
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3135382e302f32332d3233203d3e203539303337.roa
File: 34332e3232372e3135382e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier: xLUQrK7HXMisNWpcI4murhTAbAVLoUH7WMnjC6mgx+k=
Subject key identifier: 3B:69:C0:9F:6B:71:6F:78:A4:F3:DE:46:AF:85:A0:9A:20:EA:9A:5B
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 33EE0A7A0F2C561889D50F70E13041A865E14175
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3135382e302f32332d3233203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:56:11 +0000
ROA not before: Wed 27 May 2026 06:51:11 +0000
ROA not after: Wed 26 May 2027 06:56:11 +0000
asID: 59037
IP address blocks: 43.227.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ee:0a:7a:0f:2c:56:18:89:d5:0f:70:e1:30:41:a8:65:e1:41:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:51:11 2026 GMT
Not After : May 26 06:56:11 2027 GMT
Subject: CN=3B69C09F6B716F78A4F3DE46AF85A09A20EA9A5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:da:90:02:75:46:69:0b:da:09:85:e8:10:
e6:d7:e2:b9:94:43:9f:9e:de:52:d1:ef:f9:40:73:
83:94:14:f8:14:70:12:87:6d:eb:7a:f3:ce:4e:a7:
86:dd:9c:aa:31:a5:94:59:b5:c3:8a:e3:87:df:a2:
6f:ab:c1:1e:00:c6:2c:06:07:71:cb:0e:16:a2:e9:
42:e8:ab:76:57:4b:6c:90:a9:7f:15:e5:30:72:09:
83:ba:d3:6a:23:4a:c2:bf:aa:6d:be:80:4e:c2:0e:
54:a3:02:8a:ca:d4:ee:63:77:5a:f3:15:a9:ce:a4:
1f:10:82:af:63:6a:d6:9d:1c:1f:47:5a:a4:8b:cc:
a0:1a:4f:a5:d5:19:bc:d0:2f:a8:6b:69:30:5f:04:
40:aa:44:be:1c:b4:44:a0:e7:3b:29:c3:2f:14:96:
42:b6:48:db:7a:a6:35:f7:7f:87:f4:d6:ba:8d:98:
45:a5:77:2f:44:ff:3c:5c:25:7d:45:c0:6c:8d:f5:
dd:79:11:d6:56:62:cc:4e:09:ce:f7:29:36:df:57:
20:d1:55:ed:b0:ab:de:46:70:19:05:93:d1:52:52:
57:20:fc:93:d3:64:b5:f0:58:a4:6c:a6:c9:b3:44:
c3:b4:15:69:86:8e:23:d0:b4:c3:e2:35:b4:7a:1d:
98:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:69:C0:9F:6B:71:6F:78:A4:F3:DE:46:AF:85:A0:9A:20:EA:9A:5B
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3135382e302f32332d3233203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.158.0/23
Signature Algorithm: sha256WithRSAEncryption
54:e0:3a:12:af:39:79:f5:61:18:da:11:e3:4a:ad:12:17:17:
a3:3b:e5:ab:cb:d1:7f:42:d4:f7:f7:a8:71:7f:8a:16:c9:bc:
36:cf:e5:d2:b3:dd:96:00:a1:07:c4:fe:5a:7c:3b:1c:c3:3d:
13:7a:71:7c:4e:b1:c2:e4:38:9a:5f:ab:9b:0a:50:3f:ff:72:
2a:d0:f4:32:2d:60:79:c5:f9:99:ba:98:10:e5:39:a2:3b:e6:
5d:c4:d8:91:14:41:5e:e5:32:e5:e7:e1:e4:1b:7d:5f:6e:12:
0c:e2:08:e6:90:fb:13:e3:82:ca:90:4f:2e:70:93:32:8c:85:
77:e5:cf:32:8a:22:8f:c1:f9:0d:6d:5c:23:e8:83:c7:f0:0d:
73:d8:f6:a9:5b:8d:28:d7:b0:85:42:d6:20:31:b0:02:fa:ec:
9a:e1:d6:e8:ad:49:1e:47:dc:5f:c1:33:7c:70:8a:92:00:90:
85:a6:1b:96:22:0e:59:70:c2:b0:94:6e:5d:e9:a4:e8:5c:7b:
21:e1:4e:1b:9b:93:b2:ec:97:4c:e8:f9:a7:17:12:9f:66:15:
f7:c3:f2:af:51:7a:5d:4b:b6:d4:85:53:00:80:aa:66:66:70:
8b:73:ea:98:5e:51:35:bf:e8:af:97:37:a3:c9:12:b5:a0:6a:
c7:44:f6:a7
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUM+4Keg8sVhiJ1Q9w4TBBqGXhQXUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2
M0FFMTEzQjAeFw0yNjA1MjcwNjUxMTFaFw0yNzA1MjYwNjU2MTFaMDMxMTAvBgNV
BAMTKDNCNjlDMDlGNkI3MTZGNzhBNEYzREU0NkFGODVBMDlBMjBFQTlBNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEdqQAnVGaQvaCYXoEObX4rmU
Q5+e3lLR7/lAc4OUFPgUcBKHbet6885Op4bdnKoxpZRZtcOK44ffom+rwR4AxiwG
B3HLDhai6ULoq3ZXS2yQqX8V5TByCYO602ojSsK/qm2+gE7CDlSjAorK1O5jd1rz
FanOpB8Qgq9jatadHB9HWqSLzKAaT6XVGbzQL6hraTBfBECqRL4ctESg5zspwy8U
lkK2SNt6pjX3f4f01rqNmEWldy9E/zxcJX1FwGyN9d15EdZWYsxOCc73KTbfVyDR
Ve2wq95GcBkFk9FSUlcg/JPTZLXwWKRspsmzRMO0FWmGjiPQtMPiNbR6HZgHAgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUO2nAn2txb3ik895Gr4WgmiDqmlswHwYDVR0j
BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3
RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5NjMwMTE0OTM3MzM5OTA0MS8xLzM0MzMyZTMyMzIz
NzJlMzEzNTM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzUzOTMwMzMzNy5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEASvjnjANBgkqhkiG9w0BAQsFAAOCAQEAVOA6Eq85efVhGNoR40qtEhcX
ozvlq8vRf0LU9/eocX+KFsm8Ns/l0rPdlgChB8T+Wnw7HMM9E3pxfE6xwuQ4ml+r
mwpQP/9yKtD0Mi1gecX5mbqYEOU5ojvmXcTYkRRBXuUy5efh5Bt9X24SDOII5pD7
E+OCypBPLnCTMoyFd+XPMooij8H5DW1cI+iDx/ANc9j2qVuNKNewhULWIDGwAvrs
muHW6K1JHkfcX8EzfHCKkgCQhaYbliIOWXDCsJRuXemk6Fx7IeFOG5uTsuyXTOj5
pxcSn2YV98Pyr1F6XUu21IVTAICqZmZwi3PqmF5RNb/or5c3o8kStaBqx0T2pw==
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:38 2026 by rpki-client