
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313531333030.roa
File: 34332e3234382e3131362e302f32322d3234203d3e20313531333030.roa (raw, json)
Hash identifier: GCUOBWl+V+XCnXbx6rdSC8yUM/CpYntIvzJHuCjiBHg=
Subject key identifier: 5B:2F:03:E0:B9:6D:44:D7:CF:04:43:92:9D:92:3A:16:CE:61:20:C9
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 24B4EF6F50AAC2EBAF95A833EBF19087453943ED
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313531333030.roa
Signing time: Wed 22 Jul 2026 06:15:44 +0000
ROA not before: Wed 22 Jul 2026 06:10:44 +0000
ROA not after: Wed 21 Jul 2027 06:15:44 +0000
asID: 151300
IP address blocks: 43.248.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:b4:ef:6f:50:aa:c2:eb:af:95:a8:33:eb:f1:90:87:45:39:43:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Jul 22 06:10:44 2026 GMT
Not After : Jul 21 06:15:44 2027 GMT
Subject: CN=5B2F03E0B96D44D7CF0443929D923A16CE6120C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d1:c4:52:d2:1c:59:91:b4:97:c9:31:fa:55:
1d:3d:fe:3f:29:99:98:22:99:40:03:80:b6:21:36:
49:5b:ee:09:b9:5b:12:f4:4a:ac:2c:e2:47:a5:af:
21:2e:31:19:71:70:09:66:6b:1f:a8:73:6e:7e:f0:
21:9d:f3:e4:50:b6:da:5b:5c:5c:2e:84:10:61:e1:
28:7a:e8:22:9d:04:65:eb:9f:7b:ba:19:71:98:a4:
ee:2f:79:6d:64:2f:22:56:ff:74:2e:80:9c:aa:de:
aa:78:84:7e:6f:a7:14:ab:09:78:9b:4a:fc:a1:4e:
3c:9e:30:05:f4:35:0c:5a:2d:3f:eb:42:2b:6f:af:
99:8c:3e:e6:e1:65:3f:9e:01:24:68:e9:5d:d7:0e:
fb:87:ba:1f:2a:b0:e0:96:1e:f9:fc:4c:90:45:f7:
e9:58:a1:cf:02:1b:4c:e5:79:7d:09:01:f4:72:48:
83:8c:8c:88:6e:17:8f:52:0e:9d:58:46:56:f5:36:
35:9a:63:9c:a0:eb:3e:7f:fe:ac:38:f8:15:fe:71:
31:4c:1f:05:00:fd:ba:43:9e:d9:35:4c:2c:a3:44:
2c:2e:c8:10:e2:63:fc:15:bb:0b:80:19:d1:71:08:
aa:ad:75:d4:e0:5f:39:bd:5a:ff:15:6c:1b:af:46:
22:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2F:03:E0:B9:6D:44:D7:CF:04:43:92:9D:92:3A:16:CE:61:20:C9
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313531333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.116.0/22
Signature Algorithm: sha256WithRSAEncryption
57:ad:de:a2:99:8e:20:ac:1a:53:f2:f7:a8:bc:bd:93:d0:79:
e7:10:0a:d5:13:07:ce:fa:80:3b:e8:46:5c:b7:5d:79:6b:42:
1c:40:05:4a:a9:01:fd:36:ac:b8:7d:33:ac:fb:34:a1:bd:1e:
6e:a3:fb:a9:8c:4b:6c:9d:84:53:9a:9a:af:78:7a:09:63:3e:
c4:db:68:43:82:fc:8f:28:ee:5e:1f:e8:05:fa:7b:0f:17:e0:
da:c3:02:75:f8:cd:d2:28:be:4b:c5:35:0b:26:cb:45:83:17:
a9:2d:b2:fa:b2:f8:0e:b7:39:72:b1:6e:b6:8a:98:14:9a:90:
94:dc:3e:01:22:df:6b:16:65:c9:64:9e:a9:b2:89:ad:f6:1a:
2b:1c:90:ad:c6:cd:cf:64:79:f8:04:6e:8e:2f:80:d8:69:c9:
10:5e:e9:ff:a4:1c:ce:d0:39:23:2d:5b:37:35:ad:b3:ed:d7:
3b:6c:bc:de:0d:bd:83:9d:24:fb:46:60:f6:7f:c0:4d:c9:33:
b8:0d:9a:8f:6f:03:eb:41:57:4c:f5:16:46:ab:71:3a:ae:75:
c9:9e:25:6b:74:a3:c4:2b:3a:82:33:c9:82:cf:82:ac:bb:dc:
c1:ca:61:8b:4f:91:34:45:07:4b:8a:8c:ec:a5:a7:32:c9:52:
5e:00:d1:7a
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJLTvb1Cqwuuvlagz6/GQh0U5Q+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFG
RUJCQkJCNjAeFw0yNjA3MjIwNjEwNDRaFw0yNzA3MjEwNjE1NDRaMDMxMTAvBgNV
BAMTKDVCMkYwM0UwQjk2RDQ0RDdDRjA0NDM5MjlEOTIzQTE2Q0U2MTIwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0cRS0hxZkbSXyTH6VR09/j8p
mZgimUADgLYhNklb7gm5WxL0Sqws4kelryEuMRlxcAlmax+oc25+8CGd8+RQttpb
XFwuhBBh4Sh66CKdBGXrn3u6GXGYpO4veW1kLyJW/3QugJyq3qp4hH5vpxSrCXib
SvyhTjyeMAX0NQxaLT/rQitvr5mMPubhZT+eASRo6V3XDvuHuh8qsOCWHvn8TJBF
9+lYoc8CG0zleX0JAfRySIOMjIhuF49SDp1YRlb1NjWaY5yg6z5//qw4+BX+cTFM
HwUA/bpDntk1TCyjRCwuyBDiY/wVuwuAGdFxCKqtddTgXzm9Wv8VbBuvRiI1AgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUWy8D4LltRNfPBEOSnZI6Fs5hIMkwHwYDVR0j
BBgwFoAUluk0T5FoNB8hZwikN/uYAf67u7YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NzQzMzc4OTc4Njc1MDk3Ny8wLzk2RTkzNDRGOTE2ODM0MUYyMTY3MDhBNDM3RkI5
ODAxRkVCQkJCQjYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4MDFGRUJCQkJCNi5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTEwOTc0MzM3ODk3ODY3NTA5NzcvMC8zNDMzMmUzMjM0
MzgyZTMxMzEzNjJlMzAyZjMyMzIyZDMyMzQyMDNkM2UyMDMxMzUzMTMzMzAzMC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAiv4dDANBgkqhkiG9w0BAQsFAAOCAQEAV63eopmOIKwaU/L3qLy9
k9B55xAK1RMHzvqAO+hGXLddeWtCHEAFSqkB/TasuH0zrPs0ob0ebqP7qYxLbJ2E
U5qar3h6CWM+xNtoQ4L8jyjuXh/oBfp7Dxfg2sMCdfjN0ii+S8U1CybLRYMXqS2y
+rL4Drc5crFutoqYFJqQlNw+ASLfaxZlyWSeqbKJrfYaKxyQrcbNz2R5+ARuji+A
2GnJEF7p/6QcztA5Iy1bNzWts+3XO2y83g29g50k+0Zg9n/ATckzuA2aj28D60FX
TPUWRqtxOq51yZ4la3SjxCs6gjPJgs+CrLvcwcphi0+RNEUHS4qM7KWnMslSXgDR
eg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:06:20 2026 by rpki-client