
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234312e3234382e302f32322d3232203d3e2030.roa
File: 34332e3234312e3234382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: WR5+MMV6fcmpEl32Y/itrNkE2lY4uxL4vkWnSxWvFIo=
Subject key identifier: F9:D9:5B:73:3D:B0:23:1B:57:52:4B:02:BB:74:00:B3:13:99:A9:60
Certificate issuer: /CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Certificate serial: 2B5F8B931EE292867F1170AA05766D6BBAD6A3F5
Authority key identifier: 1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234312e3234382e302f32322d3232203d3e2030.roa
Signing time: Wed 15 Apr 2026 03:58:43 +0000
ROA not before: Wed 15 Apr 2026 03:53:43 +0000
ROA not after: Wed 14 Apr 2027 03:58:43 +0000
asID: 0
IP address blocks: 43.241.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 17:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5f:8b:93:1e:e2:92:86:7f:11:70:aa:05:76:6d:6b:ba:d6:a3:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1B27C26F8F7ECE53972D80933F503C09222E8F9F
Validity
Not Before: Apr 15 03:53:43 2026 GMT
Not After : Apr 14 03:58:43 2027 GMT
Subject: CN=F9D95B733DB0231B57524B02BB7400B31399A960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:96:98:5e:9b:e7:e8:0a:24:32:c4:97:26:
b6:05:c4:1f:4c:3b:fe:e0:92:54:67:b9:1f:06:60:
be:b9:14:32:06:f6:ca:1b:ce:93:da:4a:20:00:28:
2c:c6:c7:4f:c1:30:82:dd:ee:8f:ef:df:3d:8f:a7:
ee:bf:5c:fc:1b:2c:e5:7c:6c:84:95:ac:21:51:b3:
f9:dd:0e:47:d9:9b:75:15:27:f5:34:82:72:a0:92:
27:4f:40:35:cd:97:55:1a:ad:d9:c3:d2:0e:59:fb:
3b:14:0c:31:c8:83:09:fc:da:b4:cd:39:fb:ef:93:
0a:d5:7b:a1:1a:db:b5:49:d4:81:a5:04:b7:e2:3e:
84:f5:45:a7:70:68:ec:d9:63:ed:a7:42:e5:ec:7f:
52:c4:c3:80:73:04:ac:9a:88:de:c8:59:99:ae:53:
26:8a:f2:0f:4e:62:b8:46:e2:de:8d:e6:ed:55:7c:
0a:b7:22:f8:49:56:19:44:1c:d0:ef:60:65:de:29:
91:3f:2a:4a:95:56:87:56:b3:d0:70:42:ca:ed:13:
76:73:50:b9:c5:5e:c8:f8:b6:f5:95:d1:20:90:6a:
ad:68:e8:c9:fa:28:37:77:89:7e:3b:da:73:e3:01:
e5:41:5b:8d:00:7d:2c:27:ab:15:12:9a:08:2b:ed:
66:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D9:5B:73:3D:B0:23:1B:57:52:4B:02:BB:74:00:B3:13:99:A9:60
X509v3 Authority Key Identifier:
keyid:1B:27:C2:6F:8F:7E:CE:53:97:2D:80:93:3F:50:3C:09:22:2E:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/1B27C26F8F7ECE53972D80933F503C09222E8F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1B27C26F8F7ECE53972D80933F503C09222E8F9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1070955924073545731/0/34332e3234312e3234382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.248.0/22
