
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3235342e3133362e302f32322d3332203d3e203536303438.roa
File: 34332e3235342e3133362e302f32322d3332203d3e203536303438.roa (raw, json)
Hash identifier: T8dBCVVs/bHDmISqwGHjW0HutTnMeZLQLMlAohuCx9M=
Subject key identifier: E9:AF:08:28:E9:40:8E:DD:2B:1B:06:F0:A9:3D:D6:FC:9C:B2:BF:4C
Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Certificate serial: 5958E71401AC4C5739C5CFFD65A081A98C3F4A6D
Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3235342e3133362e302f32322d3332203d3e203536303438.roa
Signing time: Wed 15 Apr 2026 07:47:05 +0000
ROA not before: Wed 15 Apr 2026 07:42:05 +0000
ROA not after: Wed 14 Apr 2027 07:47:05 +0000
asID: 56048
IP address blocks: 43.254.136.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Apr 2026 17:10:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:58:e7:14:01:ac:4c:57:39:c5:cf:fd:65:a0:81:a9:8c:3f:4a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315
Validity
Not Before: Apr 15 07:42:05 2026 GMT
Not After : Apr 14 07:47:05 2027 GMT
Subject: CN=E9AF0828E9408EDD2B1B06F0A93DD6FC9CB2BF4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:97:be:0a:2f:cf:f9:90:7c:eb:1a:98:22:e5:
78:64:63:0f:41:2a:89:18:fc:07:6e:f8:3e:28:42:
0d:e9:9c:cc:db:e5:b6:79:38:c2:b0:e9:14:5a:33:
1f:98:be:f0:7e:f9:65:11:db:26:d7:8b:f8:25:83:
d4:12:14:b4:fa:7c:21:1a:f8:c1:97:38:23:cc:e1:
14:1f:e3:20:a6:98:33:e8:d9:3d:6b:67:fc:d5:c4:
97:47:ad:4b:18:8f:66:27:b1:83:8e:24:db:c2:e4:
20:1f:ab:0a:78:d4:da:e2:62:af:fa:bc:59:50:ac:
6b:83:91:7a:b0:7d:39:e3:2c:94:ba:3e:8b:2a:a6:
0e:ce:1a:c5:f7:8a:c6:42:87:7b:24:01:f9:e1:fe:
56:aa:9a:ae:29:52:24:df:a0:ae:ea:3e:2c:67:35:
94:15:83:67:16:72:ad:0e:49:31:16:bf:16:61:cc:
6f:aa:e7:31:29:79:5c:3c:e6:25:30:76:5c:7a:67:
d8:7b:dc:6e:a2:8d:d4:ac:aa:f8:73:bd:a1:1d:e2:
9e:6d:39:cb:79:1c:ce:67:50:b9:86:8b:e2:15:c7:
c7:dd:9d:fa:a6:a9:08:d6:c4:d3:9d:1d:69:f0:72:
5a:5e:f6:7f:a8:48:d3:8e:de:cb:a6:14:6e:ac:2a:
fb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AF:08:28:E9:40:8E:DD:2B:1B:06:F0:A9:3D:D6:FC:9C:B2:BF:4C
X509v3 Authority Key Identifier:
keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3235342e3133362e302f32322d3332203d3e203536303438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.254.136.0/22
Signature Algorithm: sha256WithRSAEncryption
00:9e:46:bd:35:de:ab:f6:82:8e:c3:08:ee:48:eb:d2:71:26:
57:af:d9:1c:65:cc:f7:c2:2d:85:13:be:be:4b:f3:1d:8e:bd:
4d:9f:cd:2b:e1:c4:49:0a:ba:c6:38:99:4b:4d:f2:3a:56:d8:
03:7c:a8:30:f6:ed:6f:c5:63:9f:ed:f4:09:27:1e:21:ce:73:
06:cc:a9:53:f4:62:98:8d:8e:ab:14:c4:da:25:3c:be:6d:bd:
fd:17:d1:67:fd:28:e0:01:4b:cc:36:2b:b5:d6:20:64:7b:85:
a7:83:06:49:f3:25:28:12:09:fa:1d:ec:f7:e3:d5:e1:b4:f3:
66:45:c7:f2:66:3a:e5:4d:e6:a3:c9:25:f3:e8:0d:97:4a:06:
96:c6:26:de:ce:00:43:f7:14:31:05:46:a1:0c:60:39:86:6b:
4a:24:d8:5c:c8:2f:b3:7c:07:c0:7c:64:84:7a:66:a1:ce:7c:
bd:19:ec:00:44:8a:aa:99:50:07:00:ae:f3:6e:d3:ba:1d:7f:
93:14:fd:49:8a:ba:16:c3:01:f9:71:34:41:3b:97:c4:26:b9:
76:64:2c:d2:85:31:a3:ee:63:0f:bd:f6:c6:db:6e:0a:ea:55:
44:a4:b6:67:98:e6:1e:9b:84:41:93:85:81:ad:8a:d7:f3:1b:
60:39:5e:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Apr 17 22:26:43 2026 by rpki-client