
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32302e302f32342d3234203d3e203233383438.roa
File: 34352e36352e32302e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: Kc3l7lcwGWzT8OOwiGvzVGyyV2cDbfTch5c+D8Ksmdw=
Subject key identifier: 52:BA:55:29:2D:84:90:F0:1E:6E:4E:81:B3:E7:3F:42:3F:EA:0A:B3
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 1758351800C0C2ED523FBB93A52449A303193602
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32302e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:09:43 +0000
ROA not before: Thu 16 Apr 2026 09:04:43 +0000
ROA not after: Thu 15 Apr 2027 09:09:43 +0000
asID: 23848
IP address blocks: 45.65.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:58:35:18:00:c0:c2:ed:52:3f:bb:93:a5:24:49:a3:03:19:36:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:04:43 2026 GMT
Not After : Apr 15 09:09:43 2027 GMT
Subject: CN=52BA55292D8490F01E6E4E81B3E73F423FEA0AB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:62:cf:ab:fc:b4:b4:31:2c:50:f8:16:9b:
ff:ab:72:56:67:93:b3:2c:c0:1b:65:7b:9a:f9:25:
05:15:5b:1b:9f:b2:c6:69:a7:62:63:9d:7a:b8:a8:
3a:9a:0c:a7:a3:4e:1b:7c:f7:35:79:36:60:0b:9c:
54:95:af:a6:09:fe:06:e0:27:c8:6a:fb:6d:a0:e9:
d5:38:e7:af:16:8a:54:8e:28:36:fc:d1:62:8e:28:
7f:f3:7d:08:a8:2a:74:aa:7e:e8:42:c3:62:cc:5d:
55:63:3b:9c:f2:36:7e:97:bd:ad:6e:2c:92:ca:1e:
e8:d4:54:2a:98:49:50:ea:5e:c5:7e:d2:a0:65:25:
f4:1a:d1:6c:9b:65:07:14:44:ce:f7:53:14:40:81:
fd:0d:a9:1d:04:d8:e5:c0:b8:69:f2:85:47:e6:e0:
dc:ab:30:0f:e3:7a:02:4f:d6:6a:cf:4c:92:7d:56:
f2:4b:71:5a:80:d1:80:67:2e:0d:47:ef:89:b8:ae:
9c:97:c6:a8:59:97:e8:f5:55:65:be:8e:7f:48:2f:
4f:fa:2b:fc:68:2e:75:63:61:b5:02:cd:f8:e2:89:
26:3c:9e:9c:56:17:dc:25:e5:79:4e:27:76:a9:e8:
e9:71:f4:83:36:b1:42:6d:49:eb:9a:78:31:b1:e9:
d6:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:BA:55:29:2D:84:90:F0:1E:6E:4E:81:B3:E7:3F:42:3F:EA:0A:B3
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32302e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.20.0/24
Signature Algorithm: sha256WithRSAEncryption
87:2c:6b:92:3d:62:75:ad:63:54:a7:f1:5c:78:e9:51:f3:02:
55:7d:98:71:8c:c4:f4:e9:d4:eb:e2:08:dd:a4:77:b9:54:37:
83:00:4c:9d:45:32:30:f8:fa:63:a2:69:a6:0f:d6:70:91:82:
b0:66:85:17:95:55:15:be:e6:25:21:97:f7:e4:02:4a:a7:2f:
54:ea:98:fc:da:6d:5d:65:dd:48:6b:65:6a:57:5d:bf:7b:bd:
f7:cd:95:02:c5:a2:ee:75:75:21:ac:a0:cd:2b:1c:e1:12:7e:
6b:e6:a6:13:71:8f:85:34:aa:3f:4a:b1:2e:b8:5e:5e:10:3b:
44:89:f4:bc:dd:25:c8:ac:bd:ff:1f:86:6e:2b:13:01:9c:17:
fa:20:66:33:06:7a:0a:8f:ba:61:37:2a:3a:8f:7b:54:66:6c:
f9:e7:2b:67:31:84:1b:fa:99:ed:8a:a5:a8:83:96:2e:4c:46:
05:67:45:93:13:20:45:20:1f:55:95:15:19:2a:91:77:7b:e7:
0d:eb:ea:43:3b:4e:84:7d:43:c7:ff:a7:9b:17:7c:db:e1:a5:
48:82:1d:db:40:26:b4:50:27:27:15:e1:b3:1e:a4:29:5e:41:
94:e8:4c:bd:83:19:9e:a8:0e:04:09:f1:03:5e:21:f9:29:c7:
b9:c9:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:25:59 2026 by rpki-client