
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32312e302f32342d3234203d3e203233383438.roa
File: 34352e36352e32312e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: PgsgrwrLFRF3q2a0Lh3xxlRKe2Txbv2mbsvAk+tx+88=
Subject key identifier: 80:89:B4:3B:A0:6A:2B:9B:10:92:1B:74:21:D8:6A:29:3E:34:4B:27
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 0E899BC1F7F09544BA506A689FA51DE9CC0B2BA6
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32312e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:09:44 +0000
ROA not before: Thu 16 Apr 2026 09:04:44 +0000
ROA not after: Thu 15 Apr 2027 09:09:44 +0000
asID: 23848
IP address blocks: 45.65.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:89:9b:c1:f7:f0:95:44:ba:50:6a:68:9f:a5:1d:e9:cc:0b:2b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:04:44 2026 GMT
Not After : Apr 15 09:09:44 2027 GMT
Subject: CN=8089B43BA06A2B9B10921B7421D86A293E344B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ca:dd:ee:e3:e5:9e:c6:0c:d7:a6:f5:f9:6e:
cb:b1:bf:e4:52:f1:73:e1:6e:3e:d4:e8:0d:5d:de:
ec:23:81:b1:10:94:13:b1:7c:af:20:16:8a:bd:96:
e8:84:ca:d0:db:4b:56:97:35:fd:2e:d5:fd:d8:5d:
fc:1e:46:19:10:2c:dc:95:7c:4f:9e:0b:0b:fd:d8:
63:bc:5c:4a:f8:5d:1f:30:69:ca:11:9c:af:65:31:
bc:4b:2e:56:06:ce:52:70:79:f6:fe:de:16:2f:03:
4b:aa:f5:4d:33:45:9e:3c:69:62:60:59:86:56:54:
03:3d:c8:29:f9:b9:57:be:11:ab:f3:b5:28:3a:5f:
fb:19:50:af:28:5f:48:c4:4d:69:29:cc:a8:b1:c4:
e3:2c:61:a6:48:e5:d2:6b:5d:c0:b8:58:b4:06:c4:
43:17:0e:e0:3f:48:e1:c6:10:7d:b3:27:41:1d:55:
51:f5:93:94:35:a1:c5:a1:05:70:e3:f9:39:23:27:
0b:8f:d1:7e:04:fb:ea:4f:b5:1f:b5:0d:04:e7:b2:
e1:db:16:8d:1d:3e:c3:57:e6:f1:41:a5:37:e5:21:
d8:b6:b7:55:bb:a1:fc:f2:09:ef:52:60:a6:c2:f9:
69:3c:41:fb:f1:78:2f:b5:a2:59:80:e7:17:8f:38:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:89:B4:3B:A0:6A:2B:9B:10:92:1B:74:21:D8:6A:29:3E:34:4B:27
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32312e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.21.0/24
Signature Algorithm: sha256WithRSAEncryption
23:d1:b7:19:d1:1e:6c:03:9d:a0:5c:88:a2:a2:b3:50:33:e3:
35:00:34:93:88:4c:0f:6d:18:1e:af:c3:74:19:f8:91:4d:69:
3b:87:2f:df:4d:d2:85:9a:2c:8a:35:ac:ae:b4:ef:0d:01:7d:
aa:e9:57:6e:4a:af:02:95:01:c7:48:45:b6:60:ac:61:f1:dc:
76:f7:4e:2b:b5:4c:eb:b5:75:81:96:5f:34:b2:df:43:32:1e:
7c:63:e6:f5:02:07:f1:fc:d1:49:cc:8a:67:ed:92:64:bf:e4:
8b:e3:6b:93:63:44:6f:5e:38:7e:3d:29:07:0d:57:bc:ae:4c:
ca:0f:8d:9a:8a:2a:a4:bb:31:82:31:19:47:74:5e:51:ca:7a:
07:ab:3c:8f:b2:0a:fd:38:43:9c:43:f0:a0:bc:2e:d8:60:e5:
d4:12:d6:44:b7:f7:c6:9e:fe:88:dc:13:25:92:71:4b:cf:bc:
0d:2e:d8:da:f9:d8:7d:a1:81:5f:16:f4:07:57:1d:f0:9a:aa:
42:78:59:33:2a:e7:c2:97:70:fa:50:f1:59:4f:65:92:08:1b:
ef:ac:76:74:7c:71:fe:b6:03:0f:f2:c3:49:60:60:41:73:78:
17:ea:49:99:1d:67:9f:53:cd:94:73:e8:aa:59:dd:96:1b:c8:
96:63:d5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:11:07 2026 by rpki-client