
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e203633363535.roa
File: 34352e3234392e3231342e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier: FjpSMjlWaCKn4Ptz2//2ywMsZCamiRqirl04dheae5c=
Subject key identifier: E2:4B:EB:CC:BD:3F:0A:A5:33:17:07:A5:41:4E:CE:EA:3B:4A:F2:2C
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 50BB5D38E3BB2E796989BA45F25D13839EC3685E
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e203633363535.roa
Signing time: Sat 06 Jun 2026 15:50:40 +0000
ROA not before: Sat 06 Jun 2026 15:45:40 +0000
ROA not after: Sat 05 Jun 2027 15:50:40 +0000
asID: 63655
IP address blocks: 45.249.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:bb:5d:38:e3:bb:2e:79:69:89:ba:45:f2:5d:13:83:9e:c3:68:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:40 2026 GMT
Not After : Jun 5 15:50:40 2027 GMT
Subject: CN=E24BEBCCBD3F0AA5331707A5414ECEEA3B4AF22C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:28:89:04:c8:54:46:da:76:b2:ae:ac:58:
6b:93:08:bf:f0:74:b2:00:a7:25:a5:af:b8:21:2c:
a8:0c:60:d0:26:6f:5c:c7:cd:84:3c:a9:67:c0:0d:
12:94:94:95:da:04:48:15:cd:8a:68:59:ad:ca:1b:
38:07:ee:ec:66:cc:a1:1c:39:f7:81:cc:6e:05:f2:
36:ba:69:23:8b:6a:e1:15:86:68:2f:e4:c3:d1:77:
85:ce:65:b6:7f:0a:f2:4e:ed:af:b7:20:72:20:eb:
2e:62:b1:4c:51:52:2b:6f:4f:6c:85:4b:4b:d1:aa:
bd:6d:cb:98:c5:e8:63:22:1f:21:87:65:61:ca:b6:
31:93:d9:b4:68:74:39:2c:bc:9b:63:7f:95:23:30:
a2:72:40:61:f0:d4:91:72:03:5c:a6:7c:55:69:6a:
9b:05:ef:32:d3:ef:aa:e9:dd:48:56:6e:78:1b:3f:
ba:ab:cf:22:54:8f:69:51:65:89:a1:9a:13:1f:ab:
bc:0f:e5:93:62:26:6e:30:83:12:02:b5:b1:52:b5:
bb:42:6f:eb:dc:6f:32:dd:d5:51:dd:7b:4b:68:85:
ca:72:ab:c5:19:19:d9:73:db:4f:65:90:a9:89:32:
ab:6d:0f:df:85:1e:0d:60:b1:57:f9:b7:48:9e:af:
81:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:4B:EB:CC:BD:3F:0A:A5:33:17:07:A5:41:4E:CE:EA:3B:4A:F2:2C
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231342e302f32342d3234203d3e203633363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.214.0/24
Signature Algorithm: sha256WithRSAEncryption
32:1d:6d:f6:b4:60:75:88:f3:04:e9:3a:d4:79:84:79:2f:fb:
ea:54:fa:31:fe:35:89:8d:1a:fa:7a:04:82:5d:44:89:48:ae:
10:c4:e6:1f:56:60:ac:6a:66:3f:6f:18:e7:c9:01:4f:14:03:
74:e5:85:c0:45:2e:7c:0d:1b:88:7a:42:e8:ba:56:5c:82:ce:
ae:ee:45:59:5a:5a:6f:8f:9a:8a:a7:74:6c:6e:23:9b:c0:9c:
96:57:dc:7a:0d:c6:bf:34:2e:2e:63:89:a1:f4:18:6d:5c:e5:
03:bc:9f:a8:fe:be:34:10:cc:a2:f9:86:8d:5e:37:20:16:71:
7f:82:13:83:99:c6:fd:6b:96:de:84:5e:5e:05:84:e2:67:79:
9e:08:74:10:dc:58:bf:4a:e0:ad:95:91:e4:31:a8:55:0f:57:
9c:c0:81:ae:e5:dd:cc:34:67:e6:37:99:ac:91:36:be:ea:8a:
15:88:a2:e9:c9:ac:95:82:e8:0d:8f:c6:84:a7:4c:18:c1:b9:
ed:f3:73:ea:2e:9c:ff:ec:49:75:96:df:7d:21:a9:66:ec:38:
73:98:ca:e8:a7:c9:4c:c8:04:a0:58:b3:61:e5:23:ed:bf:43:
b5:4c:87:ee:9a:9f:4f:c4:19:44:82:bc:7c:78:79:27:5f:7c:
8f:e2:44:2d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:36 2026 by rpki-client