
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34302e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e34302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: ZYNzK2E5uYRZpVZiQLcS+GrI53szDyS2MgKAgmgrd3o=
Subject key identifier: 5F:1C:11:C8:E8:61:9A:E0:9D:24:09:3A:2D:47:21:6A:AA:36:09:E2
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 035D0860191BB7B473C15788D6DC97D100818D03
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34302e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:47 +0000
ROA not before: Fri 05 Jun 2026 05:43:47 +0000
ROA not after: Fri 04 Jun 2027 05:48:47 +0000
asID: 24426
IP address blocks: 43.246.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5d:08:60:19:1b:b7:b4:73:c1:57:88:d6:dc:97:d1:00:81:8d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:47 2026 GMT
Not After : Jun 4 05:48:47 2027 GMT
Subject: CN=5F1C11C8E8619AE09D24093A2D47216AAA3609E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6a:b5:a5:d4:c0:72:84:27:e4:52:32:8a:4a:
3e:e1:ad:44:a8:eb:00:f7:71:c0:25:55:f0:a0:c0:
e8:ef:9a:40:11:1f:54:d3:15:45:2f:8d:da:c6:65:
68:87:cb:c8:10:cc:22:18:dd:86:f0:52:90:40:86:
e6:32:47:83:9d:26:af:a9:b9:ba:53:ce:5b:9f:d9:
aa:53:58:cb:18:99:7e:3f:35:e9:af:db:d3:a3:03:
7b:5a:da:7e:6b:8c:46:00:b7:1f:70:38:7a:d6:f3:
0a:7f:15:fc:27:e2:40:a2:0e:a5:3b:d0:c6:24:e1:
10:64:38:f4:ed:7e:ad:ba:01:bd:8c:78:a9:78:1b:
21:fe:3c:6e:a3:aa:45:85:1a:ec:4b:b1:5e:14:46:
a3:30:9c:d9:44:a9:c8:be:21:7e:f0:f7:93:ed:5f:
de:66:76:2c:0a:ae:13:47:5e:0c:a8:02:9d:39:38:
b9:30:64:d3:45:24:b8:87:96:9e:90:8c:fa:d4:29:
96:c6:76:de:c4:2a:fa:09:e7:67:0d:7c:76:12:57:
a5:90:05:92:59:a0:29:93:51:cf:c4:56:c8:6a:9e:
d7:9a:03:3b:92:6b:a6:c6:e8:85:c8:f0:f6:65:97:
c9:26:6a:1c:91:64:ed:6a:8a:57:8a:ed:6a:cc:9d:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:1C:11:C8:E8:61:9A:E0:9D:24:09:3A:2D:47:21:6A:AA:36:09:E2
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34302e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:6b:7d:03:7c:52:7d:ae:68:81:ee:47:0a:c7:01:6d:bd:ee:
02:52:c9:dd:4c:32:ee:72:57:cf:fa:cc:e6:ce:b8:04:94:0d:
df:fa:33:64:9f:66:87:c1:18:fe:66:19:49:c6:1f:55:cb:2f:
ae:fd:70:4e:b2:f2:cd:22:c0:72:9f:ba:00:9e:16:21:17:48:
b7:da:33:14:aa:dd:c8:20:39:b9:fa:dc:b6:8a:4c:69:1a:07:
56:06:58:d4:4d:ef:35:fc:ad:7c:fd:1f:b0:7e:eb:1c:5c:0a:
d4:15:a0:10:25:a3:d1:d3:ab:a3:38:da:6f:aa:cd:82:81:1d:
e9:65:29:da:78:9f:91:b5:ca:48:19:40:26:07:02:25:a8:86:
cb:06:75:e7:e2:9f:6c:ca:47:50:0f:17:c3:01:1e:88:ce:26:
92:2f:62:d1:c2:31:5f:1d:20:5b:cc:79:e3:4b:5d:66:de:75:
31:5e:82:56:d6:f4:f3:b4:d1:89:a8:f2:13:18:f4:14:85:c0:
3c:80:da:7a:2d:3f:8e:d3:d9:08:42:b0:63:c5:9f:8c:b2:52:
51:48:25:b9:44:30:96:42:14:78:93:5a:3d:3c:e6:cb:56:b8:
7d:c9:a3:4c:d9:64:c5:a8:a1:be:d2:34:74:b0:37:12:82:53:
7c:c5:50:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:50 2026 by rpki-client