
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e322e302f32342d3234203d3e20313436383137.roa
File: 34332e3234382e322e302f32342d3234203d3e20313436383137.roa (raw, json)
Hash identifier: LppJCNQWN9d0USwSA6+7zsT3Ll9wmHWxHFLVcVSEfBA=
Subject key identifier: 55:D8:B5:13:DE:67:5D:7C:AB:D5:AE:30:1F:3A:9A:68:B8:82:F8:CB
Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362
Certificate serial: 6AF233FA5DBEB98CB5A1C319502E62CE77E7C76F
Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e322e302f32342d3234203d3e20313436383137.roa
Signing time: Fri 08 May 2026 09:34:29 +0000
ROA not before: Fri 08 May 2026 09:29:29 +0000
ROA not after: Fri 07 May 2027 09:34:29 +0000
asID: 146817
IP address blocks: 43.248.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f2:33:fa:5d:be:b9:8c:b5:a1:c3:19:50:2e:62:ce:77:e7:c7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362
Validity
Not Before: May 8 09:29:29 2026 GMT
Not After : May 7 09:34:29 2027 GMT
Subject: CN=55D8B513DE675D7CABD5AE301F3A9A68B882F8CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:07:a4:f0:f0:ed:81:d5:7c:c3:3d:0b:d8:f2:
69:2d:59:5c:d0:c0:9a:5c:a1:08:d3:db:25:c4:20:
c6:02:d3:d2:da:28:64:d8:9d:04:ba:86:f7:a6:45:
06:ce:3d:5f:c4:a8:aa:19:b4:43:27:35:67:dd:ad:
70:ea:d7:80:c1:4d:a7:c0:c6:71:59:18:5f:4c:ef:
33:77:c7:e9:a3:63:20:2c:fc:4e:29:72:9b:92:96:
10:e7:8d:52:df:fd:df:46:a4:77:33:07:e2:b5:fd:
67:5b:f8:9a:6b:50:da:7b:b9:1b:9e:d4:8f:e0:76:
e9:01:89:c1:18:90:be:8a:80:74:e1:45:da:fd:9c:
52:e3:8b:6c:01:f9:ae:11:3a:7b:f1:fa:aa:0c:2e:
16:4e:5b:12:d3:65:b4:24:9f:1f:13:b4:b2:7d:58:
3c:66:d6:9f:88:14:4f:05:2f:84:db:f0:0e:d1:ce:
76:88:82:f4:e8:fa:eb:ac:ce:c7:6d:2b:be:1d:45:
a2:30:03:8b:a6:d4:8c:7f:60:77:88:c1:f6:17:35:
7d:f1:ad:a8:df:63:c4:c4:e9:ce:15:e4:75:c3:5b:
ef:9f:ba:07:b6:94:04:b7:92:bd:e7:81:99:ac:96:
1d:27:65:e7:92:cb:ee:99:28:9c:7b:78:f7:b1:48:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D8:B5:13:DE:67:5D:7C:AB:D5:AE:30:1F:3A:9A:68:B8:82:F8:CB
X509v3 Authority Key Identifier:
keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e322e302f32342d3234203d3e20313436383137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.2.0/24
Signature Algorithm: sha256WithRSAEncryption
08:d4:5d:7a:82:8c:60:68:1a:df:f9:99:92:cf:78:c7:81:0a:
7c:47:c9:38:ba:bb:4e:be:5d:b0:34:83:4f:6a:35:85:94:ed:
5a:71:5d:ca:ab:cd:c5:88:3e:6e:ca:3e:09:1a:ee:e8:34:00:
4b:07:f2:ea:83:25:d7:e3:af:56:a4:e3:da:d3:73:8c:59:24:
db:1d:39:2b:5f:dd:c6:1e:dd:87:6b:44:a0:9d:0b:57:14:72:
7d:ca:0b:7a:91:e9:51:f1:4a:39:f4:95:31:2c:a4:30:31:19:
a0:c0:82:fa:68:7a:cb:53:52:a5:79:87:65:fd:98:21:51:20:
22:b9:33:6d:c9:98:76:94:60:05:5c:b5:37:77:c1:bf:59:eb:
4b:21:5b:12:4f:0d:bd:26:17:d0:7e:a5:fb:31:f3:77:b5:d1:
ee:f0:77:7a:c7:51:92:32:a9:1a:5a:f9:4f:91:74:ea:5f:fe:
2b:b1:c0:f6:c1:b7:8c:f8:ae:1f:11:d1:c2:a6:95:68:15:e3:
be:52:bd:48:25:a8:b5:4f:45:f5:30:4a:03:8a:fe:6b:73:d8:
db:f5:fe:33:cd:12:6c:94:8c:d2:df:1a:72:c3:24:4c:e9:29:
58:45:ee:dd:ca:37:02:44:50:b3:49:a1:3b:51:e9:62:be:c8:
98:ba:78:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:55:19 2026 by rpki-client