
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3230302e302f32312d3231203d3e203539303337.roa
File: 34332e3232372e3230302e302f32312d3231203d3e203539303337.roa (raw, json)
Hash identifier: hTp3pYGtwIReZ3YlyeCyX6yn0YsVyG831tK3z0ykMWU=
Subject key identifier: D9:B1:44:9F:D5:1D:AC:75:0E:27:E5:1D:17:C7:D3:14:80:25:04:7A
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 557E19B0BE4ADFAA192145EE4DB856AD804C2147
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3230302e302f32312d3231203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:39:05 +0000
ROA not before: Wed 27 May 2026 06:34:05 +0000
ROA not after: Wed 26 May 2027 06:39:05 +0000
asID: 59037
IP address blocks: 43.227.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:7e:19:b0:be:4a:df:aa:19:21:45:ee:4d:b8:56:ad:80:4c:21:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:34:05 2026 GMT
Not After : May 26 06:39:05 2027 GMT
Subject: CN=D9B1449FD51DAC750E27E51D17C7D3148025047A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f2:d4:da:c3:99:b8:b3:ac:40:0a:ba:08:a9:
8b:a0:f5:c3:50:86:8d:f8:d4:97:f2:13:9d:45:ed:
08:3f:f1:f8:40:9b:ed:a7:6d:20:73:a8:5b:26:bb:
b4:08:61:55:70:ff:3e:e6:1e:72:b5:14:a6:6d:ce:
a1:33:a6:9f:6c:c1:ed:b3:92:44:7d:9f:69:d1:d6:
3e:b0:d2:b5:53:ff:00:72:87:df:f6:03:dc:f0:4e:
fb:cf:fb:88:bf:94:d2:72:09:f4:7e:59:7b:0b:80:
2d:eb:e5:da:b1:01:fb:44:57:f3:e4:7e:ad:aa:0f:
15:8c:e6:1a:ab:0d:b7:34:66:34:0b:6a:bd:f5:a9:
21:25:62:7c:6d:5d:78:cf:2e:04:52:ee:38:8a:5c:
a6:7a:5b:c5:3c:c1:75:b5:3a:90:8c:94:ef:95:5d:
aa:bc:d0:d9:94:e8:3d:a0:aa:55:73:9d:f7:94:e1:
37:6d:02:61:e6:c5:92:18:97:88:fe:7d:ae:78:93:
73:e7:c1:7e:2c:8d:39:f8:96:b1:a8:63:00:4b:a6:
93:b9:c5:41:45:f7:d6:b8:f0:64:14:c6:45:63:d4:
08:e4:0d:12:22:94:4f:33:b9:43:76:af:fd:55:60:
1a:9b:c6:ed:df:77:1e:8a:aa:29:dc:71:e8:f5:69:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:B1:44:9F:D5:1D:AC:75:0E:27:E5:1D:17:C7:D3:14:80:25:04:7A
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3230302e302f32312d3231203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.200.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:1e:34:a0:5f:3c:b2:a8:3e:3c:8c:ce:70:69:c3:07:da:17:
85:04:54:29:6c:0f:f8:ac:16:51:41:59:44:88:34:33:65:f3:
15:04:8b:84:2c:cc:7e:da:b7:15:c5:9a:32:0f:af:af:f4:01:
30:8d:ac:d1:ff:a9:68:fc:b1:52:df:3f:f3:2a:a7:45:24:74:
93:f0:12:15:f5:29:2d:25:9a:8b:57:2b:1b:aa:15:c8:56:1f:
9a:7c:89:e4:a0:e9:e7:23:91:06:dc:26:f9:c8:5e:50:96:ff:
b2:95:01:db:c4:94:54:de:a2:b0:71:ee:c2:c1:81:3b:64:72:
87:b6:ba:93:6c:8f:51:f6:d5:6e:5f:39:fd:1e:c8:1f:29:2d:
71:ff:70:0d:63:4b:42:9b:70:c1:03:3d:1c:ea:72:ff:b9:7b:
12:1e:7c:c4:f6:8d:0a:f6:37:f7:f0:43:84:5a:18:4d:04:19:
b1:a3:57:97:df:88:08:52:e2:96:7a:d5:a4:00:82:4d:50:d2:
d5:b8:17:33:31:d5:7e:18:0e:ec:77:b4:25:43:ec:e2:d0:52:
2b:d0:68:20:27:4b:04:7e:64:93:24:8b:da:37:54:6b:7b:3f:
81:0f:ec:93:fc:f8:e7:f1:89:d2:63:9f:3b:71:e9:74:a0:9d:
9a:db:e7:41
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:51:57 2026 by rpki-client