
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233362e302f32342d3234203d3e203234313338.roa
File: 34332e3232362e3233362e302f32342d3234203d3e203234313338.roa (raw, json)
Hash identifier: 0hYQYQKgxk0JiPnbprIcFcNzJylbmw1iu42hE0pOWZE=
Subject key identifier: 2B:25:2A:D5:40:CB:70:1A:1E:AA:1A:18:6E:53:74:78:A4:94:D4:64
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 2F7F35D49B88205EDF47D48A1DBA4426C788459C
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233362e302f32342d3234203d3e203234313338.roa
Signing time: Thu 04 Jun 2026 08:59:15 +0000
ROA not before: Thu 04 Jun 2026 08:54:15 +0000
ROA not after: Thu 03 Jun 2027 08:59:15 +0000
asID: 24138
IP address blocks: 43.226.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 14:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:7f:35:d4:9b:88:20:5e:df:47:d4:8a:1d:ba:44:26:c7:88:45:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:54:15 2026 GMT
Not After : Jun 3 08:59:15 2027 GMT
Subject: CN=2B252AD540CB701A1EAA1A186E537478A494D464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:c9:b8:fd:fb:bd:d8:fa:9e:8a:87:47:36:
a8:51:ee:7f:8c:1f:a2:b5:57:e9:ae:15:0b:36:aa:
cf:6b:60:dc:05:7a:e0:e2:41:75:db:9c:d7:d6:3f:
65:fd:15:db:99:e7:31:17:43:fa:33:b4:03:90:79:
95:a4:94:1c:34:4e:34:ab:c5:12:35:71:ff:6b:80:
15:89:90:ef:f8:41:71:8e:2a:21:94:34:38:64:50:
af:df:34:1b:3c:40:f4:df:ca:10:52:0c:cf:03:12:
2d:e4:d9:bd:c7:c7:cb:3e:9e:c8:71:50:c8:e6:ea:
0c:df:7a:88:85:5a:0a:f4:bf:c7:d2:a9:3c:7b:3e:
35:28:e7:bf:66:3d:60:5e:3d:39:d6:7a:96:02:ef:
f5:27:80:46:8c:d1:07:7b:61:a9:eb:2b:1b:4f:2f:
8e:00:cc:e5:44:a9:01:69:b0:18:26:53:d2:34:5f:
c7:fb:f6:7a:fd:90:50:db:d3:b5:88:87:5c:74:3f:
45:ad:60:66:86:b3:72:83:99:36:43:ea:1e:4c:0c:
e1:59:e6:41:97:d5:b4:d6:15:ff:5c:cd:6a:ae:55:
45:92:e7:b1:dc:33:27:36:5b:d6:84:1f:51:c0:8b:
2d:a6:de:21:24:5e:89:eb:82:9a:ad:c0:e4:49:e6:
8a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:25:2A:D5:40:CB:70:1A:1E:AA:1A:18:6E:53:74:78:A4:94:D4:64
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233362e302f32342d3234203d3e203234313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.236.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ca:cf:72:f4:b0:7a:ae:d2:d3:29:3a:01:bc:9d:94:6c:85:
8c:15:92:8b:2f:27:06:ff:ed:c3:91:8d:ba:f1:e3:6e:e8:93:
56:28:5e:9e:48:20:50:51:25:c5:19:f9:2b:98:ed:5b:04:bb:
2a:95:1f:69:e8:0e:8c:12:e0:83:d6:ea:c5:a7:df:85:2e:e0:
41:3b:fb:81:42:2c:22:4d:fd:28:92:97:5c:1c:30:f5:07:e9:
53:e3:11:5c:26:c6:8f:43:26:aa:94:19:a0:8f:76:65:4e:d3:
48:4b:6a:77:bb:6d:2f:e2:ba:bb:32:27:23:14:fc:aa:0a:b0:
a1:c0:5c:01:c5:1b:df:3a:23:cd:88:7e:bf:80:f4:a4:2e:06:
8e:3c:a5:c3:20:ba:e8:0e:a5:62:86:5d:af:1d:08:2a:9f:cf:
20:b2:5c:60:a5:45:f8:17:a8:99:e8:1f:6d:99:59:16:00:01:
a9:f7:04:fb:f3:ec:da:0f:a2:d6:71:1c:ee:be:de:bd:b1:77:
98:cd:c4:1a:b7:56:5a:6f:1f:ff:10:80:6f:24:f3:33:04:e5:
e9:0b:b4:4a:8f:63:53:98:87:ab:ad:f5:39:15:57:84:98:ae:
98:8e:b6:20:84:99:24:36:71:99:fd:60:5f:41:07:4f:ef:2c:
7d:d5:18:09
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUL3811JuIIF7fR9SKHbpEJseIRZwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwODU0MTVaFw0yNzA2MDMwODU5MTVaMDMxMTAvBgNV
BAMTKDJCMjUyQUQ1NDBDQjcwMUExRUFBMUExODZFNTM3NDc4QTQ5NEQ0NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5sMm4/fu92PqeiodHNqhR7n+M
H6K1V+muFQs2qs9rYNwFeuDiQXXbnNfWP2X9FduZ5zEXQ/oztAOQeZWklBw0TjSr
xRI1cf9rgBWJkO/4QXGOKiGUNDhkUK/fNBs8QPTfyhBSDM8DEi3k2b3Hx8s+nshx
UMjm6gzfeoiFWgr0v8fSqTx7PjUo579mPWBePTnWepYC7/UngEaM0Qd7YanrKxtP
L44AzOVEqQFpsBgmU9I0X8f79nr9kFDb07WIh1x0P0WtYGaGs3KDmTZD6h5MDOFZ
5kGX1bTWFf9czWquVUWS57HcMyc2W9aEH1HAiy2m3iEkXonrgpqtwORJ5oqTAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUKyUq1UDLcBoeqhoYblN0eKSU1GQwHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTExMjcyNDMzMTczNTAyMzYzMy8wLzM0MzMyZTMyMzIz
NjJlMzIzMzM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNDMxMzMzOC5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEACvi7DANBgkqhkiG9w0BAQsFAAOCAQEAi8rPcvSweq7S0yk6AbydlGyF
jBWSiy8nBv/tw5GNuvHjbuiTVihenkggUFElxRn5K5jtWwS7KpUfaegOjBLgg9bq
xaffhS7gQTv7gUIsIk39KJKXXBww9QfpU+MRXCbGj0MmqpQZoI92ZU7TSEtqd7tt
L+K6uzInIxT8qgqwocBcAcUb3zojzYh+v4D0pC4GjjylwyC66A6lYoZdrx0IKp/P
ILJcYKVF+BeomegfbZlZFgABqfcE+/Ps2g+i1nEc7r7evbF3mM3EGrdWWm8f/xCA
byTzMwTl6Qu0So9jU5iHq631ORVXhJiumI62IISZJDZxmf1gX0EHT+8sfdUYCQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:13:21 2026 by rpki-client