
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39322e302f32322d3232203d3e203234343236.roa
File: 34332e3234362e39322e302f32322d3232203d3e203234343236.roa (raw, json)
Hash identifier: xDOoQLMpuMbbUNsXT5GUKy3LlgsLHIPVA5nHVj8izD8=
Subject key identifier: 4D:E5:E0:FA:D3:32:4D:CD:27:CE:D9:09:A3:A6:51:28:9C:6B:1B:61
Certificate issuer: /CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Certificate serial: 892DE90685283A977E04EBA1CF4A6544FEEE8D
Authority key identifier: 2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39322e302f32322d3232203d3e203234343236.roa
Signing time: Fri 05 Jun 2026 05:49:19 +0000
ROA not before: Fri 05 Jun 2026 05:44:19 +0000
ROA not after: Fri 04 Jun 2027 05:49:19 +0000
asID: 24426
IP address blocks: 43.246.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 16:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
89:2d:e9:06:85:28:3a:97:7e:04:eb:a1:cf:4a:65:44:fe:ee:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F2C8339CC8E44467DF5BA5D0F66143C18D6B360
Validity
Not Before: Jun 5 05:44:19 2026 GMT
Not After : Jun 4 05:49:19 2027 GMT
Subject: CN=4DE5E0FAD3324DCD27CED909A3A651289C6B1B61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:93:45:b8:23:44:57:da:2e:cb:87:a2:ff:
13:89:d3:94:f5:42:a6:d5:36:e0:d4:b9:58:cc:78:
49:2c:d9:a8:21:9d:5f:78:3a:15:fa:a6:41:47:be:
49:0c:8a:a5:71:e5:9a:92:59:5a:ad:cc:4e:0d:c3:
ed:26:9d:1a:4f:99:0e:c7:1d:bd:29:f5:a5:00:be:
b5:11:7a:b8:51:0e:66:00:91:6c:fe:5d:12:13:f8:
72:8c:a0:ae:41:db:1b:5f:ce:cd:5b:17:9d:03:90:
82:f7:4e:ed:f4:4d:c5:58:9a:bb:3b:e4:eb:4c:24:
66:dd:02:8f:74:07:20:7d:64:c5:c5:34:65:b1:a6:
b0:b9:1f:b7:da:38:89:07:7d:14:d3:ad:e5:1d:34:
22:d4:ea:56:f4:b4:26:28:89:28:fc:95:8e:56:9c:
41:bd:67:d2:41:60:ee:e9:dd:8b:83:1f:20:87:a2:
ec:2e:fd:3f:2c:7c:14:07:63:87:2d:08:a7:78:7b:
96:cd:34:cb:40:2a:5e:30:4b:47:fa:9d:36:e6:4d:
3d:e7:77:34:44:f6:1f:aa:3b:f7:94:3d:0a:c4:6c:
82:3d:91:23:ba:f4:23:e4:71:ca:a0:f6:27:7d:c7:
41:0f:76:ed:82:7a:69:6c:73:22:6e:6e:ef:4c:d0:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E5:E0:FA:D3:32:4D:CD:27:CE:D9:09:A3:A6:51:28:9C:6B:1B:61
X509v3 Authority Key Identifier:
keyid:2F:2C:83:39:CC:8E:44:46:7D:F5:BA:5D:0F:66:14:3C:18:D6:B3:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2F2C8339CC8E44467DF5BA5D0F66143C18D6B360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065576199948140547/0/34332e3234362e39322e302f32322d3232203d3e203234343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.246.92.0/22
Signature Algorithm: sha256WithRSAEncryption
69:e4:37:21:ce:7b:e1:61:05:04:72:c9:7b:00:4e:43:49:a0:
c7:8b:c3:2d:5a:40:d1:5e:e5:80:bf:59:4e:ed:ac:35:3c:95:
1f:b3:20:a4:60:97:15:df:97:d8:03:c1:c0:96:16:98:58:51:
ae:b3:3f:fe:6c:c7:36:53:b9:c5:cd:c8:0e:62:72:1e:3c:54:
b8:96:96:5e:85:45:89:3e:da:bc:49:89:fc:b1:cc:4a:8e:02:
c9:db:02:0f:ed:fd:9c:8c:5b:98:c5:79:0d:58:35:48:69:7c:
bc:8a:0d:7e:cb:6b:04:02:60:5a:de:17:fc:b4:a8:5b:67:7d:
4a:53:fa:f4:00:ec:71:d8:9c:55:3b:59:6a:53:d6:61:d1:ff:
b7:3a:c2:ed:49:1a:11:17:c4:8c:34:98:db:1b:80:8c:14:2d:
87:7e:73:4f:21:b2:36:c5:30:87:ed:da:8a:96:59:05:a5:e5:
96:e0:b1:92:00:5e:ec:6f:51:fb:41:dc:d4:99:ef:fc:66:ad:
f7:29:1e:ae:67:e0:3f:a5:87:90:5a:6c:b9:cf:ea:65:73:2b:
86:b8:d2:f1:54:d9:6e:1e:4f:89:5c:fe:02:fa:57:d8:3b:88:
11:0f:fb:2b:e9:64:a6:97:f4:ed:c5:e5:73:eb:53:de:40:67:
36:50:5a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:43 2026 by rpki-client