
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa
File: 34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa (raw, json)
Hash identifier: 9pIY5q7sFsiwAGKhyXR1XA+RgTgJavOC56GPQRIpshc=
Subject key identifier: 2A:AA:3A:FE:66:DC:6A:17:79:42:5F:44:21:EE:08:4A:AB:A0:11:E2
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 4336D95605251CE5969613A6D5303B3040690777
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa
Signing time: Sat 06 Jun 2026 15:50:39 +0000
ROA not before: Sat 06 Jun 2026 15:45:39 +0000
ROA not after: Sat 05 Jun 2027 15:50:39 +0000
asID: 134772
IP address blocks: 45.249.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:36:d9:56:05:25:1c:e5:96:96:13:a6:d5:30:3b:30:40:69:07:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:39 2026 GMT
Not After : Jun 5 15:50:39 2027 GMT
Subject: CN=2AAA3AFE66DC6A1779425F4421EE084AABA011E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:44:ef:47:7a:c2:f4:4c:91:8d:f3:af:e2:14:
38:db:f9:20:fa:ab:f3:a1:9b:18:e7:92:56:2b:d0:
da:e2:01:35:87:12:73:14:0c:01:91:cf:a3:f1:89:
7a:73:70:1a:ad:dd:76:3a:51:3b:69:7b:9c:d7:e1:
40:ee:ca:69:e6:80:4e:7b:c8:94:ec:b2:6a:76:a7:
6c:81:fd:b7:21:52:e1:35:d9:6a:0b:b6:68:cb:aa:
1c:84:c8:38:c6:41:3f:33:79:77:d4:b6:5a:e2:e9:
1b:2d:d0:d5:5e:70:08:ae:2d:08:c9:6f:07:ba:6a:
3d:37:1a:67:23:77:27:7d:09:13:79:59:43:0c:8a:
ea:b9:a7:59:67:8e:7d:6d:3d:a4:4d:5c:28:6d:f3:
e5:a8:a4:e8:17:29:c3:b3:11:a6:38:fd:07:6e:b2:
91:56:3f:2f:42:89:bc:e4:c4:33:53:00:5c:28:c6:
c1:db:4a:1f:51:5f:85:30:1b:4a:20:c9:fb:28:5a:
fa:26:b9:a6:6c:ae:ea:ba:bd:38:ed:11:99:6b:e9:
c4:c3:de:0f:b1:12:02:4d:d2:e1:c1:bc:c4:30:36:
f2:ed:98:a6:7a:62:ea:cc:e1:ec:6b:93:dd:96:6c:
2b:51:8e:49:e4:75:45:03:d3:4f:c3:3b:29:af:70:
f6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AA:3A:FE:66:DC:6A:17:79:42:5F:44:21:EE:08:4A:AB:A0:11:E2
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32322d3232203d3e20313334373732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.212.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:8b:62:72:08:84:a0:17:c4:24:28:f6:73:7a:98:f5:f4:0c:
40:74:95:8a:36:d0:97:0c:24:52:19:3d:3a:23:24:b3:d4:df:
12:8d:13:e2:7e:1d:0f:bd:04:8d:30:fa:08:95:7d:e5:b7:b5:
8e:10:9e:4d:c5:a6:f5:78:03:dd:7b:9f:dc:06:8e:5c:5f:33:
90:9c:68:9c:07:f3:12:37:ea:4f:df:33:65:dd:fa:09:34:35:
e6:87:9b:e3:f2:ce:b9:d6:90:d8:e7:b6:54:a6:94:95:f8:b0:
83:0b:07:35:a1:60:14:30:14:a8:8b:9a:da:ce:47:06:5e:84:
b2:f4:8f:2f:1f:ba:06:6d:a1:77:66:f7:45:5c:02:4a:39:d7:
a6:92:ac:5c:75:e4:73:68:ae:ba:c4:d7:df:9f:33:00:c4:4e:
ab:f1:dd:02:a2:70:34:05:a4:4a:e3:e2:f1:fe:59:eb:56:16:
8f:4a:14:15:15:1b:32:10:f3:6a:20:9d:d3:ec:2f:fe:1d:e9:
83:90:bb:c5:14:7c:96:6f:d2:75:a6:dd:fa:ba:c3:e8:08:6b:
9e:62:ce:39:30:34:f9:7a:9b:d4:e6:e9:d0:07:82:da:2b:c9:
f1:49:40:d0:9c:29:f2:f4:41:f3:d3:8f:65:98:a3:e8:16:17:
21:a0:a6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:01:29 2026 by rpki-client