
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e20313531333030.roa
File: 34332e3234382e39362e302f32312d3234203d3e20313531333030.roa (raw, json)
Hash identifier: 9lQhY1UIq3FLiptRI3EXq8KONNhqBq6tdBI9BfGvI8Y=
Subject key identifier: 12:80:1E:02:42:66:7A:5F:9B:A1:13:8A:B4:33:74:8B:23:C2:1B:FA
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 4991C98410F29B6F93D1E01DFD0D04BA44389835
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e20313531333030.roa
Signing time: Wed 22 Jul 2026 06:15:44 +0000
ROA not before: Wed 22 Jul 2026 06:10:44 +0000
ROA not after: Wed 21 Jul 2027 06:15:44 +0000
asID: 151300
IP address blocks: 43.248.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:91:c9:84:10:f2:9b:6f:93:d1:e0:1d:fd:0d:04:ba:44:38:98:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Jul 22 06:10:44 2026 GMT
Not After : Jul 21 06:15:44 2027 GMT
Subject: CN=12801E0242667A5F9BA1138AB433748B23C21BFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:09:bd:13:b9:cc:7e:45:18:f4:dc:de:08:c1:
41:bd:42:82:c4:8e:dc:34:bf:a7:a9:2e:ee:ae:bf:
3b:eb:5a:03:3a:1f:65:e6:52:1d:c9:0d:98:b5:66:
ac:17:4a:57:a6:de:00:ce:2e:ba:e8:95:f9:09:48:
0e:1c:1e:65:b3:e2:d6:8e:00:f5:09:38:84:cf:25:
8a:5a:a1:54:00:68:6a:ac:00:b9:80:ff:64:a6:18:
e1:65:41:3c:77:f6:d5:98:b6:b4:6b:9a:0a:d3:d6:
dc:e7:3a:4b:6b:a5:ea:ac:2b:b3:b5:27:ea:53:9f:
13:7f:ec:57:b0:f2:19:24:ad:4b:98:20:e5:6c:d6:
ae:77:59:05:c8:aa:6f:e6:65:b0:8d:83:e1:86:8b:
bb:e9:d3:97:d2:5a:3a:d7:e8:d5:f6:4c:ee:09:45:
e0:e0:60:88:95:7f:ac:2d:2e:dd:05:f3:83:4c:d4:
ef:cd:4b:37:17:70:d2:e9:e9:83:a1:98:7e:ce:30:
8a:60:e2:79:71:de:9c:d5:51:a9:59:36:88:5c:0c:
29:7c:41:f4:7e:72:ec:65:f6:50:d0:cd:a3:17:d9:
30:bb:63:05:42:f0:48:b1:7a:dc:61:f9:8c:05:ce:
af:bf:06:f7:07:56:fd:b8:8a:87:e1:52:a4:cb:46:
d6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:80:1E:02:42:66:7A:5F:9B:A1:13:8A:B4:33:74:8B:23:C2:1B:FA
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e20313531333030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.96.0/21
Signature Algorithm: sha256WithRSAEncryption
3f:f9:f9:bb:d9:ef:7c:78:01:95:a1:a6:aa:86:3f:d0:9e:d3:
a9:72:ae:fe:d0:0e:1e:0c:1f:8b:93:92:6f:d9:c9:fe:96:1f:
bf:a0:a7:89:20:42:7b:ce:ac:05:7a:d6:99:23:18:63:a0:e1:
3b:6a:b8:4f:3e:35:f0:09:d9:12:8d:9f:88:e9:22:8f:5f:f2:
29:49:a5:94:77:be:b3:80:ee:8d:32:1e:65:2f:07:d7:78:bf:
ec:70:ee:4c:a8:40:b6:90:05:de:a2:3d:4c:0c:44:fb:35:ce:
3a:a9:3e:e1:d6:19:74:ba:76:8c:f6:91:18:e6:b0:19:c3:16:
ae:a5:b6:d1:88:64:cc:38:31:ba:5b:2b:df:48:5f:b2:1b:fe:
f3:26:37:15:91:83:39:1d:a8:1a:df:e1:08:cf:3a:78:f1:de:
25:7e:ba:ac:1c:28:04:f5:77:d0:99:44:96:ff:75:34:f9:56:
a3:ce:a3:49:fe:20:9a:1c:5f:4c:04:b4:d6:15:2f:f5:98:5a:
5a:16:b5:2a:7a:0b:39:79:89:79:c5:2a:89:9c:21:4e:cf:41:
6a:0c:e9:79:0e:e0:04:3b:70:d0:32:c6:f5:bc:82:74:5b:27:
69:3f:66:08:2d:da:ab:39:44:b2:5a:c4:fc:00:1a:40:75:53:
ed:c7:13:cb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:06:21 2026 by rpki-client