
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531313835.roa
File: 34332e3232362e34392e302f32342d3234203d3e20313531313835.roa (raw, json)
Hash identifier: DrN6EvaxSyfOrx64lSKyy5bToghM4IJIUgJhjn3Qf+E=
Subject key identifier: 8D:BF:6A:F3:0E:3E:2C:E9:C7:4D:CE:BC:BE:DF:2B:56:6A:C0:90:FA
Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Certificate serial: 497D748D7BF26CE39563C04699D51D7130BA9458
Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531313835.roa
Signing time: Thu 25 Jun 2026 07:07:27 +0000
ROA not before: Thu 25 Jun 2026 07:02:27 +0000
ROA not after: Thu 24 Jun 2027 07:07:27 +0000
asID: 151185
IP address blocks: 43.226.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 09:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7d:74:8d:7b:f2:6c:e3:95:63:c0:46:99:d5:1d:71:30:ba:94:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138
Validity
Not Before: Jun 25 07:02:27 2026 GMT
Not After : Jun 24 07:07:27 2027 GMT
Subject: CN=8DBF6AF30E3E2CE9C74DCEBCBEDF2B566AC090FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:95:3f:b1:db:d8:a9:a8:ef:51:fc:52:af:2c:
6a:03:b8:76:cf:17:48:52:af:a0:44:65:23:a6:58:
10:d4:ce:ff:40:af:99:0b:e9:c5:75:cd:09:65:d4:
a2:25:1b:b0:82:19:fa:20:4a:e3:51:87:b2:a5:5b:
dd:ba:b9:c3:1e:04:8e:25:f6:07:84:ab:cc:d0:7c:
ca:23:12:91:ab:97:f5:f6:76:b2:34:da:4b:ba:b8:
49:56:13:35:af:e2:24:3d:52:5d:1a:db:01:1a:97:
74:a9:8a:6d:56:5c:19:5c:49:a4:a3:e9:be:99:6a:
7d:7f:d3:3f:28:06:c1:4c:23:86:70:bd:4e:46:0a:
97:2c:2f:9d:d9:38:11:8d:7a:a6:58:4b:5b:4d:0e:
76:bc:48:58:2b:1c:0d:58:c2:95:54:05:3a:a8:6a:
70:f8:3a:ed:05:44:ed:bd:15:48:35:b7:f3:ec:dc:
f6:98:5a:13:23:86:20:a4:e5:7c:fc:eb:e7:d1:54:
ae:d5:9a:4f:18:e5:4f:ff:a0:ba:c1:e9:b7:dd:92:
d3:e1:af:fa:1a:94:2a:9b:70:97:07:77:b9:d8:76:
37:ec:b4:c9:41:00:64:df:b7:42:bb:7d:35:d1:42:
f8:6e:94:b1:34:c0:35:28:42:43:54:10:cd:75:7c:
18:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:BF:6A:F3:0E:3E:2C:E9:C7:4D:CE:BC:BE:DF:2B:56:6A:C0:90:FA
X509v3 Authority Key Identifier:
keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531313835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.49.0/24
Signature Algorithm: sha256WithRSAEncryption
02:49:16:34:6c:db:5b:ba:4a:c7:87:db:fa:fc:13:20:f1:db:
47:5f:3e:c3:ba:bd:20:64:55:ee:0f:5d:0e:13:47:f2:ba:43:
e7:5c:54:8b:9a:6a:02:32:75:a8:63:dc:e8:f8:f1:61:6c:f5:
f1:f6:26:4c:06:04:35:5b:be:b0:16:61:72:ca:46:e5:de:54:
71:44:5c:cd:c8:d7:68:cd:ed:f4:49:e3:21:eb:2c:87:0e:ac:
9f:66:01:27:ac:09:ae:52:98:af:83:bc:b6:4e:94:8c:c2:dd:
4c:a3:8f:a4:87:19:bf:fb:01:06:f7:ec:16:0b:be:5a:24:80:
ab:c8:80:66:0f:45:23:43:91:86:ae:f5:67:4d:0d:38:f4:a4:
91:53:e8:7f:36:b2:16:4e:ea:24:71:ce:37:90:ec:d1:7c:14:
2e:78:21:15:a7:77:6d:79:20:92:19:98:e0:b0:ce:0d:c8:9a:
b9:aa:95:dc:29:ce:02:af:fe:02:ae:c3:23:f0:c4:62:b7:b2:
6e:30:dc:92:8c:ea:81:31:e1:a6:36:49:64:3a:15:e2:be:97:
fb:1e:32:55:8b:03:f6:80:5b:ed:93:18:1d:9a:fb:86:77:f4:
25:52:65:94:9d:ba:52:be:a6:13:e1:3d:c2:77:a8:a2:3c:98:
88:1f:19:e0
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUSX10jXvybOOVY8BGmdUdcTC6lFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2
NjY4MDEzODAeFw0yNjA2MjUwNzAyMjdaFw0yNzA2MjQwNzA3MjdaMDMxMTAvBgNV
BAMTKDhEQkY2QUYzMEUzRTJDRTlDNzREQ0VCQ0JFREYyQjU2NkFDMDkwRkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtlT+x29ipqO9R/FKvLGoDuHbP
F0hSr6BEZSOmWBDUzv9Ar5kL6cV1zQll1KIlG7CCGfogSuNRh7KlW926ucMeBI4l
9geEq8zQfMojEpGrl/X2drI02ku6uElWEzWv4iQ9Ul0a2wEal3Spim1WXBlcSaSj
6b6Zan1/0z8oBsFMI4ZwvU5GCpcsL53ZOBGNeqZYS1tNDna8SFgrHA1YwpVUBTqo
anD4Ou0FRO29FUg1t/Ps3PaYWhMjhiCk5Xz86+fRVK7Vmk8Y5U//oLrB6bfdktPh
r/oalCqbcJcHd7nYdjfstMlBAGTft0K7fTXRQvhulLE0wDUoQkNUEM11fBgLAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUjb9q8w4+LOnHTc68vt8rVmrAkPowHwYDVR0j
BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2
NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG
RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz
NjJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMxMzgzNS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEACviMTANBgkqhkiG9w0BAQsFAAOCAQEAAkkWNGzbW7pKx4fb+vwTIPHb
R18+w7q9IGRV7g9dDhNH8rpD51xUi5pqAjJ1qGPc6PjxYWz18fYmTAYENVu+sBZh
cspG5d5UcURczcjXaM3t9EnjIesshw6sn2YBJ6wJrlKYr4O8tk6UjMLdTKOPpIcZ
v/sBBvfsFgu+WiSAq8iAZg9FI0ORhq71Z00NOPSkkVPofzayFk7qJHHON5Ds0XwU
LnghFad3bXkgkhmY4LDODciauaqV3CnOAq/+Aq7DI/DEYreybjDckozqgTHhpjZJ
ZDoV4r6X+x4yVYsD9oBb7ZMYHZr7hnf0JVJllJ26Ur6mE+E9wneoojyYiB8Z4A==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:54:02 2026 by rpki-client