
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e2039383038.roa
File: 34332e3139332e36352e302f32342d3234203d3e2039383038.roa (raw, json)
Hash identifier: V++q/vbqX7uElU3XCozJ+vQAMUss9g+29A6LHYlupQ8=
Subject key identifier: 32:E1:5B:2E:23:C0:30:28:DB:B2:AC:CF:17:75:2B:A1:6A:D2:FE:D5
Certificate issuer: /CN=B041B05EE47CEB3998205103A529257D485C9CDF
Certificate serial: 6FD85649F486613345FF23056DF783C502F1FF5B
Authority key identifier: B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e2039383038.roa
Signing time: Wed 12 Aug 2026 07:45:51 +0000
ROA not before: Wed 12 Aug 2026 07:40:51 +0000
ROA not after: Wed 11 Aug 2027 07:45:51 +0000
asID: 9808
IP address blocks: 43.193.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 31 Aug 2026 10:30:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:d8:56:49:f4:86:61:33:45:ff:23:05:6d:f7:83:c5:02:f1:ff:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B041B05EE47CEB3998205103A529257D485C9CDF
Validity
Not Before: Aug 12 07:40:51 2026 GMT
Not After : Aug 11 07:45:51 2027 GMT
Subject: CN=32E15B2E23C03028DBB2ACCF17752BA16AD2FED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:8a:b9:a1:ed:fd:e0:ac:8e:6e:be:43:08:
2a:fe:1a:61:51:b3:9a:85:64:0d:60:67:ba:b2:48:
e1:cf:05:30:19:04:fb:69:a4:72:99:35:2d:d5:82:
18:5f:38:8a:57:41:94:87:a6:c2:8c:01:99:a6:26:
d1:97:51:fc:3a:72:e9:6a:ef:ea:ab:cc:27:85:71:
cb:c2:95:39:b1:8a:13:1f:82:42:c8:4e:64:28:62:
6e:e0:2a:97:a2:86:b7:81:f9:06:4c:e4:8d:fb:b8:
bc:3b:6d:6a:61:31:ac:c1:85:3e:00:82:1b:48:19:
69:0d:1f:db:b5:8c:ca:19:72:22:59:ac:89:2e:85:
e5:f1:29:34:f4:9c:e1:3b:f3:5a:97:40:c5:b2:d2:
87:38:ff:bd:97:51:7f:d7:cf:67:0f:ff:47:4d:0c:
82:9c:45:1e:8e:19:2b:4d:c2:3e:f8:41:fd:93:3d:
c5:63:8d:bf:14:39:d0:11:2d:14:c2:67:9e:1f:5c:
e2:60:4f:a0:46:84:6a:d7:0a:bc:f0:9f:24:aa:e4:
e8:a9:e7:db:40:3e:d3:13:43:54:af:8c:c9:43:69:
a4:1f:82:da:66:07:ba:a2:08:e4:be:30:9e:f2:52:
9e:33:ba:fc:2a:1e:9c:1f:08:96:b1:40:f8:be:49:
db:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E1:5B:2E:23:C0:30:28:DB:B2:AC:CF:17:75:2B:A1:6A:D2:FE:D5
X509v3 Authority Key Identifier:
keyid:B0:41:B0:5E:E4:7C:EB:39:98:20:51:03:A5:29:25:7D:48:5C:9C:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/B041B05EE47CEB3998205103A529257D485C9CDF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B041B05EE47CEB3998205103A529257D485C9CDF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394982403/0/34332e3139332e36352e302f32342d3234203d3e2039383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.193.65.0/24
Signature Algorithm: sha256WithRSAEncryption
00:56:08:30:b9:11:75:61:33:18:10:12:be:92:28:c9:fb:91:
c8:16:d2:2b:e2:9a:7b:a7:a8:cd:b9:46:4d:0b:0e:81:8a:e1:
4d:81:10:5f:36:bd:45:1b:d1:48:3c:5d:3b:b2:b1:87:8a:79:
5c:3d:8d:94:2b:c8:81:73:ab:14:40:de:26:e9:57:c4:c2:19:
7c:9d:2b:80:8e:3d:5b:01:6b:d8:7f:da:ed:10:7f:b5:18:2b:
39:6b:fe:bc:ad:10:1b:1c:3d:b8:34:ae:9a:a6:27:3c:d6:87:
71:04:5b:f0:d0:d5:0b:6a:9d:bb:51:9d:33:e4:14:ff:78:d5:
19:fa:21:2e:b5:f8:9d:92:f0:11:86:10:46:6a:90:b3:85:f0:
3a:a6:c5:a2:9f:3b:00:08:0c:e0:70:f5:ae:2f:ce:ac:d4:05:
1b:8f:5d:74:77:11:66:50:92:44:48:ac:55:4b:3b:f2:d0:ed:
77:06:ac:3a:8b:69:b5:79:1f:5d:d7:c6:0e:1c:8d:1f:b7:f9:
f0:cf:21:3d:31:33:45:a4:ec:c2:79:18:86:95:98:47:ff:5f:
a0:43:70:d0:00:1b:a5:16:da:92:9f:ce:b2:18:c5:3a:28:1a:
42:24:ed:42:e0:89:3b:17:a3:2a:a5:c0:cd:1d:36:d6:1a:4c:
cf:54:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 29 06:33:26 2026 by rpki-client