
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e34342e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: KykRIHdu/nxMvGaJ0LI+TpRY4rnGPJ+PyTvEOYEfDHU=
Subject key identifier: 5F:ED:D9:81:A0:91:5D:EE:CB:04:18:7D:9E:CE:BF:96:F7:61:02:2A
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 73FF9F7AB61925ABF18BD55FEE95D8019D121DF3
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:48 +0000
ROA not before: Fri 05 Jun 2026 05:43:48 +0000
ROA not after: Fri 04 Jun 2027 05:48:48 +0000
asID: 24426
IP address blocks: 43.246.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ff:9f:7a:b6:19:25:ab:f1:8b:d5:5f:ee:95:d8:01:9d:12:1d:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:48 2026 GMT
Not After : Jun 4 05:48:48 2027 GMT
Subject: CN=5FEDD981A0915DEECB04187D9ECEBF96F761022A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:46:19:8b:35:83:e8:a7:44:26:7e:52:61:
b3:f6:3d:18:ae:d9:4b:60:67:85:31:49:3c:86:45:
1f:ff:66:b6:73:7a:18:a5:a7:4d:1e:81:96:ae:11:
08:c3:ea:0d:4b:6c:8b:9a:0b:39:12:1a:2e:71:b7:
64:3b:67:da:bf:26:ce:f9:3e:40:50:00:2f:49:f3:
a2:e4:53:a7:94:90:a1:5a:8f:c6:81:d4:83:94:ad:
e7:a7:6e:37:f7:06:06:bb:81:71:fb:3d:be:6e:55:
0b:f0:11:a5:05:03:39:7b:64:e2:dd:d7:85:1d:ff:
81:01:3e:8b:ca:de:60:50:fa:aa:a3:90:f0:4b:8f:
23:9f:3f:76:ad:d6:a3:c0:6e:1d:33:ab:f7:7b:7c:
5e:f6:cf:8d:d3:df:d9:17:a3:ab:ed:53:ae:2e:f2:
29:e2:db:06:54:3f:24:bf:34:26:56:1f:c1:b1:36:
1d:a5:b9:ae:8c:38:d0:4b:62:fa:3c:8c:e9:77:f6:
88:db:1d:f5:b8:12:2a:84:cb:be:a3:eb:37:c5:6f:
63:df:fe:c0:20:3f:84:5d:47:46:0d:60:bd:b7:ee:
8a:33:c1:f9:13:7d:b8:45:b4:0f:e3:58:97:ce:b6:
5c:26:3c:a8:5f:09:37:45:40:d3:db:1d:be:1e:ae:
82:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:D9:81:A0:91:5D:EE:CB:04:18:7D:9E:CE:BF:96:F7:61:02:2A
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e34342e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.44.0/22
Signature Algorithm: sha256WithRSAEncryption
04:27:d4:81:8a:0e:14:41:94:d8:90:a5:14:8b:5e:e1:53:d3:
11:9a:b7:5f:28:90:1c:09:de:66:e9:d2:0e:7f:3d:ce:2a:4c:
e5:94:33:4a:c5:c9:d8:08:fb:82:b1:b9:74:91:c5:39:d0:18:
ac:7a:c3:22:a2:c9:50:af:c3:a8:38:e3:a9:80:d5:0a:1a:be:
d4:e2:c4:d0:10:65:fb:c4:d9:43:a4:83:f8:07:bb:b6:b2:f3:
4c:91:31:dd:14:c4:9f:e1:97:46:83:cc:5d:43:6f:04:a3:6e:
49:e9:b8:ba:6c:74:fd:7a:64:40:f4:a3:90:6f:a2:7a:f6:66:
c0:94:d8:46:15:e6:1d:9b:02:5a:ad:4d:cd:49:14:21:52:58:
62:57:2a:85:c8:0e:e6:db:92:8c:98:07:27:69:20:74:8b:f7:
80:fc:e8:fd:5a:f8:5e:a7:c2:2b:3a:ab:f2:36:25:d8:b7:4c:
53:05:ad:0e:67:fe:97:07:8b:f4:11:ef:e3:e9:13:e6:3d:fb:
5e:24:6d:9a:66:b6:1f:7f:8a:36:e9:85:d2:6f:30:1a:03:52:
48:ac:1d:dd:b2:6c:dc:7d:00:0d:d8:71:f8:9d:f0:bc:ed:67:
0e:53:e2:17:c6:5e:52:f5:f9:69:75:1d:5a:1c:8e:3d:cb:9e:
38:b7:95:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:49 2026 by rpki-client