
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139342e302e302f31362d3234203d3e20313335363239.roa
File: 34332e3139342e302e302f31362d3234203d3e20313335363239.roa (raw, json)
Hash identifier: 95iB+8uqWou+9I1ynRhLJfQ5Pk5tuGptm5ILolxrRw8=
Subject key identifier: 26:D6:88:B6:B7:91:B4:CB:E9:3B:4C:80:D7:02:82:E0:C8:C6:0B:27
Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial: 463F81FDAB8D274A96147DA6961A70403B3E9782
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139342e302e302f31362d3234203d3e20313335363239.roa
Signing time: Wed 18 Mar 2026 07:49:42 +0000
ROA not before: Wed 18 Mar 2026 07:44:42 +0000
ROA not after: Wed 17 Mar 2027 07:49:42 +0000
asID: 135629
IP address blocks: 43.194.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 27 Mar 2026 17:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:3f:81:fd:ab:8d:27:4a:96:14:7d:a6:96:1a:70:40:3b:3e:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
Validity
Not Before: Mar 18 07:44:42 2026 GMT
Not After : Mar 17 07:49:42 2027 GMT
Subject: CN=26D688B6B791B4CBE93B4C80D70282E0C8C60B27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f9:cf:95:1e:31:f8:fd:ac:28:cb:66:89:38:
9a:55:c8:84:18:b3:77:52:15:72:b7:a4:d7:ce:d8:
ca:24:e4:2b:cf:c3:14:cc:ce:81:64:5f:74:d8:33:
4f:5d:b0:7f:7b:8f:31:f4:ae:d0:ba:9d:22:8e:9a:
2d:3c:f7:36:da:08:10:59:81:db:48:82:fd:4b:4a:
e1:e8:b7:83:e5:d0:00:f9:be:0f:61:2e:07:8b:f6:
fb:9a:ca:c2:a2:ab:40:c1:b3:74:0a:c0:55:d6:bf:
d1:97:0c:19:62:9a:62:a1:4d:98:0d:d8:8e:48:ed:
a9:b2:a2:8d:f3:fb:0b:2d:1e:3a:44:ac:c6:86:97:
66:fb:ec:3e:37:96:5f:b5:ef:5d:03:81:93:f5:19:
90:a2:d4:96:f2:ec:e2:33:6c:42:a4:c7:ab:8f:05:
0f:0a:ce:6b:27:1f:09:8d:2a:58:86:91:41:68:c2:
65:11:15:37:2a:07:8e:5c:ae:44:e5:cf:d2:d2:cb:
bc:eb:a0:66:37:d1:8a:93:d1:44:99:e9:c7:71:54:
8f:5a:f8:1e:d8:69:e3:48:48:4d:75:ce:e1:47:fe:
3b:c6:08:0b:4c:88:83:4d:a7:e2:d4:62:18:63:c8:
69:c5:9c:14:7b:1a:1b:7b:50:e6:be:73:8d:f4:47:
9e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:D6:88:B6:B7:91:B4:CB:E9:3B:4C:80:D7:02:82:E0:C8:C6:0B:27
X509v3 Authority Key Identifier:
keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139342e302e302f31362d3234203d3e20313335363239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.194.0.0/16
Signature Algorithm: sha256WithRSAEncryption
5f:a4:05:83:34:3b:5f:8b:2f:c1:5b:eb:9d:10:10:19:5d:ce:
f5:44:d3:27:46:96:61:5f:25:20:44:18:d2:92:59:2b:65:43:
16:65:11:c1:ae:6e:55:21:23:25:9e:63:28:c3:0d:8e:22:40:
fe:03:92:d2:24:c7:b0:8b:eb:56:fc:b1:c7:31:ed:f4:9f:e0:
0f:2b:ac:48:ef:3b:38:c7:9c:c0:b5:7c:38:be:bb:d6:74:68:
21:30:20:83:e6:6e:c7:3b:1c:e2:6b:f8:c0:72:82:90:c5:24:
78:a4:a2:31:61:35:17:b4:7c:27:e4:d7:9e:6b:ac:63:ea:1d:
b4:50:08:62:42:39:6c:a8:7c:a6:55:e4:9c:a7:d8:27:cc:f4:
96:f8:9a:5e:3b:12:fa:e5:65:61:25:1a:eb:fe:00:49:a4:02:
64:cf:64:d7:a6:f5:34:8f:16:84:dc:8a:38:88:d4:33:da:16:
53:23:9d:83:91:09:fd:f1:ad:23:2b:c2:9b:d1:5d:c1:0f:a5:
f5:6a:f1:68:79:b4:ea:4d:0c:9e:f4:23:a2:e8:c4:08:76:64:
58:68:a4:1f:27:a5:4c:61:00:fc:0f:bc:f2:ce:ec:a8:33:e0:
07:64:08:d0:7f:e1:34:f8:9f:09:0e:3d:fb:1b:42:c6:10:d7:
3d:27:ba:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 00:19:03 2026 by rpki-client