
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3235302e33322e302f32322d3232203d3e20313334373630.roa
File: 34332e3235302e33322e302f32322d3232203d3e20313334373630.roa (raw, json)
Hash identifier: AQjaQMZN9JXVfWKQ/jLFTa4k1E9drRu7j1URRVSdUXo=
Subject key identifier: A6:A8:D9:C9:3F:37:84:71:09:21:A5:CB:91:84:10:4C:52:68:52:4C
Certificate issuer: /CN=9684E4B95F47A986892F9930EF9D9E453227439F
Certificate serial: 74DAF9F22F0525D33362F02C6F688AE2786761C0
Authority key identifier: 96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3235302e33322e302f32322d3232203d3e20313334373630.roa
Signing time: Wed 11 Feb 2026 03:52:18 +0000
ROA not before: Wed 11 Feb 2026 03:47:18 +0000
ROA not after: Wed 10 Feb 2027 03:52:18 +0000
asID: 134760
IP address blocks: 43.250.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 23 Feb 2026 15:06:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:da:f9:f2:2f:05:25:d3:33:62:f0:2c:6f:68:8a:e2:78:67:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9684E4B95F47A986892F9930EF9D9E453227439F
Validity
Not Before: Feb 11 03:47:18 2026 GMT
Not After : Feb 10 03:52:18 2027 GMT
Subject: CN=A6A8D9C93F3784710921A5CB9184104C5268524C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:a8:1e:d9:3b:45:36:f1:89:9b:bd:95:a3:
6f:ed:ff:da:ae:b9:22:b7:c7:5c:69:fe:e6:dd:87:
21:12:59:13:c0:30:95:4b:e4:0d:d4:58:4d:e0:34:
a4:57:44:f6:b7:f1:21:9e:63:f9:0b:46:b1:02:d9:
a9:b2:96:07:90:fe:f4:30:dc:6b:3f:68:53:09:4b:
3a:05:a3:08:58:04:94:d7:e0:25:d9:12:40:df:44:
00:aa:88:84:9a:6d:c1:ea:01:39:23:36:2d:51:e8:
8c:25:fd:d3:03:7e:99:82:7d:c2:00:8f:34:5a:ff:
ad:e0:a8:c7:38:e6:08:aa:de:b0:c7:a9:5d:9c:23:
3e:5f:81:8b:ed:58:f0:70:ee:4a:a4:15:d3:d2:36:
24:4d:c0:54:77:17:45:15:7b:af:43:e5:d9:bd:5a:
88:4b:c1:7c:60:61:8d:24:ca:64:ec:3a:53:3f:6d:
d6:f5:17:bf:1c:b0:93:af:1f:35:99:b5:7c:ed:f6:
50:7b:05:ef:86:96:af:91:dd:af:44:d6:53:65:34:
77:da:11:30:a7:e7:31:14:c3:ac:da:42:53:d2:c1:
35:b8:0c:57:08:e6:53:06:4d:58:f8:22:96:d5:a3:
c8:0a:1a:5e:58:9e:73:cc:23:d7:ff:1a:e9:aa:82:
47:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A8:D9:C9:3F:37:84:71:09:21:A5:CB:91:84:10:4C:52:68:52:4C
X509v3 Authority Key Identifier:
keyid:96:84:E4:B9:5F:47:A9:86:89:2F:99:30:EF:9D:9E:45:32:27:43:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/9684E4B95F47A986892F9930EF9D9E453227439F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9684E4B95F47A986892F9930EF9D9E453227439F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065582741577990146/0/34332e3235302e33322e302f32322d3232203d3e20313334373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.250.32.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:9f:ee:92:9a:a7:fb:fa:c8:1d:5d:62:11:2d:96:0a:79:34:
37:f4:ad:e2:7e:b0:5a:53:2b:6f:0d:64:cc:77:d2:02:7e:12:
65:b4:c8:e3:17:32:6c:57:69:b0:dd:67:54:38:d3:d6:84:d7:
f4:35:7d:31:75:89:39:1a:e9:13:b5:a4:9e:37:b7:b2:88:46:
a1:3b:80:2b:93:4e:83:e3:1c:9d:cf:01:9b:62:dd:0f:c7:5e:
ba:b1:00:ec:5e:bf:e9:93:7d:a5:f7:00:fa:3f:06:02:4c:01:
45:43:09:f2:b0:b8:98:18:19:79:e6:a1:24:1d:29:00:69:3b:
3c:7b:a6:cb:bb:f5:bf:df:66:3a:b7:d1:b7:0c:52:26:bc:70:
d9:c8:20:ac:7a:e0:66:77:82:87:db:9b:31:f9:ea:0f:8f:96:
08:7b:44:f7:ca:c0:3b:70:ed:05:95:e5:0a:00:63:18:cd:22:
d8:eb:46:bd:02:5b:2c:3b:fb:6c:ca:c5:30:6d:1a:99:17:f8:
ed:a4:f0:9a:6e:06:4e:46:d2:f2:38:e8:dc:82:00:a3:5c:98:
ab:7b:eb:bc:56:56:b5:3e:74:ef:35:ff:94:93:05:5d:e4:a6:
47:6f:c9:46:87:5e:6d:85:a7:46:a6:a2:8a:d6:75:46:f7:2b:
1c:1a:b7:fd
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Feb 23 03:23:35 2026 by rpki-client