
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1066929963686428675/0/34332e3234372e342e302f32342d3234203d3e2034383337.roa
File: 34332e3234372e342e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: 9MCxElaWDbu4EGRFRrCyVbS4X338Aq+ilmHIKXfSzWc=
Subject key identifier: 6F:E7:37:B8:E3:1A:0D:8F:B8:D6:7E:75:4A:C0:9F:B2:8A:38:58:09
Certificate issuer: /CN=7C1507F087228AEDCBF33768752874E09F57729C
Certificate serial: 75E4411156A489793773979CD74BD1B00162AB7C
Authority key identifier: 7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/34332e3234372e342e302f32342d3234203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 03:46:31 +0000
ROA not before: Wed 15 Apr 2026 03:41:31 +0000
ROA not after: Wed 14 Apr 2027 03:46:31 +0000
asID: 4837
IP address blocks: 43.247.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e4:41:11:56:a4:89:79:37:73:97:9c:d7:4b:d1:b0:01:62:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C1507F087228AEDCBF33768752874E09F57729C
Validity
Not Before: Apr 15 03:41:31 2026 GMT
Not After : Apr 14 03:46:31 2027 GMT
Subject: CN=6FE737B8E31A0D8FB8D67E754AC09FB28A385809
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:65:db:64:07:f6:58:38:2a:24:d1:58:8e:65:
d0:bc:d4:01:7f:a5:ad:41:df:f0:8e:3d:a6:da:ca:
f3:78:d4:e2:46:df:9f:54:0e:48:3a:b5:78:e3:8e:
17:e2:39:91:d7:2e:4d:60:b1:bd:53:d0:a8:21:7a:
05:8d:60:be:b1:86:b4:fb:fd:61:c0:6b:a2:bb:f9:
a5:0e:ae:06:5e:91:89:bf:84:a7:07:2d:ce:2c:84:
72:36:1d:67:ab:ca:60:1f:38:12:7a:06:76:4e:38:
5f:be:45:15:d1:bf:c4:91:2d:8a:4b:21:f2:20:c3:
3e:93:6e:1d:d1:00:ec:de:ab:73:c6:b3:f2:8b:dd:
59:c7:4f:05:f1:66:05:85:87:14:df:be:21:01:74:
af:38:7a:b8:fc:22:34:6a:b3:d3:f0:0e:3f:e6:48:
c4:9b:e2:76:11:f1:ee:68:22:28:5b:3c:75:67:1a:
94:3e:a8:ab:3e:ee:15:82:49:86:5a:c8:c0:41:e2:
c2:b9:58:0b:dd:d2:90:3b:bc:ee:fd:bb:cb:84:12:
2a:57:5a:a3:d7:e9:f4:aa:d6:40:9e:6b:41:f5:21:
d0:b0:dd:bc:d4:fa:fd:80:2d:0c:60:56:d1:4f:de:
0a:d2:39:1c:7c:b3:02:c0:f6:58:86:a8:b6:22:f7:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E7:37:B8:E3:1A:0D:8F:B8:D6:7E:75:4A:C0:9F:B2:8A:38:58:09
X509v3 Authority Key Identifier:
keyid:7C:15:07:F0:87:22:8A:ED:CB:F3:37:68:75:28:74:E0:9F:57:72:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/7C1507F087228AEDCBF33768752874E09F57729C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/7C1507F087228AEDCBF33768752874E09F57729C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1066929963686428675/0/34332e3234372e342e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.4.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:f8:31:1f:b1:79:f8:8a:b3:f7:f8:8e:51:d8:a2:e8:60:d1:
6d:dc:ca:99:3f:b2:0a:f3:17:57:e6:7b:8a:90:37:01:49:bd:
a3:f6:8b:f4:59:b3:09:cc:68:ab:3f:6d:6e:31:94:e1:a7:0a:
9e:8d:e7:13:3f:72:10:24:73:48:a0:46:08:56:23:87:52:6c:
74:2b:e2:51:48:90:ef:80:8e:95:09:4b:77:61:6a:75:6c:c7:
59:34:96:fd:85:a0:3f:69:12:66:f3:7f:8f:a0:16:e0:f0:14:
c1:b3:4f:db:8b:27:12:fe:02:b1:0d:e1:66:22:bf:22:1b:9a:
52:06:5e:5b:99:49:26:2e:45:42:cd:6e:0e:f5:c7:4a:a1:28:
39:3d:26:03:7d:2b:f2:20:f7:bd:c8:da:3b:18:17:f2:3b:07:
ef:e6:82:48:eb:bf:cf:f4:e4:b5:6a:cc:d1:dd:e6:4f:1d:10:
a8:2a:35:12:ed:75:83:60:fd:ad:16:dd:b3:17:0a:53:c4:92:
ac:13:a3:89:98:8e:77:24:1b:02:85:6d:a2:b6:9c:93:a7:99:
e0:a1:8b:b5:03:35:eb:17:c1:61:41:42:7d:c5:f1:ac:52:2f:
1e:59:dc:71:75:72:a2:90:68:35:1f:f3:61:72:cc:91:1b:39:
f0:4d:d5:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:00:50 2026 by rpki-client