
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35302e302f32342d3234203d3e2034313334.roa
File: 34332e3234312e35302e302f32342d3234203d3e2034313334.roa (raw, json)
Hash identifier: ejDqYuG5U9iWOeK469ibXeicCUxn3Y8oEY3wRwa8pK0=
Subject key identifier: 3D:79:16:1D:C2:91:C9:97:41:9F:7A:15:BE:65:EC:28:0F:C1:61:DD
Certificate issuer: /CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Certificate serial: 3E50E4DDCC963E751F5C6DE225BFC5CE162AA9B4
Authority key identifier: 71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35302e302f32342d3234203d3e2034313334.roa
Signing time: Mon 28 Sep 2026 01:00:37 +0000
ROA not before: Mon 28 Sep 2026 00:55:37 +0000
ROA not after: Mon 27 Sep 2027 01:00:37 +0000
asID: 4134
IP address blocks: 43.241.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 12 Oct 2026 11:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:50:e4:dd:cc:96:3e:75:1f:5c:6d:e2:25:bf:c5:ce:16:2a:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E
Validity
Not Before: Sep 28 00:55:37 2026 GMT
Not After : Sep 27 01:00:37 2027 GMT
Subject: CN=3D79161DC291C997419F7A15BE65EC280FC161DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:74:d7:b6:ac:24:ab:1b:7e:82:ad:2f:d1:
47:00:62:3b:66:0d:70:2f:30:f8:db:03:62:19:4e:
a6:19:fb:97:29:58:7b:a4:31:18:56:02:f9:30:40:
87:c7:53:78:ff:0f:78:ce:b7:26:c1:19:9b:c8:77:
56:b3:67:b7:d3:66:7e:c9:46:dd:99:02:af:5f:e3:
39:f7:02:62:1e:a0:e3:3e:f7:7f:93:6f:fb:a0:d5:
80:e2:f4:da:62:61:77:24:cb:34:4d:af:e9:31:4c:
e4:ec:89:6e:c5:28:ed:22:58:aa:a8:8d:27:75:a6:
0f:8f:1a:a0:44:4d:01:3d:b8:5d:5b:5a:65:46:3d:
f8:99:4d:b1:ba:81:28:8d:ed:16:03:e0:55:92:f3:
4c:3d:74:0d:e8:30:1a:90:85:a4:3c:67:55:e2:44:
5a:22:04:65:9c:66:0a:ec:0b:db:a6:2a:1d:f0:c6:
8d:7f:ee:8f:8d:06:03:8b:4e:4c:51:97:28:76:41:
32:e7:03:f4:d9:b6:4e:c5:6e:bb:a4:fd:be:fc:81:
55:00:bd:a3:dc:6d:07:dd:75:0f:bb:d5:0f:e6:97:
6d:dd:36:23:2f:f9:69:85:cf:80:70:4a:59:a4:49:
8a:ec:46:ca:2a:14:bf:7b:8c:70:db:9b:b0:82:8c:
99:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:79:16:1D:C2:91:C9:97:41:9F:7A:15:BE:65:EC:28:0F:C1:61:DD
X509v3 Authority Key Identifier:
keyid:71:C9:BF:E4:C8:FD:7E:77:7A:1C:9E:55:DF:A6:0A:3A:C2:9A:25:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/71C9BFE4C8FD7E777A1C9E55DFA60A3AC29A254E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394785795/0/34332e3234312e35302e302f32342d3234203d3e2034313334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.50.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:db:eb:c6:22:2d:5a:78:3d:6a:0c:d7:bb:ec:52:f1:28:97:
99:01:ad:d5:de:57:94:30:20:b4:15:bd:8c:e6:11:21:1b:42:
e9:2a:84:e1:ed:b7:e1:c1:0f:bc:3b:68:e7:74:f5:a1:d6:e9:
94:1d:08:24:71:98:df:14:41:97:5c:da:5d:1e:41:c3:7a:80:
0e:02:df:a1:80:a5:b1:5f:ef:6c:da:70:a8:51:5e:2d:22:a1:
74:e8:45:c3:f2:d2:cd:5e:39:04:90:f1:43:5c:d2:e4:30:ee:
a3:da:b8:ac:81:12:ff:a8:0d:2c:1c:05:27:3d:3a:22:5c:ea:
0f:90:62:cd:d5:ae:b2:1e:75:2c:7a:06:68:3d:b3:1d:55:41:
05:31:40:8a:28:67:4d:5d:93:c6:b3:44:a9:d8:94:d7:21:dc:
2d:97:f8:a6:74:0b:33:37:00:e9:5a:81:3a:81:1b:46:ed:7f:
0a:4a:8a:7e:9e:35:15:46:de:e2:60:6f:34:35:89:d2:1f:10:
1e:d1:1b:4e:1c:a6:96:8d:77:bb:ac:07:66:e5:b0:97:4f:51:
13:56:59:e6:55:0c:c7:e3:80:6e:db:43:42:e6:80:61:a3:23:
da:5d:f7:e8:6b:da:b7:e1:f4:9a:c8:19:ac:08:c5:5e:ba:16:
6b:b6:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 22:56:15 2026 by rpki-client