
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203633353637.roa
File: 34332e3234312e34382e302f32322d3234203d3e203633353637.roa (raw, json)
Hash identifier: y/7myJs5XPVoIiKvb3vZer8dw79yEH6TJGBD204stLo=
Subject key identifier: 9A:BC:BC:46:4E:A5:98:59:E7:47:F5:F6:25:7A:7F:11:6D:82:41:03
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 4689B640BA5AB623D1F04378B1AE293C2D6D93DB
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203633353637.roa
Signing time: Fri 17 Apr 2026 01:38:16 +0000
ROA not before: Fri 17 Apr 2026 01:33:16 +0000
ROA not after: Fri 16 Apr 2027 01:38:16 +0000
asID: 63567
IP address blocks: 43.241.48.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:89:b6:40:ba:5a:b6:23:d1:f0:43:78:b1:ae:29:3c:2d:6d:93:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Apr 17 01:33:16 2026 GMT
Not After : Apr 16 01:38:16 2027 GMT
Subject: CN=9ABCBC464EA59859E747F5F6257A7F116D824103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f7:7a:d7:a3:0f:79:e5:07:05:58:89:2e:eb:
bd:25:bf:3f:02:8b:25:82:73:f2:e6:84:4d:0f:5b:
7d:6f:2c:85:5c:b9:8c:96:ad:f6:f9:8f:63:0c:72:
f0:48:df:88:fb:b1:ad:51:2e:63:17:12:f5:41:f7:
f0:49:28:2d:07:f3:10:39:03:5d:ea:d8:6a:ed:c6:
90:b6:65:64:32:5e:01:b8:72:8f:ef:55:5d:b4:c1:
db:4e:0a:3a:83:04:bd:a5:1d:e5:5a:74:4f:f4:a6:
84:2f:44:c9:27:75:3b:9e:4d:0d:86:30:64:7e:ea:
97:4a:46:42:73:19:64:fe:ea:47:d5:5b:93:20:e2:
9d:24:25:9c:7b:48:e7:c5:b0:da:b2:90:61:f1:d4:
d1:ca:91:96:df:72:03:e3:2e:c6:ac:97:e7:29:9e:
68:74:cb:b7:ce:7d:f9:7d:ad:d2:cc:68:53:5d:4f:
38:5e:17:88:3a:f1:b2:08:ab:3c:8a:9c:6b:f2:1a:
81:77:dc:d0:21:60:eb:6f:32:b8:1b:4b:aa:86:47:
16:08:af:13:a9:c6:b0:a8:fc:67:55:7b:3b:3b:29:
46:54:6a:26:1d:ab:f0:4f:31:aa:3f:9f:90:d0:84:
45:e3:68:84:bf:c3:44:c1:c6:35:8d:c4:53:0f:05:
31:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BC:BC:46:4E:A5:98:59:E7:47:F5:F6:25:7A:7F:11:6D:82:41:03
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e34382e302f32322d3234203d3e203633353637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.48.0/22
Signature Algorithm: sha256WithRSAEncryption
90:11:b8:8e:97:c7:8c:b9:38:18:be:93:7d:36:65:0a:32:cc:
eb:d8:4c:05:e6:3e:32:ff:ef:8c:e3:10:bf:47:18:ae:64:36:
c6:cd:a1:fc:b1:08:85:e9:ce:4a:0a:f7:9a:d3:23:40:c6:44:
a2:0d:65:5d:9a:44:a8:d5:4a:3e:de:ee:a6:84:84:42:1e:b6:
aa:57:e2:e5:91:92:ce:1c:bc:a0:c7:2c:62:2f:47:2e:c3:f9:
2f:93:50:aa:0f:c0:75:84:46:31:3c:df:5b:41:78:43:d1:35:
87:51:83:ba:39:fa:20:1e:46:88:48:bb:ae:83:4d:b3:b2:de:
a6:7a:fb:6b:74:22:ab:0e:5e:fd:a2:f7:f6:57:08:0e:01:b0:
cf:56:39:e1:11:da:47:cd:19:25:fe:db:2f:f5:dd:54:4c:19:
99:30:36:6d:b0:7b:12:c6:c2:ee:c8:16:b8:a4:08:5e:47:37:
3f:63:9a:31:7d:b2:0e:f6:05:e3:a0:b1:91:e2:88:f7:80:93:
b3:82:09:e3:22:7f:40:74:1e:12:9c:03:6a:d2:5b:55:a9:30:
b9:65:df:9a:7e:47:b3:8f:d0:90:9f:42:f1:bf:b8:b8:69:6d:
28:13:f0:7c:8a:d8:d8:cc:05:ff:9e:13:80:b4:85:e8:55:fc:
de:3b:ec:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:24:55 2026 by rpki-client