
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38302e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e38302e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: 1nMOZkN1XghfAYLgojPqsaO43OMHov+lrmWSzV4cJXc=
Subject key identifier: 03:F1:64:E3:13:88:A8:79:95:E8:CC:15:FE:27:A5:0F:F9:C7:5B:FF
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 38236C014C47951859AD0D2509FC1819D2D7365C
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38302e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:48:11 +0000
ROA not before: Fri 05 Jun 2026 05:43:11 +0000
ROA not after: Fri 04 Jun 2027 05:48:11 +0000
asID: 24426
IP address blocks: 43.246.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:23:6c:01:4c:47:95:18:59:ad:0d:25:09:fc:18:19:d2:d7:36:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:43:11 2026 GMT
Not After : Jun 4 05:48:11 2027 GMT
Subject: CN=03F164E31388A87995E8CC15FE27A50FF9C75BFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:d8:a9:cf:de:55:a0:7a:3a:b3:eb:2b:27:
93:61:83:18:a2:c5:bc:9a:3f:8d:60:da:eb:c5:6e:
07:84:32:24:b7:14:da:e0:19:e6:ee:d3:d2:94:5a:
8f:93:ca:01:a9:8f:f7:81:64:91:fa:48:ed:87:1c:
34:51:a7:bf:fa:90:96:51:94:a8:74:ab:8f:e7:2e:
ff:96:b8:1f:10:48:7c:45:bb:5c:c2:b0:91:18:d0:
90:0c:ea:6f:56:51:17:18:28:83:4a:72:b6:a4:fa:
e3:8d:7c:a6:bc:61:85:8b:5f:b3:1b:3b:75:d9:c6:
47:7b:09:53:19:86:c6:50:f2:4c:56:1d:1b:7e:45:
a4:34:b5:c9:39:c2:7a:78:39:9a:d5:3f:e1:44:37:
8f:14:cd:a7:df:41:77:bd:76:12:71:8f:82:aa:01:
4f:7f:d4:a4:85:b0:4b:3f:c8:e2:ea:65:23:05:a1:
36:27:83:32:bf:3d:ac:98:2d:d5:2d:49:8e:fe:ad:
66:9a:a3:29:56:10:ac:32:20:4a:1f:df:32:6f:63:
1f:31:78:2c:b5:a5:24:9b:30:9c:49:63:e5:c6:5d:
33:4c:3a:f4:7c:04:6b:f0:48:76:1c:e8:e8:e3:e8:
f4:32:59:02:6b:19:57:d0:d9:7d:dd:24:59:1f:8a:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:64:E3:13:88:A8:79:95:E8:CC:15:FE:27:A5:0F:F9:C7:5B:FF
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e38302e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.80.0/22
Signature Algorithm: sha256WithRSAEncryption
84:0a:49:d4:39:73:7b:13:17:94:f3:05:82:b1:b1:c3:a9:97:
26:03:3f:a9:d7:0f:4a:d5:d2:5a:38:34:97:92:b4:b7:ba:0e:
93:35:0f:a2:b6:33:ab:8b:85:e9:94:f7:02:68:b0:1b:63:5c:
b0:6d:53:01:87:50:a5:ac:90:62:9b:d7:d3:04:03:0b:fe:5a:
9c:b1:cd:8d:5e:26:e6:3a:e6:e4:7b:f9:32:14:07:d3:9d:43:
54:00:d9:d6:4b:dd:d3:10:3f:a4:2c:89:53:70:41:c2:6d:53:
c0:07:c3:a3:0d:57:90:2c:d8:da:35:7d:47:19:ef:f3:b4:a1:
e5:a5:e0:9c:0b:a4:cd:23:48:84:39:67:14:d9:3a:0d:2c:95:
46:62:44:08:7a:00:77:7a:94:52:45:22:28:52:9a:9f:c1:40:
15:14:ca:5d:6d:47:ec:c9:da:86:29:02:13:62:7a:60:2c:ff:
47:97:a1:42:58:f9:42:d2:83:3e:5c:a3:cd:5a:97:7e:0b:7a:
92:7f:19:ec:cb:76:42:2f:c4:91:67:1a:bd:67:05:1f:b7:7a:
37:96:b0:ca:d0:b7:62:00:c1:e3:96:0d:f6:bf:da:94:a2:c9:
3c:7c:c4:bc:46:c3:fa:2c:f9:f2:39:2f:0a:e8:17:43:d9:a3:
ce:3b:a8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:51 2026 by rpki-client