
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35322e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e35322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: fWL3KMuUIPI6Rd9LxXoKbpKwZdG6e8k8/9/uYEKi7AM=
Subject key identifier: E1:6E:C1:AF:8F:6C:A8:61:81:E4:E4:1D:BC:9A:BA:FB:56:FD:A8:F2
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 0C6501F51FE4095A3EF3D1D2421F9C6F1879E4DB
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35322e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:11 +0000
ROA not before: Fri 05 Jun 2026 05:43:11 +0000
ROA not after: Fri 04 Jun 2027 05:48:11 +0000
asID: 24426
IP address blocks: 43.246.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:65:01:f5:1f:e4:09:5a:3e:f3:d1:d2:42:1f:9c:6f:18:79:e4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:11 2026 GMT
Not After : Jun 4 05:48:11 2027 GMT
Subject: CN=E16EC1AF8F6CA86181E4E41DBC9ABAFB56FDA8F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:31:86:91:80:ec:75:08:12:2e:5b:b4:9e:
fe:4c:d1:64:e7:b2:e8:3e:24:db:ca:37:9e:e1:a8:
76:8e:9c:2c:94:fb:79:52:e7:db:67:0b:f1:d5:24:
ad:7e:f4:29:47:1f:08:23:4f:59:09:07:3f:ee:23:
84:a1:99:88:e9:56:d8:f0:f7:34:45:6a:cf:36:65:
20:f0:eb:5e:5f:ba:89:bd:99:96:6a:dc:34:94:e4:
57:72:ab:c0:a2:61:5a:97:39:93:14:dd:fc:2e:25:
66:94:d0:3b:ad:ad:e0:24:8f:92:41:65:ad:42:ea:
75:60:ac:27:17:8c:4b:8a:67:21:c3:70:5d:99:05:
0d:29:32:00:23:42:3d:a3:5d:c5:d9:eb:e0:40:a9:
2a:37:26:9a:66:da:eb:d5:85:c0:52:f7:60:ec:e7:
b3:5b:32:06:29:44:2b:f4:d5:19:d8:ce:b0:3a:44:
04:27:7e:d4:b9:00:94:2e:f6:98:a1:27:5d:4f:3c:
26:a1:7e:f1:9f:a3:b2:49:3c:df:ee:48:ab:a5:0a:
0e:29:97:7e:ff:0d:1b:85:e7:da:d5:9b:a2:8e:32:
8e:8a:87:44:85:85:b0:70:d9:1d:4c:24:2e:3c:16:
4b:97:2d:67:71:94:41:ad:8b:f3:b3:21:4d:0e:54:
c2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:6E:C1:AF:8F:6C:A8:61:81:E4:E4:1D:BC:9A:BA:FB:56:FD:A8:F2
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e35322e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.52.0/22
Signature Algorithm: sha256WithRSAEncryption
86:4c:41:7a:3b:21:0a:d9:cf:c6:4d:76:10:9e:52:06:f2:4e:
96:a7:5a:87:74:fd:2a:35:36:62:70:96:1c:d2:19:eb:6a:b5:
18:8b:85:60:69:97:cf:7f:d5:96:2b:8a:63:7e:d1:4b:32:7e:
32:29:c1:1d:5d:ad:06:77:ee:02:8b:e8:96:a7:1c:b1:74:4a:
e0:d7:09:64:b6:9d:34:c3:66:2d:70:ba:63:5c:1c:b0:eb:3f:
7d:0b:05:a3:9e:79:68:e3:58:d0:f9:90:00:c9:50:d7:45:64:
ab:d3:81:a3:6c:30:a1:7e:d5:d6:61:d8:6d:b9:e2:88:eb:67:
34:53:11:f5:47:89:79:5b:6a:73:eb:3f:88:fc:90:73:9b:cc:
22:84:29:11:40:e4:cf:0f:d6:af:9d:92:fc:a8:b0:35:cc:1a:
e5:55:24:38:4e:6c:94:8c:f8:fe:7d:34:80:3d:f9:3c:8a:1d:
74:b5:73:1d:38:7b:a6:1d:a1:bf:78:bc:35:d0:00:85:b3:58:
46:cf:df:be:5d:5c:6e:31:e1:f0:64:10:13:a8:28:29:17:8f:
6f:ac:db:13:1c:77:e8:36:36:ec:72:75:6f:eb:80:5c:87:64:
11:32:5d:36:63:3c:ad:6c:59:93:81:a9:2f:c2:4b:01:10:90:
1b:23:7c:b3
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUDGUB9R/kCVo+89HSQh+cbxh55NswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQzMTFaFw0yNzA2MDQwNTQ4MTFaMDMxMTAvBgNV
BAMTKEUxNkVDMUFGOEY2Q0E4NjE4MUU0RTQxREJDOUFCQUZCNTZGREE4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8zGGkYDsdQgSLlu0nv5M0WTn
sug+JNvKN57hqHaOnCyU+3lS59tnC/HVJK1+9ClHHwgjT1kJBz/uI4ShmYjpVtjw
9zRFas82ZSDw615fuom9mZZq3DSU5Fdyq8CiYVqXOZMU3fwuJWaU0DutreAkj5JB
Za1C6nVgrCcXjEuKZyHDcF2ZBQ0pMgAjQj2jXcXZ6+BAqSo3Jppm2uvVhcBS92Ds
57NbMgYpRCv01RnYzrA6RAQnftS5AJQu9pihJ11PPCahfvGfo7JJPN/uSKulCg4p
l37/DRuF59rVm6KOMo6Kh0SFhbBw2R1MJC48FkuXLWdxlEGti/OzIU0OVMJDAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQU4W7Br49sqGGB5OQdvJq6+1b9qPIwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2
MmUzNTMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv2NDANBgkqhkiG9w0BAQsFAAOCAQEAhkxBejshCtnPxk12EJ5SBvJOlqda
h3T9KjU2YnCWHNIZ62q1GIuFYGmXz3/VliuKY37RSzJ+MinBHV2tBnfuAovolqcc
sXRK4NcJZLadNMNmLXC6Y1wcsOs/fQsFo555aONY0PmQAMlQ10Vkq9OBo2wwoX7V
1mHYbbniiOtnNFMR9UeJeVtqc+s/iPyQc5vMIoQpEUDkzw/Wr52S/KiwNcwa5VUk
OE5slIz4/n00gD35PIoddLVzHTh7ph2hv3i8NdAAhbNYRs/fvl1cbjHh8GQQE6go
KRePb6zbExx36DY27HJ1b+uAXIdkETJdNmM8rWxZk4GpL8JLARCQGyN8sw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:44 2026 by rpki-client