
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098515682171027457/0/34332e3234372e38342e302f32322d3232203d3e203539303834.roa
File: 34332e3234372e38342e302f32322d3232203d3e203539303834.roa (raw, json)
Hash identifier: UTsMLFBIg5eNtUqx8ENV+v7m0qdLL86FBpiVlkFAHww=
Subject key identifier: 7D:63:E2:BD:18:DF:DF:31:62:3D:EC:36:1F:B2:93:8D:1A:58:3B:51
Certificate issuer: /CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Certificate serial: 58A724BCA284225379D2F589FB425A70F407FA80
Authority key identifier: 4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/34332e3234372e38342e302f32322d3232203d3e203539303834.roa
Signing time: Mon 20 Apr 2026 07:50:33 +0000
ROA not before: Mon 20 Apr 2026 07:45:33 +0000
ROA not after: Mon 19 Apr 2027 07:50:33 +0000
asID: 59084
IP address blocks: 43.247.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:a7:24:bc:a2:84:22:53:79:d2:f5:89:fb:42:5a:70:f4:07:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EC27FCC44D433FABCCB17301446A57C3578CD57
Validity
Not Before: Apr 20 07:45:33 2026 GMT
Not After : Apr 19 07:50:33 2027 GMT
Subject: CN=7D63E2BD18DFDF31623DEC361FB2938D1A583B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:38:da:ee:2e:58:95:ec:62:56:4d:4c:92:74:
ef:4d:dd:1a:39:15:d3:90:36:9e:f0:1e:70:33:b6:
cb:cf:8c:81:06:40:6a:e9:18:4a:e7:6f:c1:c5:8b:
19:5e:c8:ed:5a:8e:c4:d0:9f:38:a2:5f:93:94:6c:
44:4e:e0:22:ff:72:20:87:55:c8:39:51:e6:1d:04:
1a:2e:f7:b6:ba:2a:ea:c5:ac:cd:d6:4b:e7:cd:af:
d5:ab:32:86:be:80:d2:af:7a:fc:e3:66:8a:d0:ac:
bf:2e:c0:3c:c7:5c:d6:bc:ae:80:3b:eb:59:4f:7f:
90:d9:54:86:42:10:ef:28:e6:51:70:3b:1a:4d:5d:
b6:6d:fb:db:4e:11:f4:aa:65:ce:09:41:75:fc:0a:
f5:fa:2e:bf:c0:ec:9f:ee:ec:44:5b:2b:36:af:34:
5d:01:7d:c7:62:08:6c:89:6f:65:1e:db:df:8d:05:
91:1c:78:8e:a2:8f:58:a1:38:66:d0:42:3b:58:63:
6b:72:9a:59:7a:28:31:5b:08:3a:15:be:8c:6c:0b:
ab:b6:b1:84:f9:28:cc:cd:a7:4f:65:44:13:88:98:
33:38:cc:3a:57:ba:53:fc:7b:d0:6e:84:5c:a3:af:
dc:46:63:27:c6:a5:5f:5a:14:c4:a0:ed:ff:7e:0a:
e4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:63:E2:BD:18:DF:DF:31:62:3D:EC:36:1F:B2:93:8D:1A:58:3B:51
X509v3 Authority Key Identifier:
keyid:4E:C2:7F:CC:44:D4:33:FA:BC:CB:17:30:14:46:A5:7C:35:78:CD:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/4EC27FCC44D433FABCCB17301446A57C3578CD57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4EC27FCC44D433FABCCB17301446A57C3578CD57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098515682171027457/0/34332e3234372e38342e302f32322d3232203d3e203539303834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
73:0c:4f:0a:f8:a1:2c:ad:ca:ab:20:89:bf:86:d7:65:99:6f:
ef:61:9e:c9:e0:ca:dc:24:3f:9d:d0:30:a2:6a:5c:d3:47:2f:
ac:94:59:c3:36:c6:74:1e:3a:d4:06:89:02:c2:d3:8b:66:fd:
16:08:4b:5b:a5:cf:ba:02:67:27:3c:69:f3:a3:5f:e8:87:41:
ed:ff:4b:73:29:70:d9:89:ab:33:33:55:81:73:d5:6b:c8:d8:
d7:22:3c:d9:b6:ce:04:26:db:1f:6d:59:12:2d:78:ba:84:45:
61:98:ef:5e:9f:4c:67:01:b0:50:46:89:b9:68:c2:fc:f6:a9:
8e:8b:19:d0:27:59:1f:ea:cd:5f:a0:f0:ac:2f:30:1b:cb:88:
7d:25:6b:8c:9a:9a:8f:2a:4d:88:a4:8e:96:ff:20:06:a8:32:
34:13:ab:8f:f5:30:ab:cc:c3:ee:fa:6a:80:c0:7a:dc:f4:75:
3b:52:d9:00:83:7b:b5:ea:f2:0a:64:b1:bb:35:78:b7:84:f4:
3b:73:a0:fa:4f:5b:4d:73:28:2b:4a:9b:d9:5c:19:aa:6d:22:
ec:ef:e5:e2:00:41:fa:1f:fa:b2:c4:04:df:ab:d1:b7:2a:06:
c4:a5:7c:82:5a:09:e2:05:40:6b:32:a9:cc:c8:26:59:df:55:
87:b2:f8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:38 2026 by rpki-client