
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3135322e302f32322d3232203d3e203539303337.roa
File: 34332e3232372e3135322e302f32322d3232203d3e203539303337.roa (raw, json)
Hash identifier: QIz3TKxpZgnoUcA1hl9WKpzeLVBTQ+JGjmxOuKy4GrQ=
Subject key identifier: 3D:9B:9D:45:C6:37:C7:79:D4:9E:D3:4D:E2:16:6E:2C:2C:70:9A:DD
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 1656EA81FC96D0D3C278C7AE0D2BD9EE6769CC35
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3135322e302f32322d3232203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:39:06 +0000
ROA not before: Wed 27 May 2026 06:34:06 +0000
ROA not after: Wed 26 May 2027 06:39:06 +0000
asID: 59037
IP address blocks: 43.227.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:56:ea:81:fc:96:d0:d3:c2:78:c7:ae:0d:2b:d9:ee:67:69:cc:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:34:06 2026 GMT
Not After : May 26 06:39:06 2027 GMT
Subject: CN=3D9B9D45C637C779D49ED34DE2166E2C2C709ADD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d5:f1:62:b9:c3:f4:5f:3e:00:c0:c2:53:e3:
e1:2d:58:77:f4:9d:0f:a4:7b:fb:92:bd:85:7c:02:
80:0f:e7:be:dc:9e:8c:e5:4a:8a:62:ff:b1:56:f3:
ae:c9:d4:19:d5:7b:b1:c7:1c:7a:a2:e3:fe:82:49:
25:75:53:8d:67:03:43:90:b3:ec:4c:82:69:f1:5d:
a7:24:f0:73:71:70:ba:41:61:8c:2f:33:46:e7:bc:
9d:42:39:96:c4:de:2b:de:bc:0d:1e:fa:ac:cb:ad:
77:23:d5:f7:5a:cd:cc:38:b9:78:4c:d1:12:2a:85:
77:bc:08:1e:a9:5d:59:e4:1a:0f:fd:af:97:c1:38:
94:47:ee:22:67:d1:60:56:e5:40:23:9f:0d:96:fb:
28:60:8f:ae:be:4a:d7:46:76:83:e7:51:bc:b4:55:
41:9d:89:8d:2e:ce:17:39:0e:d1:4c:b3:ac:53:80:
1d:42:78:af:27:53:4e:95:ef:e6:15:6c:d4:40:6d:
1b:e6:ad:2a:9b:88:8f:07:95:e7:bf:59:9e:72:f1:
5e:d8:7d:7a:76:a0:62:51:10:58:e7:7f:82:d9:f4:
69:62:de:c8:af:0d:b2:4f:13:5d:9a:be:15:ad:2e:
f0:3f:90:8d:b7:c6:c9:bc:b0:2d:59:ba:c6:0f:c7:
9d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9B:9D:45:C6:37:C7:79:D4:9E:D3:4D:E2:16:6E:2C:2C:70:9A:DD
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3135322e302f32322d3232203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.152.0/22
Signature Algorithm: sha256WithRSAEncryption
81:1c:92:98:60:ab:7b:d2:83:1e:91:fb:f6:5d:09:1d:60:d6:
18:16:70:e6:ef:50:e6:54:88:a7:18:bf:47:1b:15:0b:bd:95:
a5:d3:40:91:3f:67:22:cc:ca:1f:7d:b5:5e:b3:41:1f:ed:6a:
71:19:92:ed:4e:e5:65:b6:f1:0a:86:73:50:26:4d:e8:8a:24:
b6:a8:55:01:0a:e8:f5:dc:9f:e5:c4:9b:fa:ab:4d:cb:73:20:
6d:c7:85:3e:27:98:54:94:5c:48:7f:26:1d:d2:9c:5a:22:db:
98:66:59:61:d6:6b:ff:2f:fe:aa:89:46:3f:fc:6a:98:50:ab:
71:f8:ba:a3:8f:b3:76:00:b4:e1:82:41:10:6a:26:6d:c4:c2:
5c:5a:d6:c3:90:15:66:7b:5b:4c:6e:70:f7:a0:54:a6:11:b7:
3b:ff:72:94:ed:82:a5:7c:9f:70:24:d9:2d:48:ac:6a:1d:cf:
de:28:fb:84:2e:fe:37:22:9e:be:1b:bc:a0:20:c2:34:35:ed:
41:c8:30:d1:ca:6a:a5:dc:d5:44:da:2e:0c:ae:79:f2:f7:dd:
54:af:2d:74:aa:d6:fc:4a:a2:cb:2c:8b:a7:07:28:c5:7c:97:
4b:27:ea:db:85:30:91:20:30:88:c1:ec:3d:b8:73:8b:b1:a1:
d9:aa:72:e7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 22:56:32 2026 by rpki-client