
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32322e302f32342d3234203d3e203233383438.roa
File: 34352e36352e32322e302f32342d3234203d3e203233383438.roa (raw, json)
Hash identifier: /hyBTfvC/p8yXs4VG7WKMteb4npwSUsyNeADY6a1e44=
Subject key identifier: D4:42:F2:67:B0:DC:1A:31:7D:7F:7E:E6:1A:C7:7D:98:5B:F5:B1:17
Certificate issuer: /CN=EDA884A79748D57EB49366704CB6A8110E27042D
Certificate serial: 1877CEC9C7F4DB1BBCFF79427F1F3632A3529279
Authority key identifier: ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32322e302f32342d3234203d3e203233383438.roa
Signing time: Thu 16 Apr 2026 09:09:43 +0000
ROA not before: Thu 16 Apr 2026 09:04:43 +0000
ROA not after: Thu 15 Apr 2027 09:09:43 +0000
asID: 23848
IP address blocks: 45.65.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 05:50:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:77:ce:c9:c7:f4:db:1b:bc:ff:79:42:7f:1f:36:32:a3:52:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EDA884A79748D57EB49366704CB6A8110E27042D
Validity
Not Before: Apr 16 09:04:43 2026 GMT
Not After : Apr 15 09:09:43 2027 GMT
Subject: CN=D442F267B0DC1A317D7F7EE61AC77D985BF5B117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:19:1a:72:53:b1:4c:fe:83:b7:7b:3b:76:9c:
5d:be:ec:ea:ec:f2:39:94:5e:3b:87:3c:0b:b4:a7:
92:cb:7d:f6:34:37:35:af:be:a3:87:ed:aa:c1:50:
20:5b:02:42:2c:1f:28:e7:05:34:8b:12:42:7e:15:
f4:f8:64:e8:25:fa:bc:6d:06:e5:7b:35:d1:da:b0:
f4:34:55:71:f0:df:31:38:dc:af:d9:4c:27:15:c7:
e0:c7:97:60:1d:be:07:22:69:77:04:fe:67:ea:39:
c8:ea:69:0a:c2:97:a7:81:e6:b6:17:9f:9e:99:57:
8e:86:27:a8:77:f9:03:13:ba:99:47:a7:cc:a7:cf:
69:50:e0:5d:04:17:23:ed:a7:ea:a4:ee:96:09:55:
02:df:5d:e2:5a:1d:2c:8c:ca:0a:81:0f:a6:39:11:
31:16:e3:fc:b2:2e:ad:99:08:ca:b9:16:29:55:97:
92:08:75:50:98:93:e7:ec:90:18:94:54:72:ac:ec:
1a:d8:73:d1:56:80:e9:7d:f3:30:4c:7c:3b:9d:14:
b6:60:cb:af:ac:94:d2:1e:83:21:31:5c:65:d1:c1:
cf:9d:4e:3f:70:2a:ee:9b:f0:16:35:e7:41:ea:0a:
8b:3b:7f:eb:df:d2:68:79:b3:d0:33:e2:e9:f3:4a:
20:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:42:F2:67:B0:DC:1A:31:7D:7F:7E:E6:1A:C7:7D:98:5B:F5:B1:17
X509v3 Authority Key Identifier:
keyid:ED:A8:84:A7:97:48:D5:7E:B4:93:66:70:4C:B6:A8:11:0E:27:04:2D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/EDA884A79748D57EB49366704CB6A8110E27042D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EDA884A79748D57EB49366704CB6A8110E27042D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097083532355829763/0/34352e36352e32322e302f32342d3234203d3e203233383438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.22.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d2:88:c6:7d:af:01:83:f7:b8:6a:78:08:f0:9f:05:4e:a3:
36:fc:52:f1:14:79:7f:23:56:51:2b:08:34:19:53:49:53:c6:
75:2c:21:43:0a:10:dc:4d:f4:4f:69:76:f5:c3:9c:a7:9d:f6:
5c:c6:86:46:03:e0:24:3f:29:2c:d8:4b:da:b1:7d:73:bf:20:
a1:13:6c:98:db:4b:2d:10:c0:ce:5c:79:59:bf:11:f6:ac:04:
5b:5c:0a:d9:f0:a6:5d:d5:60:1f:9e:f6:18:ec:41:5b:fe:f8:
62:80:b8:10:19:33:0a:f1:d6:22:e6:3a:b3:cb:63:44:c6:63:
3b:c6:27:07:e1:35:6d:93:c5:f9:e4:cf:3b:1c:02:76:77:39:
38:f1:84:05:c7:42:db:9e:37:d5:23:73:f3:3a:7c:fe:6c:93:
db:15:fa:74:de:dd:d5:7e:8b:f9:e0:c3:db:e4:f6:dd:1f:9e:
7f:bb:9d:e6:cb:45:01:bf:06:7f:20:79:ba:7d:6b:57:94:01:
16:2d:00:0e:97:0a:c6:1e:93:8d:18:11:36:7c:ef:e5:c0:4d:
27:2b:bc:69:d9:6c:66:38:53:49:9f:4c:ee:9f:5b:4b:b7:f7:
c8:6f:39:7e:c1:cc:0f:21:2d:78:e4:3e:54:37:40:2e:67:00:
1c:69:06:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:10:55 2026 by rpki-client