
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36322e302f32342d3234203d3e203539303039.roa
File: 34332e3234302e36322e302f32342d3234203d3e203539303039.roa (raw, json)
Hash identifier: RTGbhhW7T+8YCMbJ/RHS0hRMKQNhib/3CUPC0Jaaq2s=
Subject key identifier: 14:BD:DF:E5:62:4D:09:92:06:62:05:9F:4D:35:9F:DC:BE:9B:47:D4
Certificate issuer: /CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Certificate serial: 2D018FB4FC5E2C2EB8FFF51CD5331A9E6C975EF2
Authority key identifier: F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36322e302f32342d3234203d3e203539303039.roa
Signing time: Mon 13 Jul 2026 07:27:14 +0000
ROA not before: Mon 13 Jul 2026 07:22:14 +0000
ROA not after: Mon 12 Jul 2027 07:27:14 +0000
asID: 59009
IP address blocks: 43.240.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:01:8f:b4:fc:5e:2c:2e:b8:ff:f5:1c:d5:33:1a:9e:6c:97:5e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1D59350B805904A5DDFC3FDEA1A460E95353EC6
Validity
Not Before: Jul 13 07:22:14 2026 GMT
Not After : Jul 12 07:27:14 2027 GMT
Subject: CN=14BDDFE5624D09920662059F4D359FDCBE9B47D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b1:1d:7c:ae:10:3f:d1:b5:88:fe:53:5b:8a:
fd:67:cb:2e:40:ae:f6:cd:80:ef:f3:3d:6f:2c:40:
95:db:67:8b:c8:86:34:7f:58:14:41:bf:4b:3e:d6:
74:49:fe:ba:5b:a6:a7:ac:3b:c9:59:d2:5b:da:88:
87:b4:3a:1d:1d:25:9b:6c:8f:64:a7:11:a5:70:9d:
02:bd:48:40:1d:bd:00:a7:fc:c0:a7:0c:05:37:cf:
0d:b0:11:60:d0:eb:a9:08:b2:e6:97:13:1b:af:62:
a8:f1:98:2a:0a:5b:61:77:b1:f2:2c:0f:f6:ca:d8:
ac:ae:4f:d1:ab:ca:2d:18:f4:23:89:5d:d5:7e:cd:
8e:e2:ca:56:7e:56:8e:1f:4a:05:a6:11:16:7a:47:
39:5f:13:83:8f:23:6a:11:de:55:b7:b3:00:53:e9:
f9:9b:6f:32:19:4f:38:51:af:e8:26:6c:4f:17:b7:
b9:cf:e8:34:fd:ce:74:ad:6f:b6:ba:51:f4:b5:6e:
af:61:e4:e8:59:e2:2d:ab:3c:a6:0e:72:5f:e4:a0:
a5:bf:ba:63:09:a8:86:2d:d5:3f:18:5d:d9:b9:a8:
9f:83:8b:90:1a:c8:39:d6:bb:b5:f2:59:93:aa:60:
0e:fe:7b:ea:0b:f2:2a:e3:74:21:42:41:d2:19:c7:
2c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BD:DF:E5:62:4D:09:92:06:62:05:9F:4D:35:9F:DC:BE:9B:47:D4
X509v3 Authority Key Identifier:
keyid:F1:D5:93:50:B8:05:90:4A:5D:DF:C3:FD:EA:1A:46:0E:95:35:3E:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F1D59350B805904A5DDFC3FDEA1A460E95353EC6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1091911004482240513/0/34332e3234302e36322e302f32342d3234203d3e203539303039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.62.0/24
Signature Algorithm: sha256WithRSAEncryption
e6:ab:83:81:b8:d0:95:62:f3:26:9a:00:bf:a7:f3:be:26:80:
cb:43:a3:ed:c0:a9:7c:fe:cf:24:97:46:c0:f7:39:96:7c:a8:
42:56:c9:73:ff:dc:69:7c:cd:25:7f:95:40:55:d8:28:2c:58:
d1:6a:61:d7:a3:18:8e:88:c5:b7:a4:72:e0:41:e0:b7:e7:a8:
9c:c7:a5:bd:94:66:de:69:b5:64:fa:c5:a5:d7:16:d9:4e:42:
2f:eb:ee:1a:f6:bd:de:e7:28:fc:66:f6:29:48:56:5f:51:1f:
08:8c:22:ec:10:24:01:1d:69:bd:1b:2d:80:e0:e3:00:ea:6c:
91:c1:ac:9f:6b:dd:1b:09:53:00:76:c6:ca:66:b3:f4:fd:0d:
fd:65:6e:46:a8:01:09:12:e5:c4:7e:b0:67:9e:8f:e3:31:1e:
c5:d6:1a:4c:64:32:c7:94:03:6e:00:ee:78:fc:76:a7:b1:5e:
c9:6f:0b:af:01:cf:6f:a9:9b:62:8d:06:19:ae:b8:13:79:66:
a1:a1:cd:de:1c:2c:49:d3:23:23:8d:43:4f:8d:32:e2:b9:28:
96:52:09:37:e1:de:39:d9:59:0b:cc:aa:34:78:15:16:d9:5b:
d6:32:45:40:4e:34:ca:cf:7c:cb:d9:bf:f1:20:73:30:02:57:
c0:60:69:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:31 2026 by rpki-client