Signature Algorithm: sha256WithRSAEncryption
88:cb:7c:af:47:39:c3:78:9e:4d:a8:5f:e1:e3:69:b4:01:51:
8b:aa:d9:5e:39:bd:bd:93:62:60:cd:b5:74:e8:0b:4f:d9:86:
1c:fc:e5:d7:f2:50:d3:0d:cc:98:f7:cc:20:96:e9:8d:64:8b:
2e:60:8c:60:4d:c0:30:5f:1f:32:39:cd:43:06:42:3e:52:3f:
20:9b:3c:e1:0d:7b:b9:9f:3c:b4:61:00:90:36:5e:6d:39:07:
f8:e8:61:8d:7d:98:e9:66:e5:12:71:e9:68:0b:ba:5d:08:56:
3e:79:39:ad:50:a5:bb:e4:e2:b1:c7:dd:69:84:f3:6f:dd:2e:
7d:0c:d7:20:ea:97:65:52:21:ad:34:ab:f0:33:21:dd:f0:41:
06:a5:d5:7c:c7:ba:dc:2b:21:1e:d7:33:c7:1b:09:1a:8f:35:
fe:08:d0:08:48:15:93:7e:e0:63:a3:70:ef:54:e3:67:3c:87:
2e:c0:0a:05:a7:71:d9:25:5e:e4:a1:82:20:b9:a1:d5:2c:e2:
bd:73:ed:b3:eb:da:08:36:c2:07:eb:24:fb:4f:b1:c5:9c:a5:
eb:93:40:20:49:1e:71:c1:71:50:90:7d:0f:8d:f6:e6:4e:7a:
ed:96:97:ab:02:64:c3:aa:7e:a3:d6:fa:07:ef:98:53:15:76:
94:8b:c3:7e
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgIUK1+Lkx7ikoZ/EXCqBXZta7rWo/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDky
MjJFOEY5RjAeFw0yNjA0MTUwMzUzNDNaFw0yNzA0MTQwMzU4NDNaMDMxMTAvBgNV
BAMTKEY5RDk1QjczM0RCMDIzMUI1NzUyNEIwMkJCNzQwMEIzMTM5OUE5NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0i5aYXpvn6AokMsSXJrYFxB9M
O/7gklRnuR8GYL65FDIG9sobzpPaSiAAKCzGx0/BMILd7o/v3z2Pp+6/XPwbLOV8
bISVrCFRs/ndDkfZm3UVJ/U0gnKgkidPQDXNl1UardnD0g5Z+zsUDDHIgwn82rTN
OfvvkwrVe6Ea27VJ1IGlBLfiPoT1RadwaOzZY+2nQuXsf1LEw4BzBKyaiN7IWZmu
UyaK8g9OYrhG4t6N5u1VfAq3IvhJVhlEHNDvYGXeKZE/KkqVVodWs9BwQsrtE3Zz
ULnFXsj4tvWV0SCQaq1o6Mn6KDd3iX472nPjAeVBW40AfSwnqxUSmggr7WYNAgMB
AAGjggILMIICBzAdBgNVHQ4EFgQU+dlbcz2wIxtXUksCu3QAsxOZqWAwHwYDVR0j
BBgwFoAUGyfCb49+zlOXLYCTP1A8CSIuj58wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA3
MDk1NTkyNDA3MzU0NTczMS8wLzFCMjdDMjZGOEY3RUNFNTM5NzJEODA5MzNGNTAz
QzA5MjIyRThGOUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMUIyN0MyNkY4RjdFQ0U1Mzk3MkQ4MDkzM0Y1MDNDMDkyMjJFOEY5Ri5jZXIw
gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDcwOTU1OTI0MDczNTQ1NzMxLzAvMzQzMzJlMzIzNDMx
MmUzMjM0MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAivx
+DANBgkqhkiG9w0BAQsFAAOCAQEAiMt8r0c5w3ieTahf4eNptAFRi6rZXjm9vZNi
YM21dOgLT9mGHPzl1/JQ0w3MmPfMIJbpjWSLLmCMYE3AMF8fMjnNQwZCPlI/IJs8
4Q17uZ88tGEAkDZebTkH+OhhjX2Y6WblEnHpaAu6XQhWPnk5rVClu+TiscfdaYTz
b90ufQzXIOqXZVIhrTSr8DMh3fBBBqXVfMe63CshHtczxxsJGo81/gjQCEgVk37g
Y6Nw71TjZzyHLsAKBadx2SVe5KGCILmh1SzivXPts+vaCDbCB+sk+0+xxZyl65NA
IEkeccFxUJB9D4325k567ZaXqwJkw6p+o9b6B++YUxV2lIvDfg==
-----END CERTIFICATE-----
Generated at Thu Apr 16 22:35:38 2026 by rpki-client