
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e31322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: R7LBtOpMuQ7vzHCUX9z6ACTdNiMB5E0wGujO272QD8A=
Subject key identifier: DC:CA:01:A4:C5:5B:44:24:12:A4:9D:60:42:5A:69:ED:10:4B:94:9B
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 212F09DE6BAB1F464762B36E3154EF635A05C8EC
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:51:16 +0000
ROA not before: Fri 05 Jun 2026 05:46:16 +0000
ROA not after: Fri 04 Jun 2027 05:51:16 +0000
asID: 24426
IP address blocks: 43.246.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:2f:09:de:6b:ab:1f:46:47:62:b3:6e:31:54:ef:63:5a:05:c8:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:46:16 2026 GMT
Not After : Jun 4 05:51:16 2027 GMT
Subject: CN=DCCA01A4C55B442412A49D60425A69ED104B949B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:00:c8:2c:a6:03:e6:97:93:f2:a2:06:74:ac:
57:d6:33:10:d4:ba:18:fc:69:67:c4:27:1f:dc:77:
11:aa:c7:61:36:13:5c:63:8b:58:b2:0c:26:5f:ef:
94:2d:82:2b:5e:06:d6:0a:6a:ba:dc:89:e4:9c:b2:
1b:8c:b3:cf:3c:52:98:0a:7e:76:d3:fd:a7:c5:65:
0d:dd:28:24:73:e1:46:64:3f:e4:10:c8:75:43:a9:
37:bd:4e:5a:16:2c:a0:3a:cc:8c:9c:f8:f5:91:b9:
c2:32:69:2c:67:16:a9:29:5a:25:73:0a:04:28:52:
24:1a:fd:ad:7e:c2:9c:4f:0e:5f:78:94:8b:93:c2:
69:f3:c2:32:23:4e:c0:e5:eb:fd:b5:23:f4:4b:7e:
e5:2f:fd:e5:c5:24:4f:04:b9:db:e8:d4:f4:1a:59:
8f:7e:02:1d:f9:d5:5d:e0:39:cf:04:68:14:49:2c:
4f:0f:21:4d:87:dc:74:96:9d:d2:08:42:de:55:b1:
3b:4e:8f:a0:fe:28:12:c1:6e:63:3f:ba:62:c3:98:
22:9a:1f:3b:8e:66:eb:1b:07:2d:48:53:3d:06:4f:
72:32:24:7b:42:7c:df:b7:40:38:7b:d0:cf:a8:29:
82:63:b6:6f:0c:90:d1:ed:16:5a:45:71:b9:92:89:
1b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CA:01:A4:C5:5B:44:24:12:A4:9D:60:42:5A:69:ED:10:4B:94:9B
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31322e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.12.0/22
Signature Algorithm: sha256WithRSAEncryption
24:42:01:e0:f5:04:c8:bb:d4:78:30:8b:ad:36:25:1d:11:31:
cc:96:86:d4:2f:47:51:39:83:c0:7b:ff:66:6e:6f:61:88:33:
f5:10:f7:f2:dc:8b:c8:99:ba:86:38:c1:4b:8c:47:25:65:95:
e2:c5:87:6c:ff:9d:2b:9f:e3:ac:fe:1b:61:28:4d:df:7f:ad:
06:da:d8:b8:a3:92:c5:ca:30:e3:87:ce:cc:a2:35:bc:92:41:
8f:b2:6d:65:b4:c7:e6:64:b8:c5:9f:1f:cb:8e:a6:03:b5:12:
1a:25:19:ce:36:ee:5e:85:04:ff:02:2b:cf:09:db:4f:59:3e:
f4:0a:f7:c7:61:d6:4d:be:ca:48:41:ce:3f:c3:c8:6f:a9:8c:
19:5d:11:ed:5d:fe:eb:ce:da:bb:9a:9f:a0:d8:97:73:97:77:
f3:7e:6f:19:f2:fc:de:2a:75:50:6f:7b:b0:c6:01:a1:e0:48:
af:f1:b3:b3:ec:d0:5d:de:15:88:86:bc:22:d9:ee:91:51:5d:
80:1a:28:57:63:53:73:a2:55:89:81:24:44:3d:e4:03:52:74:
7d:08:9f:48:29:ca:9b:25:08:26:1c:4b:23:e9:39:60:9e:e4:
a2:fd:95:94:7d:81:b6:a1:83:2e:f4:96:3f:cf:b8:6c:58:84:
41:d9:fc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:45 2026 by rpki-client