
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa
File: 34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa (raw, json)
Hash identifier: 4ttlBoSWVe9ZNF/Zp9jHRsWrZKXi+CTyy/+lqvgHOAk=
Subject key identifier: 22:D7:82:75:AF:5F:45:28:11:BC:79:A6:F4:1F:6C:E4:5C:16:26:0B
Certificate issuer: /CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Certificate serial: 5710784B5C2B3C46D8A09084959785E1BE85D1F7
Authority key identifier: 72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa
Signing time: Wed 08 Apr 2026 05:59:33 +0000
ROA not before: Wed 08 Apr 2026 05:54:33 +0000
ROA not after: Wed 07 Apr 2027 05:59:33 +0000
asID: 132883
IP address blocks: 45.115.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 07:06:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:10:78:4b:5c:2b:3c:46:d8:a0:90:84:95:97:85:e1:be:85:d1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=727F645FC8FE158EB2755D7F914A4325882E78A0
Validity
Not Before: Apr 8 05:54:33 2026 GMT
Not After : Apr 7 05:59:33 2027 GMT
Subject: CN=22D78275AF5F452811BC79A6F41F6CE45C16260B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:9e:58:4c:dd:94:e6:47:a1:ad:c8:81:ca:
bb:ee:99:0c:9b:6e:ef:49:5c:aa:39:31:b0:ed:19:
7c:04:2a:ba:70:24:54:92:5d:7d:11:9f:94:78:50:
1e:e6:cd:c7:8b:e6:12:53:39:50:36:9d:5d:98:27:
c3:36:70:24:23:e1:c0:11:90:f1:42:f6:69:fe:a7:
e7:fa:70:b9:4e:85:d7:6a:7d:9b:94:95:26:b2:80:
9d:69:8d:3b:85:fb:85:88:60:5c:f2:8b:8d:8e:9a:
22:c1:42:aa:70:e6:cd:96:81:47:52:c7:2a:14:85:
e3:b8:51:2d:1b:57:7c:46:f6:bd:cf:53:1e:94:31:
8c:46:8b:1f:3b:c0:70:59:00:c5:fa:40:a9:f3:67:
11:c9:dc:c2:14:b4:07:15:f8:b6:2f:ce:05:14:9b:
39:62:6a:88:bc:a7:28:09:e9:18:0a:c1:f5:7d:04:
27:fb:1b:5e:b9:ef:93:59:7a:d6:8e:c2:c1:6e:5f:
db:0e:d8:54:6f:67:28:2f:b2:e6:40:62:b6:c5:06:
39:68:d0:e4:7c:88:35:2a:01:da:64:a3:06:1c:e7:
cf:23:4c:d9:df:2f:19:0c:40:39:f1:96:09:f4:b8:
8d:68:6d:f8:6e:ea:96:da:19:ef:b0:61:ac:41:e0:
cd:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:D7:82:75:AF:5F:45:28:11:BC:79:A6:F4:1F:6C:E4:5C:16:26:0B
X509v3 Authority Key Identifier:
keyid:72:7F:64:5F:C8:FE:15:8E:B2:75:5D:7F:91:4A:43:25:88:2E:78:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/727F645FC8FE158EB2755D7F914A4325882E78A0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/727F645FC8FE158EB2755D7F914A4325882E78A0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065588993548288002/0/34352e3131352e3233392e302f32342d3234203d3e20313332383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.115.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:b0:83:a8:c4:ae:d8:39:46:9b:c2:99:d0:52:1f:dd:57:dc:
1e:19:0a:98:33:5e:66:84:01:7b:92:78:b6:44:ab:3b:fd:27:
bc:0c:27:36:2b:d5:34:ef:48:f4:51:cc:a8:20:18:ee:02:ab:
3a:1c:77:9c:4d:bd:df:c8:61:49:67:6e:7f:20:41:fe:0c:a1:
da:31:56:f6:43:b7:cb:64:ee:00:5e:25:48:8d:51:97:61:a5:
aa:68:46:de:2d:4b:32:f3:94:7c:2f:b8:a3:a0:c4:40:5d:eb:
7f:d4:f2:a7:1a:2b:c5:ab:d7:19:14:30:a9:62:f9:c0:a3:93:
f3:c4:c4:4e:96:8a:ee:ad:f5:9b:b0:dd:c4:8a:7d:94:5a:ec:
0c:b0:3e:c6:66:be:11:26:8e:83:7e:3f:85:99:9d:90:fa:d8:
f0:05:94:08:64:b8:9e:19:b1:05:60:2c:c9:71:b4:77:df:7a:
10:88:d8:4d:70:82:b7:61:ab:21:f0:46:85:d6:bc:80:64:22:
a6:29:bf:d6:06:b6:6e:e3:f4:7e:3f:35:c3:6c:b1:44:68:a9:
cb:39:60:2a:e6:58:ea:23:f0:ad:93:52:2f:9d:07:b7:f9:75:
e7:4f:1c:1e:a6:5a:0a:72:74:81:84:37:47:3f:c8:cc:e0:a4:
1e:15:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:42:02 2026 by rpki-client