
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e37322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: WokROlztnbUqflAAcMORCXjX14AzJzMYClm3aIsW5bc=
Subject key identifier: 6D:53:0F:52:C5:44:F4:0D:21:10:A0:FD:A1:63:42:4A:BE:6E:78:D5
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 141FD8CE0AEB948EEC7BF20CC30EE18B5DDBC1E6
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:51:16 +0000
ROA not before: Fri 05 Jun 2026 05:46:16 +0000
ROA not after: Fri 04 Jun 2027 05:51:16 +0000
asID: 24426
IP address blocks: 43.246.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:1f:d8:ce:0a:eb:94:8e:ec:7b:f2:0c:c3:0e:e1:8b:5d:db:c1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:46:16 2026 GMT
Not After : Jun 4 05:51:16 2027 GMT
Subject: CN=6D530F52C544F40D2110A0FDA163424ABE6E78D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:bb:9b:53:2b:ba:93:5c:01:65:f9:22:d8:
fd:07:62:f3:8e:06:0f:12:cd:fb:ea:74:44:65:a6:
51:66:dd:8a:1d:6b:4c:40:3a:9c:58:5a:05:49:fe:
75:32:65:49:2a:8c:b8:53:b8:57:cb:9f:41:88:b6:
13:7c:ca:2f:09:67:4c:fd:39:6c:2f:f5:86:81:f0:
74:20:c6:02:a1:a5:b1:cd:5e:fe:21:5d:c9:d7:9d:
cf:ad:60:c0:0e:31:25:27:d3:40:6c:d5:ff:c2:a2:
4f:e6:9c:8c:a5:fd:3d:9e:28:b0:e6:6f:ae:df:3a:
ba:e8:1b:ae:da:bd:16:a1:80:ca:c3:9d:36:f8:02:
c7:d5:55:af:3e:de:ab:57:40:7c:16:a9:5b:56:44:
6a:a6:a0:3b:84:f2:d1:ae:cf:31:bd:df:69:40:38:
0c:9d:29:11:de:b5:69:a3:6b:b3:80:a5:c6:b5:d2:
53:6c:bf:0b:e7:79:fd:6e:5c:61:e1:1b:53:ca:c2:
d5:f4:3d:6d:00:48:aa:31:ff:b7:08:60:a6:c7:1b:
9b:ea:e0:1f:a1:8b:8c:12:11:d0:f6:bf:12:b4:9f:
68:70:0a:ae:14:6c:fc:2d:b4:3d:56:a0:a0:de:ed:
6d:2d:13:c1:7f:99:53:db:66:b0:e8:24:04:44:1c:
42:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:53:0F:52:C5:44:F4:0D:21:10:A0:FD:A1:63:42:4A:BE:6E:78:D5
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e37322e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.72.0/22
Signature Algorithm: sha256WithRSAEncryption
49:8e:8a:37:2f:d5:a3:c7:86:85:92:90:98:e9:ed:fb:2b:12:
90:9e:a2:ba:c8:df:03:f3:c1:c8:b7:81:53:49:50:96:fa:a1:
5e:1d:37:11:0d:1a:a3:ad:e6:95:0d:1a:83:a5:b4:57:3a:bb:
d0:f0:f0:79:cd:c7:2d:63:21:9e:6f:1b:11:92:ab:f9:61:d5:
28:62:74:ba:06:c5:de:ef:d9:ef:d5:c4:bd:47:0f:8d:9b:86:
31:ff:f7:24:c6:26:2a:2a:b1:5a:7f:f2:f1:46:32:d3:28:de:
63:d0:fc:e9:32:8f:d9:f6:93:5d:27:8e:c4:78:b9:f9:79:16:
18:d5:6c:34:a5:91:f1:5e:8a:a5:29:c2:27:dc:0e:74:eb:1f:
36:a1:2d:75:9f:9a:6e:5b:8d:78:6c:6b:31:3c:25:53:fc:57:
98:4b:3e:ce:ea:c9:1c:c1:34:c8:be:70:9d:40:0b:3f:7d:f1:
2d:d9:8a:3b:d6:ae:f6:06:61:68:87:bb:21:1f:6b:90:6d:6f:
86:30:e8:d1:f9:48:10:98:c6:d1:8b:fb:26:33:3b:2b:51:6e:
95:fc:54:45:32:06:02:a9:49:65:7d:c7:00:0a:91:6c:30:55:
f6:42:52:00:4c:f9:21:77:ec:21:27:b7:9c:50:a3:bd:2a:28:
b3:24:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:43 2026 by rpki-client