
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3132342e38302e302f32322d3234203d3e20313338393530.roa
File: 34352e3132342e38302e302f32322d3234203d3e20313338393530.roa (raw, json)
Hash identifier: Y4T9EW+No31nd5HxtkDNYhM6DOQ8f/8wsIv7Nmb80aw=
Subject key identifier: 4F:50:4D:EC:3B:23:73:BE:7B:03:D6:95:7F:F8:F9:5A:A5:57:00:3A
Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Certificate serial: 6427C0B3D45F6D4B1E2B29E852EF7F772DF03844
Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3132342e38302e302f32322d3234203d3e20313338393530.roa
Signing time: Thu 16 Apr 2026 02:18:14 +0000
ROA not before: Thu 16 Apr 2026 02:13:14 +0000
ROA not after: Thu 15 Apr 2027 02:18:14 +0000
asID: 138950
IP address blocks: 45.124.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 16:49:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:27:c0:b3:d4:5f:6d:4b:1e:2b:29:e8:52:ef:7f:77:2d:f0:38:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B
Validity
Not Before: Apr 16 02:13:14 2026 GMT
Not After : Apr 15 02:18:14 2027 GMT
Subject: CN=4F504DEC3B2373BE7B03D6957FF8F95AA557003A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:ca:20:4c:78:fa:9a:88:11:05:37:0e:47:
ab:14:ac:ec:a5:a2:84:8d:31:c6:ef:ea:06:ca:82:
c6:98:60:e0:6a:0d:a4:0d:8a:45:87:90:80:5c:98:
93:ed:35:9c:ed:6c:f2:0e:f6:fe:60:b2:2e:44:c6:
44:81:14:81:c2:b4:e1:15:fc:15:c7:ae:6b:92:92:
1d:87:50:2b:b5:3f:de:d0:f5:6f:e2:9e:5b:12:97:
f8:d5:1c:a9:3d:5d:38:1b:cc:e4:b8:d3:a3:f7:91:
a5:bd:3c:ca:0b:a1:c2:82:03:f4:06:40:07:02:be:
3e:d9:ea:5a:b2:48:53:85:82:ad:c8:41:c0:83:54:
9f:6d:dc:46:26:48:b0:09:46:85:44:25:7e:13:a9:
60:84:f8:a6:6e:69:54:da:da:12:0e:02:5e:15:a9:
20:af:dd:80:9b:60:87:46:25:4d:8a:b6:e7:ff:31:
b0:f7:e8:a5:20:67:56:46:fd:86:8f:a1:da:cf:eb:
aa:bb:2d:a5:7f:52:d5:02:95:47:b5:a5:7f:b0:0c:
2e:e7:e6:57:91:96:70:56:43:b2:d6:56:b2:42:99:
19:2e:81:7f:42:6b:8d:e1:9d:ab:c9:d3:5c:6d:ca:
5f:05:c9:61:4f:8f:58:c8:4f:7f:84:d0:63:0b:4d:
d6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:50:4D:EC:3B:23:73:BE:7B:03:D6:95:7F:F8:F9:5A:A5:57:00:3A
X509v3 Authority Key Identifier:
keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34352e3132342e38302e302f32322d3234203d3e20313338393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.124.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:67:f3:fb:f3:d1:4d:68:8e:70:f0:60:4c:32:c0:1f:97:cc:
26:16:dc:c2:e9:6b:14:4e:31:74:0b:09:34:65:0c:53:ab:fa:
92:e4:41:45:6b:1c:4c:c3:34:38:a0:ec:a3:f9:1d:4f:93:a0:
31:a1:c4:a2:37:f1:61:93:4e:52:3a:a6:23:75:4a:fb:2c:9e:
62:46:b8:05:69:36:bc:8e:bf:69:f2:15:15:51:de:c5:7f:b8:
a9:80:53:cf:91:f6:94:9a:23:a1:62:d5:4d:1e:e3:b3:bb:07:
69:52:3a:92:e2:74:01:c9:57:c4:a3:e7:6e:0d:77:f0:fd:d5:
11:31:1a:75:10:fa:df:45:db:64:32:3e:35:d0:d4:e9:da:d3:
c7:17:0e:1f:0b:02:0f:bf:00:a8:99:71:60:12:ac:ac:64:cd:
f8:da:1e:b3:d0:c8:07:cf:0f:d7:6f:f8:4d:e0:81:8a:97:43:
84:57:7b:87:88:87:e8:a8:6e:ad:82:0e:c1:f6:1c:e5:57:69:
4e:47:cc:b8:93:24:67:2d:1d:13:c7:2e:2d:f8:81:32:dd:d2:
e1:1a:99:0a:0f:8c:b2:af:11:ee:77:70:02:38:e0:8d:b7:46:
01:e6:ed:cf:b0:49:5a:5a:5e:92:ca:23:d7:98:65:d3:90:ab:
bf:c2:e3:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 18 04:13:27 2026 by rpki-client