
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e39302e302f32332d3233203d3e203536303436.roa
File: 34332e3234372e39302e302f32332d3233203d3e203536303436.roa (raw, json)
Hash identifier: 0nfsvYjB3JaX9r5vzMBGJyLbtsVhFG6gWlCVWg7ZQao=
Subject key identifier: B8:36:C3:4B:F6:38:A6:BD:E6:37:66:49:B7:A8:E0:62:93:B5:59:4A
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 39ED725EE8DFF0CD254258F954B0B751984D7754
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e39302e302f32332d3233203d3e203536303436.roa
Signing time: Sun 28 Jun 2026 13:54:05 +0000
ROA not before: Sun 28 Jun 2026 13:49:05 +0000
ROA not after: Sun 27 Jun 2027 13:54:05 +0000
asID: 56046
IP address blocks: 43.247.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 22:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:ed:72:5e:e8:df:f0:cd:25:42:58:f9:54:b0:b7:51:98:4d:77:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:49:05 2026 GMT
Not After : Jun 27 13:54:05 2027 GMT
Subject: CN=B836C34BF638A6BDE6376649B7A8E06293B5594A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:57:03:c0:72:e9:41:91:e0:15:80:a2:09:
9d:4e:5a:26:11:86:cc:6a:0a:b0:26:58:64:ae:ee:
7e:31:72:31:4c:f7:ce:e9:ba:a1:0f:46:6a:db:11:
a1:b0:db:80:1c:2b:f1:ec:f2:c7:cf:e1:c3:86:6b:
78:06:61:4a:dd:5f:94:d2:75:6c:0e:ca:c4:3b:b7:
98:c7:d3:e2:9b:83:e8:4f:15:ef:65:a6:6b:d0:eb:
30:f7:b5:23:be:9d:d2:49:0e:25:dc:bf:ad:f1:cd:
50:f3:25:b6:2b:03:f0:da:0a:f4:84:12:ba:43:3c:
dc:6a:16:54:1c:3b:f3:49:ae:49:df:44:21:52:38:
a8:d8:65:ba:ff:a2:04:70:22:56:c2:b8:58:85:4b:
01:30:88:31:75:c3:32:8d:46:91:2d:58:d5:c4:75:
e0:7c:30:8f:63:b3:78:45:cf:ad:73:95:f8:7f:d0:
12:f1:5a:56:e7:78:3c:2e:31:e6:fc:2b:45:22:79:
e1:6b:22:f5:90:a2:23:c7:5a:ce:f2:d3:13:79:34:
2d:6b:9f:bf:5a:90:f3:16:f6:c5:a7:48:2f:b3:9c:
95:2a:18:b8:7a:6f:f6:2a:2f:47:4b:d9:96:20:51:
6f:0a:a3:68:5b:b1:6e:f6:8f:1a:b0:ae:d1:08:cf:
9d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:36:C3:4B:F6:38:A6:BD:E6:37:66:49:B7:A8:E0:62:93:B5:59:4A
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3234372e39302e302f32332d3233203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.247.90.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:d2:5b:96:99:fd:c5:e2:a8:e2:d8:3c:65:c9:fe:0b:5f:89:
75:5a:94:89:01:5d:1c:8b:3c:1c:71:19:ef:e3:80:62:25:d2:
cc:51:b2:18:90:99:a8:ea:5e:ea:36:03:f5:01:a1:15:35:66:
3b:59:7e:2d:93:6d:bc:3c:bc:de:95:ef:e4:a2:90:ba:ce:f0:
c5:37:91:4a:07:0d:73:5c:8e:5c:d5:79:82:94:a0:16:aa:fc:
1f:bb:a3:f7:83:8c:70:4b:0f:c3:f2:db:76:a3:78:bb:a3:96:
1b:6d:d2:cc:58:c2:8e:04:ce:7e:05:f9:44:2d:3c:f9:2d:f4:
10:40:2d:92:06:f0:d7:d7:c4:45:0e:de:a6:22:64:3e:5e:cc:
43:f2:3a:a9:1b:65:18:0c:5a:9f:67:0d:89:e1:02:c0:66:ad:
ce:b1:89:41:f4:85:c0:c1:ee:c3:dc:d0:90:75:24:3e:97:ba:
22:fe:13:89:27:13:c7:86:8d:73:a6:5b:9e:b3:38:06:4a:9f:
47:9c:8c:b3:29:b5:21:80:27:a4:ad:da:3e:01:93:10:47:99:
08:ff:17:9e:7a:f3:f2:d0:cf:29:ff:9b:e3:fb:5a:c6:f6:16:
a2:cb:68:22:a7:f9:6b:48:75:d4:50:16:5d:ef:d6:81:f9:a8:
d4:fc:94:85
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUOe1yXujf8M0lQlj5VLC3UZhNd1QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMw
NEZENjlERDAeFw0yNjA2MjgxMzQ5MDVaFw0yNzA2MjcxMzU0MDVaMDMxMTAvBgNV
BAMTKEI4MzZDMzRCRjYzOEE2QkRFNjM3NjY0OUI3QThFMDYyOTNCNTU5NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvllcDwHLpQZHgFYCiCZ1OWiYR
hsxqCrAmWGSu7n4xcjFM987puqEPRmrbEaGw24AcK/Hs8sfP4cOGa3gGYUrdX5TS
dWwOysQ7t5jH0+Kbg+hPFe9lpmvQ6zD3tSO+ndJJDiXcv63xzVDzJbYrA/DaCvSE
ErpDPNxqFlQcO/NJrknfRCFSOKjYZbr/ogRwIlbCuFiFSwEwiDF1wzKNRpEtWNXE
deB8MI9js3hFz61zlfh/0BLxWlbneDwuMeb8K0UieeFrIvWQoiPHWs7y0xN5NC1r
n79akPMW9sWnSC+znJUqGLh6b/YqL0dL2ZYgUW8Ko2hbsW72jxqwrtEIz53xAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUuDbDS/Y4pr3mN2ZJt6jgYpO1WUowHwYDVR0j
BBgwFoAUUEcIO0Y3o/At+d7rpnvt3AT9ad0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4MDA1NTEyMTU1OTU1NC8wLzUwNDcwODNCNDYzN0EzRjAyREY5REVFQkE2N0JF
RERDMDRGRDY5REQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNTA0NzA4M0I0NjM3QTNGMDJERjlERUVCQTY3QkVEREMwNEZENjlERC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNTU5NTU0LzAvMzQzMzJlMzIzNDM3
MmUzOTMwMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzNjMwMzQzNi5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEASv3WjANBgkqhkiG9w0BAQsFAAOCAQEAatJblpn9xeKo4tg8Zcn+C1+JdVqU
iQFdHIs8HHEZ7+OAYiXSzFGyGJCZqOpe6jYD9QGhFTVmO1l+LZNtvDy83pXv5KKQ
us7wxTeRSgcNc1yOXNV5gpSgFqr8H7uj94OMcEsPw/LbdqN4u6OWG23SzFjCjgTO
fgX5RC08+S30EEAtkgbw19fERQ7epiJkPl7MQ/I6qRtlGAxan2cNieECwGatzrGJ
QfSFwMHuw9zQkHUkPpe6Iv4TiScTx4aNc6ZbnrM4BkqfR5yMsym1IYAnpK3aPgGT
EEeZCP8Xnnrz8tDPKf+b4/taxvYWostoIqf5a0h11FAWXe/Wgfmo1PyUhQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:39:21 2026 by rpki-client