
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313430373136.roa
File: 34332e3235352e38342e302f32322d3232203d3e20313430373136.roa (raw, json)
Hash identifier: zNVSRQXJVS0U6DfZqiJ39oTxdu5/+POi5g9vr+jO/0I=
Subject key identifier: 32:0B:19:7E:73:68:14:A4:AF:EA:67:8E:5F:ED:D9:E6:12:08:05:1E
Certificate issuer: /CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Certificate serial: 693705226E762DFE3EA087E6B693BCC78EB1D4D1
Authority key identifier: 50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313430373136.roa
Signing time: Sun 28 Jun 2026 13:55:06 +0000
ROA not before: Sun 28 Jun 2026 13:50:06 +0000
ROA not after: Sun 27 Jun 2027 13:55:06 +0000
asID: 140716
IP address blocks: 43.255.84.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 15:10:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:37:05:22:6e:76:2d:fe:3e:a0:87:e6:b6:93:bc:c7:8e:b1:d4:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD
Validity
Not Before: Jun 28 13:50:06 2026 GMT
Not After : Jun 27 13:55:06 2027 GMT
Subject: CN=320B197E736814A4AFEA678E5FEDD9E61208051E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:78:15:cc:dc:2b:3e:46:00:fc:0a:74:10:c6:
03:3d:e1:6c:7b:29:3e:b5:f0:e2:0c:8a:22:e2:07:
98:fb:78:7b:af:0f:e4:65:1e:59:a1:66:dc:c6:79:
a4:3e:27:17:df:07:80:64:6f:27:f5:82:67:8e:90:
0b:30:ce:ab:83:10:c7:e0:4b:f8:90:59:82:d8:ce:
af:22:10:26:22:41:1a:2d:59:89:46:d0:75:07:9f:
31:c7:09:f7:6f:ce:39:f7:07:f5:06:84:9f:52:07:
10:3b:4c:cf:67:c2:32:bc:af:15:43:d5:0e:28:da:
b2:e9:c6:f0:98:e9:5a:6f:5a:95:7c:46:f4:ed:c4:
ab:5d:00:e4:c3:f3:76:ce:35:09:38:67:fc:f9:96:
21:b2:bd:bd:72:34:0f:b1:0c:73:ba:58:c1:8d:6a:
ff:5f:f3:76:9b:39:94:91:20:57:c3:1f:57:df:46:
1c:ac:72:c4:66:e7:a0:52:1c:2c:d0:f8:82:39:11:
b6:2b:26:ad:93:e1:db:ee:0c:97:d6:03:6d:32:7e:
91:cd:82:47:7b:dc:fd:30:8c:f2:fa:71:99:1f:92:
4b:d2:0a:18:b1:b4:02:48:f1:5a:28:cc:de:cf:af:
2a:4d:5a:88:ed:55:f8:16:71:b3:04:84:e2:ce:48:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:0B:19:7E:73:68:14:A4:AF:EA:67:8E:5F:ED:D9:E6:12:08:05:1E
X509v3 Authority Key Identifier:
keyid:50:47:08:3B:46:37:A3:F0:2D:F9:DE:EB:A6:7B:ED:DC:04:FD:69:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5047083B4637A3F02DF9DEEBA67BEDDC04FD69DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121559554/0/34332e3235352e38342e302f32322d3232203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.255.84.0/22
Signature Algorithm: sha256WithRSAEncryption
c1:1b:43:20:19:c2:e2:97:bb:f1:16:9c:ca:ba:16:e6:41:16:
41:cc:0a:ae:c1:0c:77:92:7f:59:c7:62:b4:66:f8:4f:53:f4:
1a:1e:ca:a4:2a:49:67:a0:c0:e6:7f:8d:8e:67:6e:54:36:0e:
f0:be:9f:d9:84:fb:67:1f:24:fb:a8:4e:11:5c:da:af:bf:06:
20:85:1f:5d:37:04:32:86:d1:46:97:03:4a:6b:8e:d8:d1:00:
5a:93:3b:e7:5b:d0:4a:e3:2d:c5:74:fd:a9:c1:e3:2c:2b:43:
a3:d1:e5:05:36:4a:97:9b:3a:1f:7f:ed:4f:04:6a:02:08:e8:
08:7e:0e:09:4e:9c:4d:ce:45:1a:21:6e:c2:b9:60:80:3c:a8:
eb:e0:98:65:3a:5a:01:a2:b5:c9:95:bc:bb:1f:4e:68:43:0c:
25:43:a9:4a:52:38:ed:0d:31:57:d5:e7:0e:d2:b2:e0:41:9d:
4b:df:1a:34:c9:73:29:6a:19:27:00:cd:c3:e8:13:66:5b:e0:
96:d1:c6:cc:38:ea:cc:32:6e:bf:90:1f:8c:d7:27:18:9d:0d:
1b:ae:8e:47:22:89:f5:9b:40:a9:a8:34:7a:ea:0a:df:38:c8:
7b:ba:d6:2f:04:05:c4:c2:58:f6:b9:e0:62:3c:fd:45:94:b1:
7e:73:73:fa
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 23:09:35 2026 by rpki-client