
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e33322e302f32322d3332203d3e2034383337.roa
File: 34352e3235302e33322e302f32322d3332203d3e2034383337.roa (raw, json)
Hash identifier: LsvU/Z+7W+dJDtCnWU+MMDHZdO6s/DcGQSZ6YBn3WLU=
Subject key identifier: 50:E7:7A:43:27:3A:7E:B7:64:8F:6F:7C:39:1D:7C:22:42:54:99:12
Certificate issuer: /CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Certificate serial: 318B0110D0A2802158B41F9DC48486D060F65F12
Authority key identifier: 94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e33322e302f32322d3332203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 07:40:58 +0000
ROA not before: Wed 15 Apr 2026 07:35:58 +0000
ROA not after: Wed 14 Apr 2027 07:40:58 +0000
asID: 4837
IP address blocks: 45.250.32.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:8b:01:10:d0:a2:80:21:58:b4:1f:9d:c4:84:86:d0:60:f6:5f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94A04007C18934EEFD779445BA5349A8FBDB19DF
Validity
Not Before: Apr 15 07:35:58 2026 GMT
Not After : Apr 14 07:40:58 2027 GMT
Subject: CN=50E77A43273A7EB7648F6F7C391D7C2242549912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ed:92:da:17:b8:d7:1d:b0:89:70:ab:b3:f0:
53:86:a6:ec:16:c8:51:fa:47:1e:d4:f3:eb:9e:71:
f6:80:3e:68:da:b0:80:89:60:2f:aa:11:b7:f9:c8:
e3:5a:62:d9:4b:ed:ae:e2:de:75:05:c6:7b:c6:be:
73:1d:19:71:82:ce:d2:dd:70:63:2b:72:66:f8:27:
eb:97:3f:2b:ec:c8:30:63:fb:ce:be:35:06:4c:22:
70:78:51:2c:98:47:79:b6:3d:f2:a4:e5:0c:0f:2b:
bb:e5:3b:10:0e:84:bd:90:5b:22:38:d8:64:d4:bd:
ee:60:e5:ee:93:c8:8a:13:89:e7:97:10:1d:6d:9b:
fb:04:1b:9e:54:fd:32:b0:4a:ca:ac:5c:2e:4f:f3:
6a:3c:52:d0:f9:17:70:de:36:db:0c:de:ee:52:4f:
4c:61:a3:02:fc:c8:e0:75:e7:dd:b2:3a:b9:4e:73:
f6:bf:c8:dd:43:05:b0:41:77:e1:da:9e:09:d6:f6:
4c:2d:47:dc:11:83:37:48:29:58:d2:6d:ee:97:0d:
c7:bc:04:80:d6:60:f9:12:c9:21:be:53:6f:1a:13:
e9:62:e3:0d:65:69:32:5b:89:f1:68:46:47:79:63:
96:40:31:e9:3d:4c:23:22:4a:b9:bc:91:56:d8:d6:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:E7:7A:43:27:3A:7E:B7:64:8F:6F:7C:39:1D:7C:22:42:54:99:12
X509v3 Authority Key Identifier:
keyid:94:A0:40:07:C1:89:34:EE:FD:77:94:45:BA:53:49:A8:FB:DB:19:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/94A04007C18934EEFD779445BA5349A8FBDB19DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/94A04007C18934EEFD779445BA5349A8FBDB19DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096700400205037570/0/34352e3235302e33322e302f32322d3332203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.250.32.0/22
Signature Algorithm: sha256WithRSAEncryption
bd:16:aa:c0:cf:4b:0b:b6:33:83:b2:96:8b:64:54:08:b4:91:
98:86:16:2c:b9:36:8e:dd:ac:39:e1:47:d8:00:0a:86:72:47:
3d:cb:45:2d:c6:c6:7f:8a:63:b5:50:ba:27:be:80:48:70:ea:
d3:7c:bc:60:ca:81:f5:5a:19:19:98:9d:a1:8a:4c:8f:4a:00:
33:43:5d:ef:3a:57:d4:33:be:dd:20:31:95:cb:d5:bb:e8:f8:
58:fd:dd:c9:aa:2e:12:21:68:df:f1:8a:3e:23:18:4a:70:4f:
c0:58:62:a5:f8:86:77:b4:6a:92:70:7b:e9:72:0d:42:b2:7b:
1d:21:68:52:01:6a:b3:fa:f4:c8:e4:23:24:7a:c8:06:c0:c0:
e9:25:db:3d:d1:ff:38:9f:b7:2e:a1:aa:d8:9a:65:59:cc:65:
4f:97:76:45:85:5e:af:69:85:d1:e4:f0:44:c5:81:96:42:b7:
cc:b1:a9:5f:f6:da:47:1e:93:c0:3b:c6:2e:03:4c:f5:0f:60:
5a:f5:f0:18:3c:be:10:94:68:8a:42:b4:5e:ca:fa:33:ff:eb:
25:e9:ad:31:b5:e6:ea:03:bb:eb:9e:8a:50:40:21:09:dc:92:
7b:24:c1:9d:ed:70:56:fb:99:30:e5:16:6e:40:53:06:a7:7b:
85:0f:90:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:39 2026 by rpki-client