
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231352e302f32342d3234203d3e203633363535.roa
File: 34352e3234392e3231352e302f32342d3234203d3e203633363535.roa (raw, json)
Hash identifier: +YWRVjrDc5zzP9fHkR+jpRnZsjSCEDVKovunc5w7VCA=
Subject key identifier: CC:25:2D:81:13:3C:9E:98:1F:53:5B:8D:3F:B3:90:9D:5F:69:B5:BB
Certificate issuer: /CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Certificate serial: 19CF79EBC84DF27FB4CF40EE835E4B8A172C861F
Authority key identifier: 04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231352e302f32342d3234203d3e203633363535.roa
Signing time: Sat 06 Jun 2026 15:50:40 +0000
ROA not before: Sat 06 Jun 2026 15:45:40 +0000
ROA not after: Sat 05 Jun 2027 15:50:40 +0000
asID: 63655
IP address blocks: 45.249.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 11:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:cf:79:eb:c8:4d:f2:7f:b4:cf:40:ee:83:5e:4b:8a:17:2c:86:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CFDCD1650DD854FF0F6840232427716459F9F6
Validity
Not Before: Jun 6 15:45:40 2026 GMT
Not After : Jun 5 15:50:40 2027 GMT
Subject: CN=CC252D81133C9E981F535B8D3FB3909D5F69B5BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:d5:80:83:0d:90:a9:22:3e:a4:e7:4d:5c:
3b:2a:ef:db:bf:ad:84:0c:1b:9a:ec:ec:33:df:38:
9c:17:8a:8f:d3:91:c3:19:e2:34:e3:75:39:98:e3:
22:50:08:84:93:fd:f7:4b:12:f9:50:c0:34:83:05:
fb:09:92:a5:69:69:2a:29:e9:02:b7:c2:eb:f5:75:
ea:c9:aa:e2:70:1d:dd:36:2d:c1:a3:52:58:21:a5:
41:f6:64:b6:a8:b9:b4:c7:07:5d:03:53:b0:0d:7a:
d9:d6:c7:c4:da:54:da:f6:ec:cb:49:7b:b1:ab:7a:
0a:3f:ad:a2:9f:f7:b1:ab:0f:4d:b6:f9:22:46:39:
28:51:37:f1:fb:eb:18:e8:d6:1d:5f:f3:16:9a:2c:
8c:6e:8a:06:c9:99:6a:53:08:5b:2f:dc:b2:00:98:
ac:1c:af:89:ab:7d:2e:ae:58:f6:1a:51:37:36:fa:
91:f9:d1:6a:dc:9a:97:b5:f2:c2:b4:d2:2c:e0:01:
38:5a:34:3e:a3:22:67:0c:af:62:05:b1:5f:2e:8a:
34:ac:c9:b0:34:e4:62:11:40:3c:d9:09:e9:33:db:
2b:c7:ca:96:4c:90:62:e4:ac:66:fb:9f:77:7c:77:
93:7c:2d:71:da:50:c3:f1:bb:29:44:bd:28:6b:f4:
18:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:2D:81:13:3C:9E:98:1F:53:5B:8D:3F:B3:90:9D:5F:69:B5:BB
X509v3 Authority Key Identifier:
keyid:04:CF:DC:D1:65:0D:D8:54:FF:0F:68:40:23:24:27:71:64:59:F9:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/04CFDCD1650DD854FF0F6840232427716459F9F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/04CFDCD1650DD854FF0F6840232427716459F9F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114113049960120339/0/34352e3234392e3231352e302f32342d3234203d3e203633363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.249.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:37:37:a7:18:f5:b0:67:e0:7a:d2:fa:40:6e:2d:bb:cd:08:
56:97:12:35:05:db:0b:cd:76:82:44:6f:c3:f2:85:00:32:ac:
87:9f:94:7a:2a:c8:36:86:d4:28:08:83:55:cb:d7:f6:44:4b:
ea:60:0b:bd:29:dc:f0:f8:01:ed:27:05:6e:bf:87:f9:53:23:
a5:c9:ac:2b:51:7c:a4:53:a9:04:68:c7:5c:3a:e9:9b:0f:e6:
17:2d:7c:41:25:78:86:14:03:f6:70:a5:bd:87:5a:a3:f5:f7:
9e:c2:e6:29:f0:2a:6b:dd:bb:39:ce:2d:96:e6:95:7f:6e:35:
92:9a:3f:de:47:85:bf:e0:d1:9f:44:79:36:1e:ca:1e:16:e8:
58:c6:05:f7:da:e6:49:f0:63:1f:95:ed:17:9e:9a:4e:c0:d5:
1d:f1:29:81:32:b2:32:b8:49:2b:07:81:73:cc:cf:d1:61:dd:
98:0b:4a:6d:af:15:64:d3:49:97:79:72:8a:8e:5c:3c:4c:2c:
cb:c2:08:b9:aa:37:66:d1:b0:cd:4a:94:ed:e5:65:1e:4f:6e:
c1:e4:b2:a9:24:a9:2d:f9:c2:1b:65:ac:66:73:a7:f1:9c:3a:
ce:51:70:0a:cd:84:59:41:5c:fc:b9:41:6a:05:53:d6:a0:fd:
60:37:07:bf
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Jun 14 03:26:34 2026 by rpki-client