
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234312e3234322e302f32332d3233203d3e2034383038.roa
File: 34332e3234312e3234322e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: sVydZ+GvGDFoPNuzhCTpLN5HOyW0wDG576NjGm+vN2Y=
Subject key identifier: 0D:BA:29:80:A8:EB:86:34:15:04:FE:9A:8F:7E:27:29:F4:5F:1D:BF
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 4ABFCF85C09B84F005CEDD6664C62CE203246FA9
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234312e3234322e302f32332d3233203d3e2034383038.roa
Signing time: Tue 12 May 2026 08:10:05 +0000
ROA not before: Tue 12 May 2026 08:05:05 +0000
ROA not after: Tue 11 May 2027 08:10:05 +0000
asID: 4808
IP address blocks: 43.241.242.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 03:09:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bf:cf:85:c0:9b:84:f0:05:ce:dd:66:64:c6:2c:e2:03:24:6f:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 12 08:05:05 2026 GMT
Not After : May 11 08:10:05 2027 GMT
Subject: CN=0DBA2980A8EB86341504FE9A8F7E2729F45F1DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:d8:91:39:ad:92:19:71:6d:17:a4:28:d4:
c4:c7:47:c6:9e:e9:52:13:99:58:68:dd:e2:de:20:
0c:fd:b3:97:b4:34:82:79:2b:0d:b3:32:5a:12:39:
8c:6e:f2:6d:ec:bf:21:28:e6:7e:bf:87:3f:db:4f:
66:20:02:15:99:f7:8d:e2:7c:be:b5:9a:c5:d8:68:
ef:7d:b5:a4:1e:11:98:d9:ba:a6:7f:83:0e:e0:e4:
dd:54:0a:37:61:03:e4:f1:a2:a2:f5:50:6a:01:81:
9a:4a:ff:e0:32:67:0f:e0:92:80:37:d4:85:13:88:
af:96:bd:61:85:fa:7a:22:ac:f8:bc:9e:05:0a:57:
79:52:1e:6d:b0:a4:21:b4:28:70:2b:60:2c:df:06:
e3:97:a2:eb:1e:18:71:42:cf:42:45:e6:03:fa:84:
1b:ea:fd:95:f7:ba:5a:18:3c:43:26:d7:39:05:1f:
e4:74:e5:f0:ab:83:e6:35:c3:7c:0f:cd:1c:54:c4:
39:73:13:1f:8e:3f:0f:50:4a:13:fb:aa:b6:35:68:
b1:7f:d7:3c:8a:35:f5:89:ed:e0:ec:8c:1b:c0:23:
35:eb:8a:2f:d1:b6:2b:7f:f3:dc:85:06:98:77:1d:
7e:02:db:85:7b:67:6d:52:f4:a0:92:51:39:ac:a7:
b2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BA:29:80:A8:EB:86:34:15:04:FE:9A:8F:7E:27:29:F4:5F:1D:BF
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234312e3234322e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.242.0/23
Signature Algorithm: sha256WithRSAEncryption
60:7a:e5:4c:0a:99:ed:99:53:86:9b:53:38:db:db:8f:41:ec:
6b:81:cf:6c:c1:07:75:39:e9:71:92:98:8d:d5:60:16:04:25:
67:f4:ff:8e:7a:d2:9d:04:39:1f:d2:cc:ce:eb:e8:02:0d:f5:
4e:ca:f7:63:a9:53:19:ac:8f:da:2d:45:25:48:36:a9:b0:eb:
af:24:1d:a5:f3:58:3f:7b:65:ef:d5:0a:2c:02:39:1a:0d:15:
e6:07:13:91:4a:3b:3b:e1:1f:04:99:48:04:5f:d0:47:a5:be:
7d:0d:3a:f8:3f:09:5f:3a:d2:c0:4c:de:2d:29:91:a9:a2:42:
b2:68:29:ff:ae:30:ad:c7:97:4f:dd:1d:a7:b5:ef:9a:ca:d3:
7c:1c:2b:66:49:aa:c2:0c:ea:bf:d4:06:d9:65:98:36:21:eb:
c4:b5:63:3b:3e:ad:40:1d:7b:e6:51:49:80:0d:26:16:85:c2:
2d:33:7b:d1:d0:18:07:d1:64:70:c0:cb:59:26:10:65:45:5b:
df:34:5f:99:91:82:9e:6a:65:b2:59:81:49:5c:7a:34:d3:b1:
2c:dc:b4:f1:7d:80:ad:f5:b9:e5:ce:30:34:e1:89:ef:f2:2b:
62:a8:20:70:bc:c8:67:3b:8d:82:1d:be:60:b2:07:e7:07:c1:
eb:39:4f:0a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUSr/PhcCbhPAFzt1mZMYs4gMkb6kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEw
QkZGNjZCMzAeFw0yNjA1MTIwODA1MDVaFw0yNzA1MTEwODEwMDVaMDMxMTAvBgNV
BAMTKDBEQkEyOTgwQThFQjg2MzQxNTA0RkU5QThGN0UyNzI5RjQ1RjFEQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDu9iROa2SGXFtF6Qo1MTHR8ae
6VITmVho3eLeIAz9s5e0NIJ5Kw2zMloSOYxu8m3svyEo5n6/hz/bT2YgAhWZ943i
fL61msXYaO99taQeEZjZuqZ/gw7g5N1UCjdhA+TxoqL1UGoBgZpK/+AyZw/gkoA3
1IUTiK+WvWGF+noirPi8ngUKV3lSHm2wpCG0KHArYCzfBuOXouseGHFCz0JF5gP6
hBvq/ZX3uloYPEMm1zkFH+R05fCrg+Y1w3wPzRxUxDlzEx+OPw9QShP7qrY1aLF/
1zyKNfWJ7eDsjBvAIzXrii/Rtit/89yFBph3HX4C24V7Z21S9KCSUTmsp7I9AgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUDbopgKjrhjQVBP6aj34nKfRfHb8wHwYDVR0j
BBgwFoAU1WnOSe2UCVUxj3GK6s1tQQv/ZrMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMzMDg1OTA5MjUwODY3My8wL0Q1NjlDRTQ5RUQ5NDA5NTUzMThGNzE4QUVBQ0Q2
RDQxMEJGRjY2QjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRDU2OUNFNDlFRDk0MDk1NTMxOEY3MThBRUFDRDZENDEwQkZGNjZCMy5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2MzMwODU5MDkyNTA4NjczLzAvMzQzMzJlMzIzNDMx
MmUzMjM0MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEASvx8jANBgkqhkiG9w0BAQsFAAOCAQEAYHrlTAqZ7ZlThptTONvbj0Hsa4HP
bMEHdTnpcZKYjdVgFgQlZ/T/jnrSnQQ5H9LMzuvoAg31Tsr3Y6lTGayP2i1FJUg2
qbDrryQdpfNYP3tl79UKLAI5Gg0V5gcTkUo7O+EfBJlIBF/QR6W+fQ06+D8JXzrS
wEzeLSmRqaJCsmgp/64wrceXT90dp7XvmsrTfBwrZkmqwgzqv9QG2WWYNiHrxLVj
Oz6tQB175lFJgA0mFoXCLTN70dAYB9FkcMDLWSYQZUVb3zRfmZGCnmplslmBSVx6
NNOxLNy08X2ArfW55c4wNOGJ7/IrYqggcLzIZzuNgh2+YLIH5wfB6zlPCg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:37:44 2026 by rpki-client