
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e31362e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: c5xqGkzV0h+V9nq1lO4ZlA3m6qq4C1etTqnVasH19PA=
Subject key identifier: BB:69:91:88:05:ED:6A:21:AC:FD:3D:E1:BC:A6:3E:09:30:43:DD:02
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 737B4BF7B708A510F563E03B56646CA96E488920
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:51:16 +0000
ROA not before: Fri 05 Jun 2026 05:46:16 +0000
ROA not after: Fri 04 Jun 2027 05:51:16 +0000
asID: 24426
IP address blocks: 43.246.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7b:4b:f7:b7:08:a5:10:f5:63:e0:3b:56:64:6c:a9:6e:48:89:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:46:16 2026 GMT
Not After : Jun 4 05:51:16 2027 GMT
Subject: CN=BB69918805ED6A21ACFD3DE1BCA63E093043DD02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:df:30:ac:28:09:80:dd:a0:42:9b:27:de:04:
0c:83:00:e9:28:03:64:55:87:cd:d3:b0:a7:f5:9d:
33:8d:14:5a:a1:47:88:29:2f:06:5b:f8:da:63:fe:
be:f6:b2:86:5d:7d:20:18:3f:55:4e:ae:82:68:d6:
35:5d:f8:38:f9:1f:86:31:ab:83:58:3d:ea:04:8b:
1b:a5:f5:fb:62:03:19:d7:12:1b:70:54:11:f9:34:
fb:c2:21:1d:a4:a6:18:d4:32:39:c2:da:1d:c9:bc:
fc:b4:81:63:52:4a:f1:2e:2c:76:e3:d5:11:70:67:
ff:b4:f0:6c:2b:34:62:39:d1:95:a7:d1:06:58:54:
0c:12:96:bf:05:ab:12:b1:76:37:f8:8b:30:40:02:
bf:39:59:7f:da:ac:f3:33:87:d4:54:38:b5:1a:c9:
f9:a0:41:53:e2:40:3c:5f:ad:fa:75:c9:26:13:b5:
89:c0:65:8e:b5:68:5a:22:03:93:59:e4:68:60:39:
cf:04:59:73:38:0d:d0:6b:1d:23:e0:f4:7a:47:55:
79:87:0e:97:8e:05:5c:6a:2d:0e:03:06:f2:cf:c1:
ab:32:0d:b7:96:58:77:a6:9d:d9:5b:d7:ce:4c:05:
a5:a5:6b:23:df:a3:e4:65:28:03:3a:d7:ef:b0:38:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:69:91:88:05:ED:6A:21:AC:FD:3D:E1:BC:A6:3E:09:30:43:DD:02
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e31362e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.16.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:87:76:06:41:db:df:e6:55:74:e0:45:3e:3c:0d:99:fb:73:
8e:36:7c:3a:c6:36:c0:69:09:bd:4c:06:7c:05:8e:20:b3:a8:
4f:f8:2e:b1:af:0b:4c:f2:b5:26:8a:1c:b0:bc:2c:33:82:8b:
50:39:5a:1e:b0:a7:0c:2d:80:36:b9:9a:0e:d4:07:9e:4f:5c:
8c:aa:4e:80:98:be:74:41:4b:ae:db:bc:21:9c:47:02:00:90:
f7:42:08:9c:1c:6f:63:25:eb:f4:2e:0f:ad:4e:21:a4:9c:a1:
3c:94:c7:6a:96:3f:58:af:2a:04:05:6d:b9:5c:c4:66:c4:b2:
28:cf:47:e4:b4:61:91:d8:82:c1:93:58:3f:f1:b1:0f:56:2a:
8d:00:59:31:43:31:d8:27:47:73:bf:08:a3:03:e1:ab:99:37:
31:07:26:a3:6a:1b:94:65:33:a0:f6:23:dd:c2:0f:f9:27:55:
24:c2:90:e9:82:99:48:1f:f4:5a:ef:06:8f:b4:ba:1c:bd:30:
09:17:28:b4:46:91:c8:b8:ed:a2:22:d7:2c:0d:45:92:8e:8b:
4e:dd:db:a3:38:20:c4:4c:89:84:8c:2b:3f:09:fc:48:93:29:
6d:8e:a7:13:4a:66:63:95:d9:52:64:0c:53:9b:cb:7a:bf:33:
fe:5b:4b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:46 2026 by rpki-client