
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa
File: 34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa (raw, json)
Hash identifier: UcuGXuPb0hXyj0b7YXGKUEIL6kjhnor7fhftIIHVK9k=
Subject key identifier: 41:87:BD:6B:41:99:53:B8:F3:87:79:63:83:3C:1D:A5:8D:91:C3:CE
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 463F146D12AE00D958D8FE11082F75508C10BCF1
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 15:50:40 +0000
ROA not before: Sat 06 Jun 2026 15:45:40 +0000
ROA not after: Sat 05 Jun 2027 15:50:40 +0000
asID: 134543
IP address blocks: 45.249.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3f:14:6d:12:ae:00:d9:58:d8:fe:11:08:2f:75:50:8c:10:bc:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:40 2026 GMT
Not After : Jun 5 15:50:40 2027 GMT
Subject: CN=4187BD6B419953B8F3877963833C1DA58D91C3CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9e:33:36:0a:bd:c1:81:4a:7a:7b:a9:48:75:
b1:bc:1b:fe:69:58:66:a5:19:c1:7f:20:57:c8:80:
7d:ec:25:86:02:12:53:58:b0:9d:68:34:ee:c9:e3:
19:01:35:36:91:c3:ab:79:12:f5:c3:1d:ea:28:c1:
f0:cb:5d:f4:80:1d:f3:bc:4f:45:3f:be:8b:67:6a:
28:e5:a7:1c:c9:96:74:b8:48:5f:60:b0:45:99:00:
4b:bf:01:18:cd:83:91:3c:43:7f:fe:1d:ce:11:ac:
77:1d:e9:c6:db:d0:b1:2f:d9:be:26:17:1f:05:9d:
cd:f4:38:ce:4a:a7:b5:7c:f4:a1:bb:9c:26:81:1d:
97:4d:27:b2:8d:ba:12:42:c1:1b:f7:83:6e:b5:fa:
e1:dd:d8:58:f2:ac:74:dd:6f:71:3d:67:14:f1:c3:
6f:91:d8:2a:3d:bf:18:d0:83:d9:de:b0:5f:83:7c:
da:50:12:d3:4e:ca:95:3d:db:72:4f:81:d6:ea:9a:
ea:ce:f4:36:85:77:3d:4e:93:fc:30:1d:ae:1c:5f:
20:ac:66:50:56:3e:c5:57:2c:c6:a1:86:97:c7:95:
14:2e:9b:52:1d:bf:20:cb:ed:bd:89:56:90:db:f6:
4c:d7:c9:69:00:14:67:2a:af:6e:24:4b:7c:f2:57:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:BD:6B:41:99:53:B8:F3:87:79:63:83:3C:1D:A5:8D:91:C3:CE
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.212.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:ed:ec:4e:e0:c1:d4:84:9f:4e:f1:42:0a:e1:c5:90:e2:0c:
26:53:ff:c4:d5:d2:b0:b9:31:23:30:1d:b0:1c:de:44:cf:69:
62:27:0b:8f:47:50:29:dd:69:f6:f5:ba:a4:ed:c2:91:64:9f:
ec:fc:53:55:b7:ca:d2:1b:6b:8b:a2:a7:16:b1:3a:f5:eb:e8:
ea:7c:9b:7e:e5:53:b4:8a:bc:40:0a:cd:77:64:b1:91:62:19:
3a:ca:8b:c3:ed:86:a9:a6:8e:2b:03:8f:65:08:63:c8:fc:9f:
46:f4:8d:77:f1:20:e7:c7:51:cf:e7:b4:b0:da:07:5c:65:b7:
29:83:1a:a3:0d:66:16:ed:1d:d2:6b:4c:d5:c5:5d:b6:95:85:
1f:34:43:68:76:4d:ad:d8:31:2b:46:3d:41:72:07:f6:ff:b3:
c2:bc:17:ed:3b:d6:ef:14:4f:c0:1f:d2:b0:0c:c8:02:c9:12:
9d:e7:c9:e3:24:c8:d2:30:73:56:eb:4a:68:09:e4:55:59:fe:
0c:92:bf:61:e6:c1:e0:a3:99:3f:bb:d9:41:76:b2:35:a3:3c:
05:6b:24:f5:2f:6a:a5:f5:00:69:88:4e:0e:47:73:0a:42:e7:
ab:45:22:b6:39:d4:3a:47:51:de:31:c3:51:4f:17:8c:b9:b9:
70:6b:36:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:05:58 2026 by rpki-client