
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3233302e37322e302f32322d3232203d3e203539303337.roa
File: 34332e3233302e37322e302f32322d3232203d3e203539303337.roa (raw, json)
Hash identifier: bPz3VrGQ0lJMgjUZRCwdL4EUgo9KQg3aX63XFyyxHYo=
Subject key identifier: E8:70:E6:CE:D2:FE:43:18:4D:EB:63:13:61:72:89:3F:4A:22:BD:F0
Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B
Certificate serial: 208B4816C5B0D90AA7EBE5F001097936A226A84D
Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3233302e37322e302f32322d3232203d3e203539303337.roa
Signing time: Wed 27 May 2026 06:56:10 +0000
ROA not before: Wed 27 May 2026 06:51:10 +0000
ROA not after: Wed 26 May 2027 06:56:10 +0000
asID: 59037
IP address blocks: 43.230.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:28:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8b:48:16:c5:b0:d9:0a:a7:eb:e5:f0:01:09:79:36:a2:26:a8:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B
Validity
Not Before: May 27 06:51:10 2026 GMT
Not After : May 26 06:56:10 2027 GMT
Subject: CN=E870E6CED2FE43184DEB63136172893F4A22BDF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:93:fb:bc:a0:37:bc:06:27:e3:e7:8c:d5:d7:
b3:ba:79:9c:8d:34:18:80:ed:90:23:30:1d:5e:8c:
9f:04:71:2c:c0:71:9d:e6:be:1c:c9:e8:84:25:18:
d9:37:db:aa:8c:d3:0a:2a:0a:3a:7d:e9:93:64:50:
72:44:26:cf:f9:50:8e:d5:4f:7e:37:55:92:1d:78:
a9:f7:6d:b8:ee:14:10:97:63:b3:77:8f:ff:c9:cd:
69:17:a2:df:d1:a0:5e:8b:51:55:53:e2:19:54:8d:
1d:88:b0:73:a7:7f:d1:b9:28:75:63:47:3f:bc:a5:
a9:fd:74:c9:e4:01:08:69:50:a3:72:40:7c:9f:4b:
1a:d0:3e:ab:91:ce:c5:95:02:a2:4b:34:9d:ef:89:
96:c6:e0:17:b2:5f:e7:95:d7:67:0a:12:f9:ca:0f:
d8:5d:40:51:60:05:62:6b:29:7b:0c:7e:62:72:2f:
82:b1:ac:58:3e:0b:ed:a8:ba:d5:b8:3e:50:a4:69:
82:ed:5c:cc:74:a7:fd:ba:cc:5c:69:7e:ce:cf:ef:
cc:75:37:4b:d7:52:95:ab:ff:29:08:6c:89:b6:05:
e6:e4:b5:af:86:69:b1:ce:d6:16:6f:db:d4:04:b8:
eb:cd:1d:89:bb:1a:ba:c8:4a:97:77:0d:5d:31:33:
be:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:70:E6:CE:D2:FE:43:18:4D:EB:63:13:61:72:89:3F:4A:22:BD:F0
X509v3 Authority Key Identifier:
keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3233302e37322e302f32322d3232203d3e203539303337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.72.0/22
Signature Algorithm: sha256WithRSAEncryption
19:a9:60:3e:c1:c1:6d:1c:9b:2d:7c:cc:e7:d9:fb:1c:e4:96:
64:7d:c6:c6:33:2c:8e:a0:f5:3f:7d:d1:2e:23:3c:7b:8a:21:
68:ed:47:a4:cc:43:5e:0d:ba:e8:c2:16:d1:c9:c1:41:27:4c:
8d:92:b4:c0:c1:7a:fb:54:7c:13:9d:6e:1d:b4:c6:84:57:cc:
c2:09:1b:f8:65:2c:3a:0c:79:d0:24:8f:55:2c:2b:1b:d5:a9:
b3:b4:46:c5:36:94:0e:a3:c6:12:c8:f2:7a:1d:07:88:31:4b:
b2:c1:26:c0:05:a2:4e:1c:f3:35:9a:41:f9:9f:ff:64:5b:e8:
d2:4e:64:bc:81:a7:c1:b8:6a:a2:19:e4:c3:c7:51:24:d1:95:
f5:37:ff:f8:80:13:4d:eb:1d:59:46:a6:70:82:ec:ac:0e:a8:
d9:03:fe:13:b6:b6:0d:2f:37:b0:30:f7:df:bc:02:72:41:c6:
1a:dd:fb:7d:83:31:ac:09:f4:32:a1:84:99:a9:c5:fb:49:e9:
6c:b5:9b:4c:69:dc:f1:1e:b2:4f:7d:8b:7b:9c:5d:b3:e8:af:
03:ca:74:5e:9f:2e:30:77:52:72:ae:0a:25:bf:36:d1:8c:a5:
68:a6:e0:ed:5a:9e:f9:db:a4:75:da:e0:f2:5b:2c:4c:ad:f3:
b9:b6:ad:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 23:51:59 2026 by rpki-client