
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa
File: 34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: pvuKH/rUh97ZR1blQ/bfkvTRwEcW2fCe7fof21hZ8z4=
Subject key identifier: 48:C1:79:29:38:B2:72:5C:2B:04:84:78:43:46:35:F9:1C:06:08:02
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 54A2164937666A59B513DB9DB5189A05824AFC68
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 15:50:39 +0000
ROA not before: Sat 06 Jun 2026 15:45:39 +0000
ROA not after: Sat 05 Jun 2027 15:50:39 +0000
asID: 134543
IP address blocks: 45.249.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:a2:16:49:37:66:6a:59:b5:13:db:9d:b5:18:9a:05:82:4a:fc:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:39 2026 GMT
Not After : Jun 5 15:50:39 2027 GMT
Subject: CN=48C1792938B2725C2B048478434635F91C060802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f7:fb:3f:87:da:6a:c7:b3:f1:12:5a:2e:3b:
42:c8:ac:18:6d:2e:9f:2d:d4:f6:03:ed:97:a1:7b:
ce:a2:a8:f2:a9:8a:79:09:63:8c:c2:1c:94:1a:ea:
ba:df:3d:98:11:f4:d4:3a:bb:a2:28:09:32:23:7f:
f2:8a:99:f9:38:7e:c8:7e:c3:5e:34:8d:20:e8:24:
6b:71:21:71:2f:f6:a0:ba:76:3b:76:57:0a:99:97:
ab:9d:62:81:90:c9:29:8b:9a:21:48:3a:2c:ba:62:
a3:d5:1c:91:7b:05:70:b0:9f:aa:af:4f:05:29:46:
40:3a:2c:ee:3f:86:f0:cd:3d:c2:75:1e:be:23:3e:
61:ba:93:56:d9:90:b3:bb:7a:ae:eb:cf:ec:d1:17:
5a:fe:28:33:dc:c4:72:3a:b0:cf:0f:fe:e5:8a:40:
04:d4:6a:e1:ab:90:dd:30:b1:a7:79:c7:18:30:25:
2c:d8:90:86:64:de:1f:3b:b2:4a:c6:4c:c0:d6:44:
97:0c:e4:4b:96:ae:74:f9:a0:3d:f5:17:91:46:0b:
eb:14:8c:e9:9d:c1:ee:43:a9:65:8e:f3:f6:81:fe:
63:25:ed:0f:50:b3:42:99:04:ec:a9:ff:a8:57:bd:
8e:71:30:38:cd:ac:e1:fe:a6:9d:2c:db:3f:1b:9c:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C1:79:29:38:B2:72:5C:2B:04:84:78:43:46:35:F9:1C:06:08:02
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
51:87:78:4a:6d:7e:f9:b6:cc:1b:21:dd:ce:ea:2e:9a:6f:83:
b8:76:c2:5d:2a:e7:f3:b2:cf:13:11:27:41:fa:91:89:88:7d:
e6:b8:59:86:41:19:bb:4a:05:a1:27:4d:0b:2a:d5:8b:e8:3a:
08:ff:db:fa:7f:76:e0:54:ca:84:3e:d1:6c:30:d4:29:93:94:
a9:ad:01:da:7e:ac:7f:f4:a0:de:42:ef:f0:bc:97:ab:dc:c5:
2e:c0:e5:cc:e9:6b:13:69:5a:2d:99:ba:83:cf:7b:42:ea:a7:
ea:8b:5e:aa:4d:03:55:a6:b9:45:5b:70:ee:3f:ea:78:92:a1:
22:03:e9:b6:62:ef:26:64:3f:ad:e9:21:4a:c7:92:3c:7c:04:
ee:7d:7f:fb:7b:dc:e9:45:39:c1:27:60:9e:37:61:4f:6e:cd:
32:20:2f:ad:54:94:c8:87:78:65:41:a7:e9:e6:2e:9b:a6:f9:
50:b7:e1:62:8b:a9:b2:bf:be:19:c5:c8:5d:8c:4c:37:85:d0:
ac:4a:a1:4f:46:17:2c:03:13:86:4c:00:0e:6d:a8:90:a3:a2:
d5:92:2b:db:50:cb:96:88:e3:68:25:9d:0f:54:2a:c5:83:64:
71:c4:3f:6d:f1:f7:f2:fb:84:9a:6a:9c:6b:f0:d4:83:99:02:
44:10:82:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:24:31 2026 by rpki-client