
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e203633363535.roa
File: 34352e3234392e3231322e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier: zkuxppiZoNATV/cOEox1oUDTUtUjB9UKsr/kxX0NfaY=
Subject key identifier: 3D:52:81:E7:1B:56:38:01:84:11:35:FE:FB:5A:ED:42:02:74:79:D1
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 04F6545AFEFEA88B648CF0B0B483792AEF037933
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e203633363535.roa
Signing time: Sat 06 Jun 2026 15:50:40 +0000
ROA not before: Sat 06 Jun 2026 15:45:40 +0000
ROA not after: Sat 05 Jun 2027 15:50:40 +0000
asID: 63655
IP address blocks: 45.249.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f6:54:5a:fe:fe:a8:8b:64:8c:f0:b0:b4:83:79:2a:ef:03:79:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:40 2026 GMT
Not After : Jun 5 15:50:40 2027 GMT
Subject: CN=3D5281E71B563801841135FEFB5AED42027479D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8c:b0:26:52:a4:6c:8e:99:a7:b5:9e:5b:5c:
f6:8a:59:12:1e:88:fb:8c:34:52:75:33:50:5c:42:
e9:94:15:e9:88:e8:27:07:aa:4c:d8:e4:78:7b:12:
36:c6:0c:04:0e:6f:42:23:c4:80:6d:1d:ae:07:06:
d7:f2:7d:4e:85:26:67:e8:67:eb:07:85:95:92:fa:
66:78:60:01:a9:f9:87:e7:64:d8:70:53:2e:bd:f6:
a4:98:ee:cd:6c:9a:9c:a6:c6:47:93:6d:be:6c:10:
23:86:27:bd:8d:76:87:5e:f2:67:bd:f2:86:b3:f9:
5d:14:7c:bc:9f:95:4e:f6:05:b6:b4:ed:42:aa:f6:
4f:9d:81:46:a0:e2:9e:47:cf:ce:0d:2b:30:b6:d3:
7c:ad:ba:43:76:7a:cc:95:9d:43:63:f5:aa:2d:0c:
c4:5a:b1:54:ba:c6:a0:90:89:ba:f0:90:21:22:ba:
ec:24:ab:81:7e:85:a3:6c:7c:d8:ce:f9:8e:f7:cc:
f6:e7:8b:3e:6e:49:7d:97:09:7c:92:ba:21:ca:52:
a8:98:49:9a:a3:c0:e8:88:45:f0:7f:ef:fb:30:68:
14:84:39:fb:8b:6b:4c:ee:b1:b4:0e:bf:e9:da:c6:
fa:f4:15:8e:cb:28:3e:9f:c7:04:9d:bf:91:51:90:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:52:81:E7:1B:56:38:01:84:11:35:FE:FB:5A:ED:42:02:74:79:D1
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231322e302f32342d3234203d3e203633363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.212.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:78:f3:f1:0f:76:58:99:27:92:85:fd:ca:78:32:bb:d1:c7:
d5:b2:0a:16:55:7b:01:09:b9:c2:9e:97:7e:57:8b:8e:57:13:
92:85:e0:f3:61:c6:a9:55:a5:d6:02:74:91:2d:40:ab:06:de:
9d:9a:de:bd:32:be:df:14:3f:c0:64:94:90:44:6b:e8:00:1f:
91:24:e8:02:d4:6a:8f:cd:e5:dc:30:62:2b:c3:fd:7d:71:77:
8d:0a:b5:30:14:b4:1e:c9:8e:c4:a8:80:35:a7:cc:4f:69:73:
15:e0:20:ff:f2:79:60:de:2f:b7:21:df:2f:82:2e:8a:36:42:
e2:92:38:2c:d1:74:12:96:9d:7a:56:05:60:3d:fd:22:e2:c7:
d5:fa:d1:98:02:03:77:39:36:f1:7b:bb:2c:21:78:31:f4:c0:
4a:30:ae:05:a9:92:25:29:f5:4b:43:0f:47:f0:66:8a:59:fe:
a7:61:16:4d:2a:ef:ba:34:2b:9a:08:91:5f:b0:7b:50:30:a8:
89:2a:54:4e:50:e4:94:b5:fc:5f:14:2b:ab:af:5c:82:59:77:
e7:bc:9e:b8:94:72:18:cf:46:b8:da:12:67:9a:0a:dc:fd:e2:
b6:50:9e:f8:a0:95:ff:10:6a:bf:71:a1:4f:6f:ff:ee:04:78:
de:60:4c:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:26:51 2026 by rpki-client