
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313338393530.roa
File: 34332e3235352e38342e302f32322d3232203d3e20313338393530.roa (raw, json)
Hash identifier: a2Wtq/3TcYRc+XiTZBslYW32YNerbDjwwVQMQfkNp7M=
Subject key identifier: 3C:42:5E:86:5D:54:CA:CF:C1:9C:5F:89:A7:00:58:43:A2:E7:B1:BB
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 1018760E964CC70A129702EED624381527366A96
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313338393530.roa
Signing time: Sun 28 Jun 2026 13:55:06 +0000
ROA not before: Sun 28 Jun 2026 13:50:06 +0000
ROA not after: Sun 27 Jun 2027 13:55:06 +0000
asID: 138950
IP address blocks: 43.255.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:18:76:0e:96:4c:c7:0a:12:97:02:ee:d6:24:38:15:27:36:6a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:50:06 2026 GMT
Not After : Jun 27 13:55:06 2027 GMT
Subject: CN=3C425E865D54CACFC19C5F89A7005843A2E7B1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:7e:72:0a:70:3a:f2:26:96:a0:dd:1a:02:
3c:c6:1f:d7:06:5f:b7:5d:c0:20:05:d4:a2:0c:c0:
a5:ca:b1:bd:6f:80:0b:ea:12:be:39:da:11:88:a5:
99:5b:f9:ee:16:2e:b5:b9:ba:21:12:ba:53:fe:c7:
39:c7:83:1f:a2:46:ee:6c:ff:9d:5c:e1:48:38:31:
7f:0f:04:8d:60:a4:21:24:4d:d1:1d:e1:bb:44:da:
bc:62:e8:e0:81:5f:19:eb:d7:5f:49:c4:f4:83:48:
e2:91:aa:3e:bd:d0:96:bd:66:fe:ae:a2:86:22:7e:
72:e8:bc:3e:13:1e:2a:dd:b9:67:2e:ec:0c:40:d1:
0e:28:60:2f:b1:d1:a5:09:42:03:bd:9f:ee:88:c0:
cc:7e:18:1a:94:22:5c:09:04:93:ae:6a:7e:c5:a2:
09:99:dc:1f:3a:1e:88:25:ad:fc:af:ff:be:21:43:
6b:c0:09:94:2c:7f:e5:64:73:35:cc:b8:59:cd:23:
6e:92:83:54:30:a2:27:ac:2c:27:be:f5:e5:80:52:
8c:c3:54:e0:dd:10:78:a1:ac:d9:f6:54:ac:c7:bd:
95:be:e8:df:d5:19:0d:93:d2:08:01:11:0c:7c:77:
4d:8d:42:ab:c8:b7:72:ee:61:f8:43:36:34:55:0e:
94:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:42:5E:86:5D:54:CA:CF:C1:9C:5F:89:A7:00:58:43:A2:E7:B1:BB
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313338393530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.84.0/22
Signature Algorithm: sha256WithRSAEncryption
08:ee:18:9f:8f:5b:56:c6:27:c7:84:19:b2:e4:ea:cf:d2:ab:
ae:e1:ef:36:c8:f9:42:a9:3c:d5:7f:b3:bc:49:ee:5f:6e:de:
c4:73:e3:27:91:57:73:4f:88:4e:8b:5a:86:8e:46:0a:69:dd:
cf:9e:6d:22:d4:d8:3c:f4:93:a5:22:0f:31:4d:26:04:11:95:
9f:89:38:3d:5a:0d:f3:eb:93:f5:2a:9c:73:1e:cd:18:bf:2a:
93:e9:14:c6:49:e2:89:c0:17:22:5e:f7:71:f9:ff:19:57:78:
c5:b9:b3:d9:7e:08:59:50:c8:94:da:43:6d:0f:7c:52:02:2d:
3e:b4:91:bb:df:aa:0f:82:ad:77:c9:2d:8b:de:54:eb:5c:42:
db:19:3c:4b:60:57:88:8d:34:e0:85:1f:ec:47:8a:ee:43:73:
1d:e7:a0:c2:69:f7:6b:61:90:13:8d:b9:bd:29:b0:c2:06:22:
4c:ab:e9:54:e3:9c:a2:ce:7e:f3:c0:ac:fe:18:db:a7:5d:be:
be:29:da:af:a6:9a:57:24:41:88:c3:9c:3d:03:da:b3:c9:e4:
27:bb:7f:34:d6:a0:99:1a:9d:6d:ad:10:60:c1:1f:b5:64:71:
6c:e4:dd:23:44:e1:74:b7:4d:9e:3a:84:36:ca:95:27:c8:76:
7f:a2:3d:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:03 2026 by rpki-client