
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa
File: 34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa (raw, json)
Hash identifier: X1XBrJsS49WZ6bG4bL3EOgaPFPPikSE/xQlm1+RZYr8=
Subject key identifier: FA:15:CB:70:73:69:F5:ED:86:B6:80:E3:98:08:D6:26:4E:8B:3E:37
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 4277F739E6791E8EBFDC9184282171493EBDA0A1
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa
Signing time: Sat 06 Jun 2026 15:50:39 +0000
ROA not before: Sat 06 Jun 2026 15:45:39 +0000
ROA not after: Sat 05 Jun 2027 15:50:39 +0000
asID: 134543
IP address blocks: 45.249.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:77:f7:39:e6:79:1e:8e:bf:dc:91:84:28:21:71:49:3e:bd:a0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:39 2026 GMT
Not After : Jun 5 15:50:39 2027 GMT
Subject: CN=FA15CB707369F5ED86B680E39808D6264E8B3E37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2c:3e:e0:5b:6c:84:a0:be:35:14:e2:d2:c2:
dd:97:07:af:d9:4c:11:75:21:c8:72:92:6f:d0:70:
8c:95:b0:08:3d:84:62:4f:89:ee:bc:b2:8c:14:41:
9c:03:b1:80:ca:53:6a:78:4c:f0:22:3e:f1:90:1d:
89:06:67:75:af:a5:84:fc:ec:66:8c:66:ea:c7:cb:
10:84:84:b8:b3:c0:14:37:6f:8f:65:cd:13:f2:7e:
e4:2b:37:32:f6:77:87:4c:53:8d:c3:89:ca:a7:ed:
97:87:51:f5:e5:d8:90:3f:23:45:80:55:99:9b:da:
ed:d2:29:35:a3:d9:3f:cc:86:3d:af:d8:31:e2:ab:
67:9e:85:6e:6b:58:7c:33:c8:4c:d5:91:c3:62:01:
cb:61:6a:cd:86:9f:e5:26:dd:eb:56:a1:ed:1f:8e:
77:df:75:d0:66:b0:4d:72:61:3e:e6:5b:56:80:6e:
4c:59:fc:94:51:50:ea:50:a9:03:2f:4b:17:d5:e9:
bd:2a:da:c5:16:d3:46:b2:31:e6:94:5e:a0:ab:3c:
ed:01:26:c0:02:75:a3:a7:5a:90:e1:84:0b:b9:ca:
4c:65:f1:18:4e:af:f1:11:59:66:5f:59:10:fd:55:
04:d6:33:a1:41:87:a8:54:94:9b:50:81:62:90:ec:
bb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:15:CB:70:73:69:F5:ED:86:B6:80:E3:98:08:D6:26:4E:8B:3E:37
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e20313334353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
92:de:79:e7:24:d4:4f:07:f5:ea:da:3a:82:06:92:9e:7e:cf:
e2:31:53:2a:d5:a7:96:c9:5e:fd:d1:8a:30:ac:a8:93:4a:09:
96:1e:69:cb:7b:3e:3c:33:9d:2c:2b:b8:b1:a2:82:f1:f6:81:
c3:3c:8c:ff:ff:46:7f:c9:e5:e3:a0:79:6a:5c:37:6d:a6:8a:
17:ac:15:80:6c:d4:86:62:be:d5:5c:41:47:36:67:49:af:5d:
2a:d7:39:77:58:a6:f9:b0:c7:e7:05:dd:60:90:b1:3b:e6:df:
5d:0f:e4:1d:3e:09:10:d2:6f:fc:55:6c:0a:57:aa:b4:45:f6:
f9:f0:91:7b:ea:01:24:29:14:bc:1a:0a:54:2e:1f:f5:88:bc:
e3:e5:c9:2c:32:36:0e:1a:d6:c7:b0:99:0b:52:2d:ea:67:96:
e1:76:b4:40:b4:92:f7:39:74:73:82:cf:5c:f5:a9:da:22:8f:
b8:9e:b1:cb:d3:22:d1:99:87:f1:ae:13:77:88:58:c2:71:62:
07:5f:4d:20:24:6a:12:fb:8b:b3:2f:1d:23:ae:1d:e9:c5:ea:
21:df:3d:30:06:f2:c0:2b:e3:bc:51:d5:f6:8c:73:78:d8:0e:
df:cd:ad:9f:c3:e4:9c:06:15:10:28:f3:8a:9c:ad:38:e8:c0:
7c:20:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:18:31 2026 by rpki-client