
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233382e302f32342d3234203d3e20313332383833.roa
File: 34352e3131352e3233382e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: HwzMyeQYMuzIuzxpk1Q3jUVoUZQgEPe90jhs2V97W6M=
Subject key identifier: EE:8A:90:AF:38:60:A5:5E:C0:F0:F0:1D:EF:FC:CF:4F:C1:1B:59:28
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 6767B82756E867CD457908F849A86D8552CC88E3
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233382e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:09 +0000
ROA not before: Wed 08 Apr 2026 05:54:09 +0000
ROA not after: Wed 07 Apr 2027 05:59:09 +0000
asID: 132883
IP address blocks: 45.115.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:67:b8:27:56:e8:67:cd:45:79:08:f8:49:a8:6d:85:52:cc:88:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:09 2026 GMT
Not After : Apr 7 05:59:09 2027 GMT
Subject: CN=EE8A90AF3860A55EC0F0F01DEFFCCF4FC11B5928
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:57:db:96:14:e2:5b:77:65:17:b4:ef:4b:bd:
df:63:ba:cd:6c:f7:7c:8c:77:6b:26:d8:d9:e7:69:
3d:f8:1f:5f:1f:32:88:a0:b7:10:32:a7:86:eb:1d:
07:e8:d8:81:ff:2c:b1:ce:c2:66:2d:cd:36:2f:04:
67:84:9f:8d:0c:2f:68:56:7a:bc:95:be:9d:72:2d:
08:76:89:96:6f:00:ef:b4:e6:d8:03:8f:52:60:80:
8f:5a:15:08:8a:e7:53:c6:56:85:24:b5:b5:71:e5:
ff:84:97:1e:66:25:c4:46:73:b1:8a:cf:1c:7d:3f:
12:87:a0:a3:85:f5:38:73:6d:0d:62:ba:eb:28:3c:
dd:78:6e:64:75:21:66:43:87:7f:be:32:5d:d2:10:
4d:6d:9f:29:0a:33:30:eb:21:bb:d2:2a:b3:ba:42:
06:1b:11:af:7d:d7:4d:83:1b:50:34:67:88:74:90:
56:60:a2:b0:01:3c:16:6c:ab:1a:99:98:e8:fe:4f:
be:71:35:6d:a2:e6:ff:42:46:a2:fd:b2:56:0f:07:
75:78:b9:33:f0:cb:44:99:c3:ea:03:1d:bf:ad:7a:
a8:97:53:ca:08:12:99:ae:7d:1d:a9:be:e6:9a:c6:
d3:bb:68:78:d2:55:2e:cd:a4:e5:34:79:12:ce:9e:
4c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:90:AF:38:60:A5:5E:C0:F0:F0:1D:EF:FC:CF:4F:C1:1B:59:28
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233382e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.238.0/24
Signature Algorithm: sha256WithRSAEncryption
08:6b:12:5d:62:57:3d:b0:e9:8f:68:19:da:94:22:ed:da:da:
50:c2:6c:bb:83:d2:eb:0e:44:e2:a1:22:71:33:d3:39:77:ca:
1f:da:c4:60:8c:ee:f2:e2:4f:69:33:4e:49:2e:b0:8f:33:4e:
53:1f:d6:58:d7:d3:b5:b7:68:31:50:55:fe:e6:19:de:d1:1e:
f2:cf:23:1c:7d:a0:5f:43:18:3d:43:d0:af:7a:d5:94:59:45:
f6:af:f7:f8:dc:04:f6:df:fd:55:97:3d:53:8f:52:85:03:f3:
2a:81:43:15:8e:ff:f7:82:46:6c:17:b8:f3:5b:c0:2c:bf:72:
90:18:95:f4:37:cb:f8:d1:b0:6e:e5:92:81:c7:8d:94:b8:48:
07:f9:96:2a:28:40:04:77:5c:48:33:22:c7:3b:ad:4a:70:89:
c6:9e:06:68:1e:55:7a:19:58:a8:66:d9:26:2b:75:13:85:b3:
60:b3:f1:04:81:88:fe:57:ec:cb:1a:a3:12:ea:40:d1:38:58:
59:a3:b1:3e:e3:2f:54:0f:99:42:4f:0c:49:60:f3:0b:cf:2d:
f2:91:00:81:05:5e:79:1d:10:c0:f3:b5:9b:16:a0:5c:da:cb:
7c:aa:49:ec:6f:25:35:ab:16:1f:2c:1d:30:39:42:64:22:53:
68:87:94:32
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUZ2e4J1boZ81FeQj4SahthVLMiOMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4
ODJFNzhBMDAeFw0yNjA0MDgwNTU0MDlaFw0yNzA0MDcwNTU5MDlaMDMxMTAvBgNV
BAMTKEVFOEE5MEFGMzg2MEE1NUVDMEYwRjAxREVGRkNDRjRGQzExQjU5MjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIV9uWFOJbd2UXtO9Lvd9jus1s
93yMd2sm2NnnaT34H18fMoigtxAyp4brHQfo2IH/LLHOwmYtzTYvBGeEn40ML2hW
eryVvp1yLQh2iZZvAO+05tgDj1JggI9aFQiK51PGVoUktbVx5f+Elx5mJcRGc7GK
zxx9PxKHoKOF9ThzbQ1iuusoPN14bmR1IWZDh3++Ml3SEE1tnykKMzDrIbvSKrO6
QgYbEa99102DG1A0Z4h0kFZgorABPBZsqxqZmOj+T75xNW2i5v9CRqL9slYPB3V4
uTPwy0SZw+oDHb+teqiXU8oIEpmufR2pvuaaxtO7aHjSVS7NpOU0eRLOnkzzAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQU7oqQrzhgpV7A8PAd7/zPT8EbWSgwHwYDVR0j
BBgwFoAUcn9kX8j+FY6ydV1/kUpDJYgueKAwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4ODk5MzU0ODI4ODAwMi8wLzcyN0Y2NDVGQzhGRTE1OEVCMjc1NUQ3RjkxNEE0
MzI1ODgyRTc4QTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNzI3RjY0NUZDOEZFMTU4RUIyNzU1RDdGOTE0QTQzMjU4ODJFNzhBMC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwNjU1ODg5OTM1NDgyODgwMDIvMC8zNDM1MmUzMTMx
MzUyZTMyMzMzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMjM4MzgzMy5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAC1z7jANBgkqhkiG9w0BAQsFAAOCAQEACGsSXWJXPbDpj2gZ2pQi
7draUMJsu4PS6w5E4qEicTPTOXfKH9rEYIzu8uJPaTNOSS6wjzNOUx/WWNfTtbdo
MVBV/uYZ3tEe8s8jHH2gX0MYPUPQr3rVlFlF9q/3+NwE9t/9VZc9U49ShQPzKoFD
FY7/94JGbBe481vALL9ykBiV9DfL+NGwbuWSgceNlLhIB/mWKihABHdcSDMixzut
SnCJxp4GaB5VehlYqGbZJit1E4WzYLPxBIGI/lfsyxqjEupA0ThYWaOxPuMvVA+Z
Qk8MSWDzC88t8pEAgQVeeR0QwPO1mxagXNrLfKpJ7G8lNasWHywdMDlCZCJTaIeU
Mg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:24:48 2026 by rpki-client