
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa
File: 34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa (raw, json)
Hash identifier: LmeHeeCAFaWZQQr0mnPS05Zx5LmmawN/aUqwsweDBCc=
Subject key identifier: 49:26:65:1D:47:3B:98:8A:11:AB:79:C5:3C:D7:9D:ED:61:00:1D:A0
Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Certificate serial: 32998803A9A5E41A3E0104E64C9DAFC65A135138
Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa
Signing time: Thu 09 Apr 2026 02:00:17 +0000
ROA not before: Thu 09 Apr 2026 01:55:17 +0000
ROA not after: Thu 08 Apr 2027 02:00:17 +0000
asID: 131506
IP address blocks: 43.225.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 13 Apr 2026 19:12:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:99:88:03:a9:a5:e4:1a:3e:01:04:e6:4c:9d:af:c6:5a:13:51:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163
Validity
Not Before: Apr 9 01:55:17 2026 GMT
Not After : Apr 8 02:00:17 2027 GMT
Subject: CN=4926651D473B988A11AB79C53CD79DED61001DA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:b3:fd:34:63:9f:b7:1d:6c:f4:c4:10:07:c7:
3e:f8:6b:e7:a4:39:ae:2e:35:52:b1:97:63:f8:44:
c5:16:e0:10:81:6d:3d:bd:ee:6c:02:e6:32:af:78:
8c:66:76:2d:12:f2:ac:61:63:69:0c:30:81:a4:2f:
fa:e5:bb:c1:f5:75:84:bc:4e:93:e9:8a:65:11:7c:
7e:fe:98:a2:e3:bb:c3:34:c3:e5:92:b3:72:a1:a2:
fd:fa:b2:a9:2f:2a:43:c1:c7:8e:c5:9c:01:e5:87:
26:f6:9d:f1:46:03:33:b0:80:6e:d0:45:64:89:f0:
3f:33:36:4f:7f:27:0c:29:d6:65:34:c0:ab:6c:bd:
eb:82:d4:89:3f:d6:ea:db:14:90:c3:79:3b:9e:01:
fd:b3:be:16:3d:1c:9a:0d:91:4d:05:0c:e9:ce:3b:
c1:66:03:b4:ee:d3:ce:73:56:cf:0f:4d:7e:ce:6f:
5f:56:c8:0c:93:ba:c6:70:29:a1:d3:46:72:dd:b2:
62:d5:21:38:93:2d:03:e2:d4:b9:9e:cd:25:95:98:
c9:71:0a:c2:9b:8b:77:99:f3:c0:4b:6c:97:59:c2:
bd:d5:ed:84:e9:75:e9:df:43:bc:0b:83:2b:8a:57:
c6:93:5e:48:bc:84:33:a4:46:b6:a5:03:72:06:9d:
b6:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:26:65:1D:47:3B:98:8A:11:AB:79:C5:3C:D7:9D:ED:61:00:1D:A0
X509v3 Authority Key Identifier:
keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3231302e302f32332d3233203d3e20313331353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.210.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:c9:bb:99:6f:dc:31:5b:34:37:e4:1d:3d:d0:8f:a1:97:58:
27:53:b1:8d:fd:08:7f:73:c7:7d:fe:5d:18:ec:89:8e:9d:09:
18:ec:75:d7:e0:e8:83:59:5c:9b:72:26:f3:db:1f:35:5d:c2:
d4:fe:32:d6:a0:b3:da:50:6b:a0:d5:26:fe:38:18:57:59:26:
e9:3b:07:d4:3c:33:a1:03:cc:f1:f4:09:15:35:24:91:dc:f2:
4f:42:a7:3c:10:f2:88:c7:e9:44:10:4e:17:db:c3:e7:d1:3d:
c6:bf:a9:1b:6f:8b:07:f2:c3:2c:11:0c:45:d2:36:1f:5f:ab:
9b:10:8e:d5:c2:bc:6c:bc:df:db:8f:3f:e1:a4:f0:3e:b9:ac:
4c:b0:df:51:84:fe:05:c9:c8:b7:a2:40:cf:26:33:3a:d1:5c:
22:d7:03:67:72:fd:78:10:1c:85:1a:3c:8b:6b:8c:fe:1b:ab:
78:c3:bf:c2:e4:cd:14:3c:ed:ec:1e:64:16:00:83:a7:28:88:
35:18:79:37:0e:7f:0d:8e:1b:90:d7:8c:54:8c:97:0f:e3:b4:
81:6d:21:dd:58:ec:fe:f5:c0:33:3e:25:93:cb:6f:61:d6:50:
b6:22:00:f3:38:98:41:81:f8:3b:ea:80:d7:30:8e:c3:4c:e5:
43:12:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 12:24:17 2026 by rpki-client