
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139322e302f32332d3233203d3e203539303337.roa
File: 34332e3232372e3139322e302f32332d3233203d3e203539303337.roa (raw, json)
Hash identifier: vU4pF90ZrGQ3zsddjP+GRqubXjtS7E3VQnB1xgLN5W4=
Subject key identifier: E7:64:D3:80:48:0D:F9:22:F6:C5:83:9E:10:2B:ED:51:07:A4:4F:94
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 56843C701B7C087AEA1418901BE3253FA1254CAB
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139322e302f32332d3233203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:39:06 +0000
ROA not before: Wed 27 May 2026 06:34:06 +0000
ROA not after: Wed 26 May 2027 06:39:06 +0000
asID: 59037
IP address blocks: 43.227.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:84:3c:70:1b:7c:08:7a:ea:14:18:90:1b:e3:25:3f:a1:25:4c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:34:06 2026 GMT
Not After : May 26 06:39:06 2027 GMT
Subject: CN=E764D380480DF922F6C5839E102BED5107A44F94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b0:bc:44:8f:4d:25:b9:e7:35:85:d4:5b:27:
a2:77:54:d1:1c:34:ab:1b:6c:51:82:20:89:0d:95:
b4:d1:3f:8c:68:05:56:76:34:ae:ef:ad:a4:e1:61:
8f:6e:37:a3:4b:e9:b2:58:d2:b0:03:c7:75:40:08:
bd:ab:82:ba:ec:43:70:f3:f1:dc:5b:55:91:9e:d5:
7b:d3:bb:99:24:ac:4e:5c:97:da:24:d9:3c:86:f0:
b0:89:9a:5f:72:9f:44:67:00:99:97:e5:c0:91:fb:
70:bb:af:0b:c8:03:9d:6b:42:28:8c:79:78:7f:3b:
af:60:e8:a9:76:20:32:4b:a1:f4:09:78:fa:05:2e:
57:34:ba:e8:a6:d6:51:1b:7d:3c:77:94:7a:22:a5:
21:ea:80:e1:f1:fe:29:f6:a7:c8:26:e9:a2:70:1c:
ef:74:76:50:ff:67:8e:03:09:5a:25:a3:80:06:ea:
51:9f:2e:d1:ea:45:53:36:63:71:ee:c1:6e:a3:8e:
5a:cc:6d:91:c5:89:d9:56:cf:47:8c:4d:99:52:27:
85:5e:c5:5a:6b:0a:f5:76:57:da:38:cc:88:76:ef:
76:3a:b2:ff:b7:63:0a:8f:be:c0:1e:0f:d3:3a:5c:
41:70:67:36:ad:af:0a:00:4a:b0:29:5a:e4:7b:a9:
57:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:64:D3:80:48:0D:F9:22:F6:C5:83:9E:10:2B:ED:51:07:A4:4F:94
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139322e302f32332d3233203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.192.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:20:a9:77:82:01:57:e3:c7:e8:51:7c:fc:a1:eb:e3:f9:89:
50:57:ec:90:de:99:63:2c:6b:37:e3:9d:bb:27:ee:d9:95:27:
3c:fc:2f:8e:58:66:bd:9b:77:93:d1:92:a6:75:25:00:05:0a:
87:3c:4c:69:1e:bd:69:04:c1:d3:87:0a:e2:54:65:13:43:cb:
2d:c7:1e:60:0c:46:a8:22:cf:36:43:8e:c6:4a:d2:d1:ad:7b:
ff:2f:6e:f7:72:0c:1b:0f:18:6c:1d:f7:5f:72:59:99:3e:5e:
30:8d:92:89:92:b6:2a:d7:4e:a4:e6:23:c9:a3:c2:1e:eb:f8:
e0:ff:a0:1d:e3:88:c2:e9:41:25:16:24:e5:f2:3a:09:67:f7:
77:11:cc:06:c1:94:76:a2:aa:dd:fb:20:95:66:c6:ed:ef:3c:
67:20:7a:dd:eb:f4:0b:08:6f:f8:fa:82:31:9b:bf:9e:d0:2d:
ab:51:a6:2d:3e:4b:57:e7:ed:f5:4d:8e:55:99:d9:46:1f:a5:
d8:30:a4:55:a3:67:52:18:d7:1e:3b:a9:1d:bf:31:28:08:32:
63:e9:28:f0:ec:35:1e:0b:27:b9:84:42:2e:b3:fb:7b:20:e5:
7e:ff:67:82:7a:11:37:f2:d4:4e:40:ef:77:b9:97:00:3b:96:
fc:95:44:d6
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:50:33 2026 by rpki-client