
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32322d3232203d3e203539303039.roa
File: 34332e3234302e36302e302f32322d3232203d3e203539303039.roa (raw, json)
Hash identifier: eSRBaKiPu1z+La+Gp682IxiG7mkQv1M2CJ9YO6UfYYM=
Subject key identifier: 5C:8D:A0:9A:39:35:D9:15:D1:A9:80:0D:01:C1:68:54:B3:18:CA:77
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 51F1CAD32CE593FAAC07DBFB9F2D7BC3F7E4141F
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32322d3232203d3e203539303039.roa
Signing time: Mon 13 Jul 2026 07:27:15 +0000
ROA not before: Mon 13 Jul 2026 07:22:15 +0000
ROA not after: Mon 12 Jul 2027 07:27:15 +0000
asID: 59009
IP address blocks: 43.240.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:f1:ca:d3:2c:e5:93:fa:ac:07:db:fb:9f:2d:7b:c3:f7:e4:14:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jul 13 07:22:15 2026 GMT
Not After : Jul 12 07:27:15 2027 GMT
Subject: CN=5C8DA09A3935D915D1A9800D01C16854B318CA77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:af:a9:4c:88:ab:d6:9c:65:e9:38:2c:df:1d:
c5:a7:8a:93:ed:6d:1c:08:de:83:03:5d:6d:8d:5e:
e0:67:67:f9:6c:74:ce:16:8f:23:bb:15:7a:cf:a3:
df:16:69:c7:4f:b4:b9:aa:8d:4b:99:56:71:56:3e:
51:30:78:35:50:fb:bb:ca:39:6d:d8:3e:3a:ed:3f:
bb:70:ad:ff:15:c6:38:97:17:86:e8:44:02:e9:0f:
a1:4e:68:88:41:a5:a8:46:9c:46:86:ab:d1:85:65:
20:02:c9:e3:bb:2b:9f:d0:41:f6:51:4f:bc:dd:84:
39:f7:66:fe:e7:cc:3f:85:a5:d8:b4:de:4b:89:03:
9a:96:04:04:c1:8b:61:c5:72:46:7f:06:97:d6:41:
67:00:f6:3c:5d:bd:af:f8:46:14:3b:65:ae:4b:92:
08:d5:20:ea:51:29:fb:91:e7:4e:4b:f7:ca:cf:72:
56:90:6f:d7:97:86:d7:2d:1d:60:34:82:68:af:19:
e9:ef:62:43:59:6c:44:3a:16:11:a2:fa:19:bf:2c:
88:51:1b:9a:48:42:e0:1b:f1:02:99:c4:e5:a3:08:
80:b2:9b:33:de:aa:3b:19:42:2d:eb:f9:7a:ee:e0:
8e:ee:ce:9c:bc:f5:67:c3:e8:bf:d7:ec:89:0f:76:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8D:A0:9A:39:35:D9:15:D1:A9:80:0D:01:C1:68:54:B3:18:CA:77
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36302e302f32322d3232203d3e203539303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.60.0/22
Signature Algorithm: sha256WithRSAEncryption
61:fd:70:c1:6b:43:3b:c9:df:f8:ca:fe:45:d2:55:b8:e5:64:
ae:c9:a1:d1:f4:59:7d:07:59:6a:11:4d:fa:e6:01:ac:fe:f9:
cd:9a:74:1f:fa:ea:47:ee:34:26:61:61:59:bf:99:97:12:cd:
74:05:7a:a3:fd:95:ce:ae:be:1d:e9:99:f9:07:dd:6f:fd:32:
c3:eb:40:70:6a:7e:f4:7e:64:c2:85:30:6f:77:8e:ca:01:eb:
4d:27:41:96:34:f7:73:3d:ab:db:89:23:4f:fd:ab:c9:d8:ce:
33:48:63:94:3a:88:89:94:8b:d4:26:56:8b:0f:36:d9:bd:d2:
b5:47:c7:24:6b:df:0c:69:87:b8:20:19:c8:c7:14:79:07:5d:
8c:4c:d7:fd:5c:df:96:76:65:37:e1:54:04:49:d7:39:6c:85:
4c:f2:21:79:a4:40:fd:e0:cf:c0:18:3c:39:eb:39:34:46:2a:
7e:a0:ae:48:dd:58:55:58:be:56:f0:d5:08:08:c3:c7:fd:15:
ce:18:3b:cb:f0:c5:c2:e5:1e:b9:ce:78:3a:90:25:ef:f2:2e:
75:ee:56:29:59:cb:75:62:3b:97:cd:7f:45:6e:7d:22:cb:b3:
9c:9d:80:86:9c:e3:24:25:ab:0d:b5:ca:57:e5:b4:23:e9:6b:
2e:c4:3d:3a
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUUfHK0yzlk/qsB9v7ny17w/fkFB8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5
NTM1M0VDNjAeFw0yNjA3MTMwNzIyMTVaFw0yNzA3MTIwNzI3MTVaMDMxMTAvBgNV
BAMTKDVDOERBMDlBMzkzNUQ5MTVEMUE5ODAwRDAxQzE2ODU0QjMxOENBNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr6lMiKvWnGXpOCzfHcWnipPt
bRwI3oMDXW2NXuBnZ/lsdM4WjyO7FXrPo98WacdPtLmqjUuZVnFWPlEweDVQ+7vK
OW3YPjrtP7twrf8VxjiXF4boRALpD6FOaIhBpahGnEaGq9GFZSACyeO7K5/QQfZR
T7zdhDn3Zv7nzD+Fpdi03kuJA5qWBATBi2HFckZ/BpfWQWcA9jxdva/4RhQ7Za5L
kgjVIOpRKfuR505L98rPclaQb9eXhtctHWA0gmivGenvYkNZbEQ6FhGi+hm/LIhR
G5pIQuAb8QKZxOWjCICymzPeqjsZQi3r+Xru4I7uzpy89WfD6L/X7IkPdu5pAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUXI2gmjk12RXRqYANAcFoVLMYyncwHwYDVR0j
BBgwFoAU8dWTULgFkEpd38P96hpGDpU1PsYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
MTkxMTAwNDQ4MjI0MDUxMy8wL0YxRDU5MzUwQjgwNTkwNEE1RERGQzNGREVBMUE0
NjBFOTUzNTNFQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjFENTkzNTBCODA1OTA0QTVEREZDM0ZERUExQTQ2MEU5NTM1M0VDNi5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDkxOTExMDA0NDgyMjQwNTEzLzAvMzQzMzJlMzIzNDMw
MmUzNjMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzAzOS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAivwPDANBgkqhkiG9w0BAQsFAAOCAQEAYf1wwWtDO8nf+Mr+RdJVuOVkrsmh
0fRZfQdZahFN+uYBrP75zZp0H/rqR+40JmFhWb+ZlxLNdAV6o/2Vzq6+HemZ+Qfd
b/0yw+tAcGp+9H5kwoUwb3eOygHrTSdBljT3cz2r24kjT/2rydjOM0hjlDqIiZSL
1CZWiw822b3StUfHJGvfDGmHuCAZyMcUeQddjEzX/VzflnZlN+FUBEnXOWyFTPIh
eaRA/eDPwBg8Oes5NEYqfqCuSN1YVVi+VvDVCAjDx/0Vzhg7y/DFwuUeuc54OpAl
7/Iude5WKVnLdWI7l81/RW59IsuznJ2AhpzjJCWrDbXKV+W0I+lrLsQ9Og==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:14 2026 by rpki-client