
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1111933397845934097/0/34332e3234332e3132392e302f32342d3234203d3e2039383038.roa
File: 34332e3234332e3132392e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: +N3PrSD5d//LhydELXiQW37eGqlDvK5gAiJ3JMHc0l4=
Subject key identifier: F4:1E:FD:20:71:4D:EB:41:24:3C:B5:9F:C6:1F:7D:21:1C:52:43:F1
Certificate issuer: /CN=E75349FBEA39CFED65BB280A32055EB716679089
Certificate serial: 44CF63687016B4374DFDFEB60CCEAB6DAAAF6CB6
Authority key identifier: E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/34332e3234332e3132392e302f32342d3234203d3e2039383038.roa
Signing time: Fri 12 Jun 2026 09:51:35 +0000
ROA not before: Fri 12 Jun 2026 09:46:35 +0000
ROA not after: Fri 11 Jun 2027 09:51:35 +0000
asID: 9808
IP address blocks: 43.243.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 09:42:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:cf:63:68:70:16:b4:37:4d:fd:fe:b6:0c:ce:ab:6d:aa:af:6c:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E75349FBEA39CFED65BB280A32055EB716679089
Validity
Not Before: Jun 12 09:46:35 2026 GMT
Not After : Jun 11 09:51:35 2027 GMT
Subject: CN=F41EFD20714DEB41243CB59FC61F7D211C5243F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:91:fd:7b:ab:ac:15:55:80:18:c9:ea:fa:
23:f2:6f:59:ba:6e:90:02:95:65:ab:68:fb:0b:25:
10:cd:c8:19:97:a6:97:9f:09:46:16:27:e3:98:2f:
6c:b1:d6:76:c0:41:2a:18:82:f1:fd:c6:41:62:cc:
e4:a5:c7:71:e5:b8:4d:1b:78:6d:a1:6d:52:99:d9:
40:46:81:50:be:a0:5d:e5:a5:31:ea:fe:3a:8a:01:
e6:fe:42:9f:80:d5:b2:e3:20:18:a0:11:c5:eb:2b:
a6:29:82:c1:d7:98:c9:65:e5:e8:0c:a9:72:30:3b:
fc:1d:23:86:84:87:04:62:19:93:72:89:51:f8:1d:
d1:99:e4:81:c0:2f:7b:4c:f1:f8:3a:d9:a3:ee:f7:
df:ff:d8:ca:d1:75:0b:44:0d:fb:14:c9:55:7d:af:
e7:e2:c7:9a:e5:f5:fb:85:8d:90:cb:2f:e3:33:08:
e9:9b:f1:87:f1:12:7c:2b:a4:a6:f5:94:a8:6e:31:
ef:cd:cc:a8:c0:89:db:e3:62:8c:ff:9f:98:9a:42:
11:88:26:0c:57:bf:3e:a4:8f:a3:45:98:e7:0d:44:
e1:ad:69:85:2b:e2:dd:bb:40:f4:ca:9f:24:30:32:
d0:db:8a:84:c3:7a:aa:e3:23:5b:cc:d6:19:6a:90:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1E:FD:20:71:4D:EB:41:24:3C:B5:9F:C6:1F:7D:21:1C:52:43:F1
X509v3 Authority Key Identifier:
keyid:E7:53:49:FB:EA:39:CF:ED:65:BB:28:0A:32:05:5E:B7:16:67:90:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/E75349FBEA39CFED65BB280A32055EB716679089.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/E75349FBEA39CFED65BB280A32055EB716679089.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1111933397845934097/0/34332e3234332e3132392e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.129.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:a8:53:63:e0:d0:51:8d:af:18:66:c1:07:ca:6a:b3:cd:e2:
93:3e:3b:49:29:8b:22:14:ae:02:ac:dd:40:60:7f:6b:b3:f4:
5f:c5:58:f3:98:c2:3c:f1:cc:ef:61:df:89:0b:66:9d:c7:b4:
00:18:0f:c7:af:e5:7b:1d:bd:d3:e5:99:22:80:52:e1:21:08:
1a:09:3a:4b:fb:f2:16:44:44:b5:fb:2f:05:38:81:9d:fa:89:
ac:82:85:19:9f:30:be:c4:98:b6:af:a7:fd:0c:f6:91:86:84:
eb:6c:9c:69:6a:32:f5:77:cf:30:c2:9c:fd:d6:1f:fc:c7:d8:
69:c1:c9:09:34:f7:84:64:96:db:0b:a8:5b:da:f7:2d:28:25:
29:cf:57:b3:93:a5:56:4e:85:f1:8b:c7:d8:9c:3a:d3:eb:15:
04:c9:8a:78:23:1d:89:2e:b4:45:1b:34:0e:3d:a7:64:3b:2c:
13:be:ee:bd:cd:82:04:18:1c:69:66:74:48:c5:f6:a8:98:32:
d5:1b:42:7d:24:fd:22:49:da:18:1a:ad:45:8d:cd:b7:35:34:
2c:aa:22:94:68:39:b8:b8:44:04:fd:5c:d7:49:7a:a1:cd:35:
79:bc:5d:a3:bb:ce:f9:ae:09:25:e5:95:2a:68:25:76:a6:86:
31:f4:44:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:18:16 2026 by rpki-client