
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132322e302f32342d3234203d3e2034383337.roa
File: 34332e3233392e3132322e302f32342d3234203d3e2034383337.roa (raw, json)
Hash identifier: IaWRC9nHLKC84WiqJrSp1xSXQunbSDFvIw4uS1slruo=
Subject key identifier: EA:C2:C4:0D:38:4B:94:CA:A9:ED:32:C6:34:B7:1D:F0:4E:E0:E2:8B
Certificate issuer: /CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Certificate serial: 560BE3F91B742B431AA19DAB59E2A9422A3F5E3D
Authority key identifier: 52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132322e302f32342d3234203d3e2034383337.roa
Signing time: Wed 15 Apr 2026 07:02:19 +0000
ROA not before: Wed 15 Apr 2026 06:57:19 +0000
ROA not after: Wed 14 Apr 2027 07:02:19 +0000
asID: 4837
IP address blocks: 43.239.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 17 Apr 2026 19:37:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:0b:e3:f9:1b:74:2b:43:1a:a1:9d:ab:59:e2:a9:42:2a:3f:5e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=526198C6FEC4729E2A08209CDB07E7BD6537198F
Validity
Not Before: Apr 15 06:57:19 2026 GMT
Not After : Apr 14 07:02:19 2027 GMT
Subject: CN=EAC2C40D384B94CAA9ED32C634B71DF04EE0E28B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:14:a4:50:02:db:a8:23:22:f1:78:d5:e8:
ed:e0:ce:ed:ce:83:6f:dc:1c:6e:65:16:9e:00:98:
dd:61:77:d5:ba:07:aa:23:a9:88:b0:b5:a9:b5:f4:
b2:df:ee:3e:da:ce:b9:4c:5b:1f:30:f5:94:1f:3b:
5e:18:4a:68:84:9e:bf:27:23:ef:2d:cb:11:b5:5e:
08:fe:a3:fa:22:d4:af:6d:c5:9d:ca:17:54:9e:75:
15:e0:bb:9f:e3:6c:58:61:40:d4:3b:c4:1a:09:09:
aa:a3:6d:47:38:39:96:f4:7d:53:ea:52:fc:8b:0e:
3f:8c:2c:a5:55:86:51:88:fd:68:94:68:bc:a9:0e:
72:45:d2:cc:08:5d:4b:6c:9b:e2:36:7c:cf:56:cc:
47:a0:5f:47:64:f6:60:f6:5e:5c:9e:a7:fb:40:0a:
a3:fc:82:46:7d:57:3d:14:4f:de:be:d3:ed:43:d8:
fd:30:91:8b:09:e7:e8:18:2d:d7:90:d0:a1:40:52:
c6:5c:6e:f7:17:df:c0:92:ce:d1:aa:ce:18:24:e3:
7e:73:d4:e4:1d:0f:c0:19:5a:76:6b:af:13:63:df:
ef:8e:e6:0d:33:f8:cf:48:94:af:fa:ce:27:53:15:
64:ff:95:8b:46:80:a2:fb:a4:cb:f3:50:15:85:43:
dd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:C4:0D:38:4B:94:CA:A9:ED:32:C6:34:B7:1D:F0:4E:E0:E2:8B
X509v3 Authority Key Identifier:
keyid:52:61:98:C6:FE:C4:72:9E:2A:08:20:9C:DB:07:E7:BD:65:37:19:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/526198C6FEC4729E2A08209CDB07E7BD6537198F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/526198C6FEC4729E2A08209CDB07E7BD6537198F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096689320682586114/0/34332e3233392e3132322e302f32342d3234203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.239.122.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:0b:73:32:bf:7b:4b:62:3c:30:aa:dc:ad:1f:ab:e2:e5:86:
ad:d6:69:ca:7a:c3:d7:bd:5d:04:cf:93:e5:f3:5d:fc:5c:1b:
d5:6e:8b:f3:5b:6a:c4:09:d7:95:95:b5:a2:c7:bd:05:f7:2c:
2b:d0:08:ca:61:61:b5:73:8c:00:b7:bf:1c:51:5f:00:9d:9d:
7d:2d:62:bf:df:06:99:f6:4a:fc:b0:7c:c6:78:9a:d9:b1:08:
1d:25:33:57:97:d1:ab:6b:a6:d5:b3:51:2b:6b:cd:37:c5:aa:
08:aa:e1:24:82:ad:15:5a:b8:ce:46:45:a3:b1:84:ac:f5:f2:
b1:54:53:c8:a2:9b:5f:f0:07:1f:29:5a:b2:5b:c8:d9:3e:c0:
c6:fb:24:1a:be:b3:73:14:6f:3c:c6:f7:ff:8e:2c:c6:c9:31:
02:56:ac:9f:b9:b4:7f:39:70:cd:13:ac:50:37:be:d6:38:29:
a3:0b:f6:63:22:91:97:dc:28:ea:0e:53:4e:85:8d:7d:4e:0b:
c6:86:8a:31:48:2d:5a:1c:e3:a1:1d:e1:f3:a2:66:2b:23:a6:
40:9d:59:28:98:10:cc:40:60:ca:5e:16:74:75:25:12:b8:5f:
4f:82:1b:86:59:7c:84:f9:09:ee:24:db:c8:eb:e2:b7:11:cf:
98:ba:d8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:49:26 2026 by rpki-client