
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138342e302f32322d3332203d3e2034383038.roa
File: 34332e3234372e3138342e302f32322d3332203d3e2034383038.roa (raw, json)
Hash identifier: SMlfZiu/E9B56jmZCUuN+IcRQSUjx9Fu3cPV/QTt2/Y=
Subject key identifier: 47:3D:47:AD:F6:EC:9B:74:74:05:E5:26:46:7C:00:42:B6:72:CD:61
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 682C31EF2B50D953FD1DA472A7AFB8082B759856
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138342e302f32322d3332203d3e2034383038.roa
Signing time: Wed 15 Apr 2026 08:01:27 +0000
ROA not before: Wed 15 Apr 2026 07:56:27 +0000
ROA not after: Wed 14 Apr 2027 08:01:27 +0000
asID: 4808
IP address blocks: 43.247.184.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2c:31:ef:2b:50:d9:53:fd:1d:a4:72:a7:af:b8:08:2b:75:98:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:56:27 2026 GMT
Not After : Apr 14 08:01:27 2027 GMT
Subject: CN=473D47ADF6EC9B747405E526467C0042B672CD61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:2a:56:22:29:72:3e:d8:b6:7d:93:34:0f:0b:
8b:56:45:ea:48:94:02:89:e9:ea:88:22:73:f6:05:
8d:f3:7a:48:15:f0:11:4f:a3:e1:c8:23:15:82:d9:
77:6e:8b:33:3a:a7:50:09:f1:73:ac:e4:f5:25:50:
17:3e:e5:86:36:1b:b2:63:4b:3c:3e:88:e6:5b:df:
e0:60:86:25:e3:e3:4f:22:f4:c7:27:d5:cf:11:a6:
14:71:c4:04:15:2d:94:f1:75:23:cc:3a:8d:68:cf:
be:30:02:51:49:97:29:bc:57:84:8e:aa:42:e2:25:
8d:87:f7:58:00:f2:7e:59:f9:a2:c2:4e:de:e0:0e:
6f:09:49:56:02:08:35:a5:c2:14:51:e3:07:be:14:
d6:55:07:c3:ee:7c:ee:0d:1e:7b:db:d3:4e:41:d3:
a8:ce:2b:85:04:f4:55:75:a3:a3:bd:e2:11:2d:f5:
81:29:ce:8e:7e:b7:9e:3c:f0:9b:16:e2:2f:40:90:
2a:ae:ca:2c:ab:f6:ac:0a:76:f9:95:46:d4:ba:d9:
94:1a:4a:51:46:a9:9d:bb:04:f7:0c:0d:d4:6b:90:
5d:8d:54:56:1e:c3:d1:5a:85:9c:80:1c:6c:b6:70:
89:7b:8c:a3:88:aa:d6:96:a6:6d:cb:45:86:95:b7:
8f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3D:47:AD:F6:EC:9B:74:74:05:E5:26:46:7C:00:42:B6:72:CD:61
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138342e302f32322d3332203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.184.0/22
Signature Algorithm: sha256WithRSAEncryption
17:f4:78:c8:6e:21:a0:24:03:37:27:8f:41:6f:8f:0e:88:7a:
d4:6e:f4:99:37:4d:a2:33:29:ed:a1:33:09:a9:de:e3:64:72:
4a:b5:ff:db:31:77:af:c6:4e:a8:eb:8b:7e:73:18:58:49:ad:
67:f3:37:be:f4:00:54:e5:22:b0:5d:0b:c3:a8:e5:5d:a6:fa:
f5:6e:1c:9e:5b:8a:74:04:56:4c:04:a0:9e:17:aa:58:dd:41:
3f:4a:23:5f:31:e0:02:5d:48:43:cb:97:5e:1a:cb:b9:f3:b2:
df:42:1b:da:50:53:e8:eb:76:b1:ab:3f:88:ee:60:49:0c:bc:
b8:ab:c1:2b:19:4e:1d:90:75:09:4a:a4:18:f2:dd:8e:02:11:
3c:79:1f:4f:4a:65:c4:f8:15:e9:0b:02:f5:01:97:45:19:35:
62:71:7f:fe:e4:6b:cc:5c:0d:f6:22:ac:29:87:2d:fc:5b:53:
4d:8a:1e:d1:e3:68:ab:57:7d:4a:3a:3d:7e:b8:dd:c5:2a:b3:
05:19:4a:f7:45:40:b9:6b:c4:c7:2c:06:c2:94:da:4b:79:ce:
67:da:2a:0d:2d:f6:94:35:b0:c1:2b:13:f7:2f:37:9c:f8:21:
ef:bb:3b:17:6e:77:c1:98:4a:2f:49:a5:b3:52:25:b9:1e:c2:
ac:89:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:33:01 2026 by rpki-client