
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234332e3133382e302f32332d3233203d3e2034383038.roa
File: 34332e3234332e3133382e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: UFc1MA45ujfU5YItyaYkZq1sEQBdwiNu5jfwq/iSPDU=
Subject key identifier: F8:10:38:15:B6:86:10:06:02:F7:B1:78:9D:06:ED:8F:25:A3:2A:F3
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 5ECC6FECB889B69956E0587F696DE5B3936B79E0
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234332e3133382e302f32332d3233203d3e2034383038.roa
Signing time: Wed 13 May 2026 08:00:38 +0000
ROA not before: Wed 13 May 2026 07:55:38 +0000
ROA not after: Wed 12 May 2027 08:00:38 +0000
asID: 4808
IP address blocks: 43.243.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 08:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:cc:6f:ec:b8:89:b6:99:56:e0:58:7f:69:6d:e5:b3:93:6b:79:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 13 07:55:38 2026 GMT
Not After : May 12 08:00:38 2027 GMT
Subject: CN=F8103815B686100602F7B1789D06ED8F25A32AF3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:01:f4:2c:a6:eb:90:67:54:b8:41:fd:3b:b5:
9a:10:c6:fc:0d:bc:9a:e8:d4:93:8e:18:aa:bd:78:
4c:c0:82:5b:83:da:74:e1:00:cd:11:92:6e:dd:b5:
5d:ac:35:b7:91:5a:8c:cb:b3:8d:a4:c4:e9:45:e0:
15:11:ca:95:c0:fc:fb:b3:be:08:f8:b1:f4:b4:56:
de:e6:85:b1:76:66:2a:4c:b9:42:b4:bf:c0:20:3f:
70:d9:2c:f8:0b:48:1d:11:2d:28:fb:db:6a:e9:ff:
95:ac:be:94:f5:1b:bc:51:2d:87:60:91:8d:0c:33:
ca:29:f5:a9:a1:05:ee:c8:4b:98:9b:62:c5:92:80:
77:6f:68:d7:3b:67:1c:69:96:b8:94:ad:72:30:e0:
13:1e:1b:2d:6f:9c:6e:d5:00:d1:dc:2b:de:37:24:
1e:43:be:6a:12:de:9b:1c:35:18:08:f2:33:82:ca:
eb:71:73:8b:18:0e:12:20:39:c5:09:be:8e:63:d9:
92:ca:b7:90:b3:93:c0:e3:f2:01:71:06:ce:5f:1d:
14:7c:58:af:90:1e:03:47:3c:3c:bb:8a:31:eb:ad:
13:e4:92:ed:91:4e:23:68:39:a8:3d:13:58:c7:e4:
ee:01:a2:48:6e:d1:d1:04:95:17:63:c8:6b:10:b3:
be:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:10:38:15:B6:86:10:06:02:F7:B1:78:9D:06:ED:8F:25:A3:2A:F3
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3234332e3133382e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.243.138.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:bf:78:a6:67:41:a8:ba:d3:30:40:4c:3d:29:2e:3b:3d:fe:
c9:eb:f9:5c:a1:15:a8:6c:3a:15:1a:7d:e3:c4:60:6a:0b:e6:
20:5d:2a:40:ec:1d:51:ce:e1:32:e8:34:15:3f:55:4c:8d:38:
00:e0:35:72:cf:70:42:1a:af:c2:31:55:57:b8:e3:b2:62:d2:
a8:fa:ee:9a:11:d4:54:cd:b6:39:34:39:d1:5f:5b:a8:3b:65:
32:17:66:ff:69:c2:c4:25:94:73:98:af:c5:15:c1:69:d1:ab:
12:87:11:b0:b6:61:01:c6:85:b1:17:14:c8:cd:74:75:7e:7b:
7c:91:f6:49:ef:11:84:f2:dc:c3:28:c2:6d:0d:e0:63:45:ef:
d7:97:f5:0b:8d:69:b4:7a:42:6b:f7:d6:7f:fa:89:a3:7b:da:
3d:6f:eb:40:f7:4e:4c:0e:b9:b8:f3:80:ad:99:63:5d:54:ca:
1e:75:f9:3c:9b:22:7c:6d:46:50:c1:3e:cb:27:32:6c:68:5e:
fe:7b:98:86:38:ad:6d:ee:d5:8b:2b:3b:e9:a8:0a:ef:6b:c7:
9e:76:16:f4:76:a1:e9:3d:b8:82:46:98:6a:15:c3:45:fb:3e:
f8:37:4a:2f:11:d3:bc:fd:f6:a2:63:e4:49:0d:1e:14:59:eb:
3f:8f:87:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:33:07 2026 by rpki-client