9c:30:43:b6:a5:1a:63:21:a2:92:5e:fb:18:
8a:d6:a1:0d:0a:62:46:fe:a4:5e:6d:28:98:3d:3f:3c:00:3d:
4d:90:ce:7a:3b:b0:bb:e9:7f:89:80:e1:ed:83:ab:b4:b5:be:
d9:1a:29:2b:d5:db:98:45:2d:86:b4:4c:45:08:b6:17:b2:7d:
99:c6:41:45:58:a9:a7:d0:e2:86:f4:3a:a0:f8:64:45:9d:12:
d1:ab:ef:5c:af:1c:4b:13:03:58:05:a1:a3:14:88:fb:04:f8:
af:c1:31:9b:31:80:87:37:6d:11:ac:c7:61:fd:51:da:f3:da:
bc:e3:0e:98:7f:e5:35:7a:a6:62:97:29:30:3e:09:e8:55:fc:
7e:be:a4:e9:d8:06:20:b4:c1:5f:25:d1:6e:2a:2f:4d:1d:49:
ca:c1:78:0c:28:c3:44:2f:ef:35:ae:c4:d3:d7:5b:60:15:20:
02:a5:08:82:5c:94:9d:1d:97:72:6e:9b:fc:34:9a:ac:43:55:
57:a5:52:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:01:16 2026 by rpki-client