
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36302e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e36302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: MFg4PzVdhPG67uCrdggwoYbvN1/I8KOFarqOzNvOP88=
Subject key identifier: C1:16:6D:10:BB:01:5F:BD:D3:02:BE:B3:5E:F0:9E:09:D9:5F:D3:39
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 0FBD4A86E2B13415C18535F3C0D3A1221E4E9055
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36302e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:51:17 +0000
ROA not before: Fri 05 Jun 2026 05:46:17 +0000
ROA not after: Fri 04 Jun 2027 05:51:17 +0000
asID: 24426
IP address blocks: 43.246.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:bd:4a:86:e2:b1:34:15:c1:85:35:f3:c0:d3:a1:22:1e:4e:90:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:46:17 2026 GMT
Not After : Jun 4 05:51:17 2027 GMT
Subject: CN=C1166D10BB015FBDD302BEB35EF09E09D95FD339
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f6:56:21:68:2b:32:7f:34:dd:d4:df:fb:16:
11:fa:72:35:f2:2d:f2:6b:ca:af:24:01:ef:ef:58:
d5:5a:b0:bb:08:9e:7d:d8:6b:dd:85:71:f3:94:81:
99:38:37:79:65:a4:25:85:26:13:74:72:40:f1:89:
79:31:51:97:68:e9:06:a8:c3:a3:7b:bf:b6:d1:0b:
68:42:ff:aa:d0:01:62:ff:fb:16:f1:0c:3b:98:9d:
55:3e:f6:d0:92:2d:a2:54:54:49:f2:97:24:6f:d4:
38:b8:a3:87:8d:14:7f:34:9c:d9:3d:95:f3:b4:ec:
38:7f:fb:04:5f:95:78:6b:34:0f:92:51:27:88:f5:
45:e2:d5:33:ea:a0:d8:f9:8b:1b:2c:97:69:d3:f5:
f5:ae:be:38:90:47:eb:c4:b3:1e:b2:b3:60:df:a6:
9c:0f:53:1c:c6:25:99:90:df:f9:d9:1e:e9:b8:5e:
ae:3d:a4:8d:70:4a:57:4e:8a:6d:4e:61:f9:8e:30:
d2:45:7e:54:05:f6:a9:fe:c9:73:d5:fe:3d:fc:4b:
5d:bb:78:d0:94:b7:e4:0f:a5:ce:fb:3d:f9:3c:3a:
1e:99:1f:a8:19:e3:cc:89:de:f7:5e:f6:d2:03:8c:
77:61:93:43:07:f0:63:7b:9a:5d:85:40:9f:03:68:
3f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:16:6D:10:BB:01:5F:BD:D3:02:BE:B3:5E:F0:9E:09:D9:5F:D3:39
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e36302e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4b:30:7a:bf:8b:a8:e3:84:c7:30:47:30:45:d8:c4:a7:ea:2a:
2e:9b:f4:f5:97:8d:71:e0:f2:62:80:f0:83:db:42:4c:15:db:
56:0a:50:1c:1c:02:b3:e4:d2:05:57:66:09:35:4f:08:40:2f:
cc:47:34:b4:37:14:c1:20:fd:66:f4:46:af:e3:5a:f6:3c:cb:
a2:9b:69:10:6e:f4:45:2b:a9:54:74:71:b6:6a:73:32:55:0d:
bc:bc:14:46:33:f8:93:62:4e:06:08:c7:e7:13:03:62:91:a9:
7f:05:b2:b0:96:e5:69:59:ab:6a:c8:39:5a:43:07:41:fa:e3:
7f:3f:66:d2:03:a4:c1:57:c9:18:ba:64:48:a7:44:07:57:f7:
3b:39:e3:10:a8:3b:08:2b:0b:38:a8:6e:5d:c3:99:40:0c:0a:
81:8f:53:e9:e8:7f:8b:72:ed:30:63:57:10:c5:98:f1:81:49:
d8:cf:44:bc:01:3d:cd:b5:c8:8a:d2:43:b1:ab:a1:c8:05:61:
b8:0e:fd:24:45:94:9a:bd:49:85:c3:84:08:d0:30:8d:ff:5f:
d9:1d:1a:8f:a9:7c:07:d8:b5:52:16:79:9a:d9:4a:1e:b7:bb:
49:32:4e:e2:87:4a:1f:a7:40:e9:3c:4b:b7:f7:b8:73:06:38:
4d:6b:b4:b7
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUD71KhuKxNBXBhTXzwNOhIh5OkFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0Mx
OEQ2QjM2MDAeFw0yNjA2MDUwNTQ2MTdaFw0yNzA2MDQwNTUxMTdaMDMxMTAvBgNV
BAMTKEMxMTY2RDEwQkIwMTVGQkREMzAyQkVCMzVFRjA5RTA5RDk1RkQzMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9lYhaCsyfzTd1N/7FhH6cjXy
LfJryq8kAe/vWNVasLsInn3Ya92FcfOUgZk4N3llpCWFJhN0ckDxiXkxUZdo6Qao
w6N7v7bRC2hC/6rQAWL/+xbxDDuYnVU+9tCSLaJUVEnylyRv1Di4o4eNFH80nNk9
lfO07Dh/+wRflXhrNA+SUSeI9UXi1TPqoNj5ixssl2nT9fWuvjiQR+vEsx6ys2Df
ppwPUxzGJZmQ3/nZHum4Xq49pI1wSldOim1OYfmOMNJFflQF9qn+yXPV/j38S127
eNCUt+QPpc77Pfk8Oh6ZH6gZ48yJ3vde9tIDjHdhk0MH8GN7ml2FQJ8DaD+DAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUwRZtELsBX73TAr6zXvCeCdlf0zkwHwYDVR0j
BBgwFoAULyyDOcyOREZ99bpdD2YUPBjWs2AwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU3NjE5OTk0ODE0MDU0Ny8wLzJGMkM4MzM5Q0M4RTQ0NDY3REY1QkE1RDBGNjYx
NDNDMThENkIzNjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMkYyQzgzMzlDQzhFNDQ0NjdERjVCQTVEMEY2NjE0M0MxOEQ2QjM2MC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTc2MTk5OTQ4MTQwNTQ3LzAvMzQzMzJlMzIzNDM2
MmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDM0MzIzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAiv2PDANBgkqhkiG9w0BAQsFAAOCAQEASzB6v4uo44THMEcwRdjEp+oqLpv0
9ZeNceDyYoDwg9tCTBXbVgpQHBwCs+TSBVdmCTVPCEAvzEc0tDcUwSD9ZvRGr+Na
9jzLoptpEG70RSupVHRxtmpzMlUNvLwURjP4k2JOBgjH5xMDYpGpfwWysJblaVmr
asg5WkMHQfrjfz9m0gOkwVfJGLpkSKdEB1f3OznjEKg7CCsLOKhuXcOZQAwKgY9T
6eh/i3LtMGNXEMWY8YFJ2M9EvAE9zbXIitJDsauhyAVhuA79JEWUmr1JhcOECNAw
jf9f2R0aj6l8B9i1UhZ5mtlKHre7STJO4odKH6dA6TxLt/e4cwY4TWu0tw==
-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:52 2026 by rpki-client