
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3232372e3235342e302f32332d3233203d3e2034383038.roa
File: 34332e3232372e3235342e302f32332d3233203d3e2034383038.roa (raw, json)
Hash identifier: cdPx20syskwekFlfeG9W3LsffSVTsSoPcPp0Zkm0kCM=
Subject key identifier: B6:F3:66:E2:2F:2A:75:BA:AA:C4:21:EE:68:21:AF:FC:94:B6:8D:D6
Certificate issuer: /CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Certificate serial: 410A7569306D35DFC4351A5A29E260EB506036D4
Authority key identifier: D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3232372e3235342e302f32332d3233203d3e2034383038.roa
Signing time: Thu 28 May 2026 07:41:22 +0000
ROA not before: Thu 28 May 2026 07:36:22 +0000
ROA not after: Thu 27 May 2027 07:41:22 +0000
asID: 4808
IP address blocks: 43.227.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:0a:75:69:30:6d:35:df:c4:35:1a:5a:29:e2:60:eb:50:60:36:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D569CE49ED940955318F718AEACD6D410BFF66B3
Validity
Not Before: May 28 07:36:22 2026 GMT
Not After : May 27 07:41:22 2027 GMT
Subject: CN=B6F366E22F2A75BAAAC421EE6821AFFC94B68DD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:ff:a2:37:22:4d:54:e1:d4:b8:55:dc:1c:
10:38:2e:6b:81:4b:cc:5c:1b:db:b9:af:3b:6c:56:
7d:cd:ea:75:c8:a5:2e:c1:8e:12:d0:85:50:f7:2c:
3a:ac:03:5d:74:73:7c:75:73:2b:ff:33:d4:70:da:
1a:49:d4:c1:ec:7d:d8:c6:2e:5a:1b:04:e5:4c:f5:
88:18:06:c3:e4:e0:56:e4:0b:78:45:f3:06:1b:c5:
84:30:56:04:c6:f5:16:ce:88:53:21:98:7c:4a:e8:
7d:a2:a4:59:c5:50:b2:af:6e:94:b3:27:f6:85:7e:
82:8d:87:2d:6c:25:20:e3:18:16:63:0b:94:45:6a:
9a:05:3f:2c:b3:da:80:20:a6:25:37:bd:ed:91:61:
30:31:d4:39:e9:09:95:a1:3b:f9:35:ce:ea:00:e5:
a4:ba:d7:75:b7:2f:cd:07:b0:2e:dc:4c:95:bd:b8:
95:51:cf:3e:e4:2e:f4:67:84:77:f0:19:91:ec:2d:
9a:8b:79:4c:25:11:70:af:42:3d:07:ae:5b:6d:79:
bf:d1:f0:6f:d7:3b:06:c3:c8:d3:24:56:24:e0:e7:
1c:12:56:66:61:83:0b:53:05:14:eb:6a:53:d8:cf:
4d:e3:09:b0:99:4b:48:f6:73:50:a2:df:03:f6:e9:
ab:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:F3:66:E2:2F:2A:75:BA:AA:C4:21:EE:68:21:AF:FC:94:B6:8D:D6
X509v3 Authority Key Identifier:
keyid:D5:69:CE:49:ED:94:09:55:31:8F:71:8A:EA:CD:6D:41:0B:FF:66:B3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/D569CE49ED940955318F718AEACD6D410BFF66B3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D569CE49ED940955318F718AEACD6D410BFF66B3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096330859092508673/0/34332e3232372e3235342e302f32332d3233203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.227.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:d8:1c:51:28:5f:c6:f2:d9:ca:d6:3b:23:73:16:dd:5e:ca:
94:74:44:99:6c:70:2e:1a:ad:1b:04:80:b0:b7:b1:d9:47:7f:
25:68:02:9e:02:02:09:0f:ec:e0:73:05:ca:72:84:4b:59:26:
40:e6:33:f9:91:88:e2:2d:f9:49:63:4c:e6:24:3f:eb:20:a6:
a0:60:7a:3a:5e:d3:87:e4:84:4a:43:78:af:b6:d7:34:5d:d4:
e1:76:43:71:83:a9:2f:b1:a8:5b:49:2b:0d:aa:31:e3:bd:0b:
14:74:f5:87:b9:2e:ba:43:7f:da:a3:bc:6a:c4:31:af:de:d1:
60:56:35:28:c6:93:0c:a7:1e:0b:a3:66:26:9c:2b:9a:e8:02:
fc:27:ca:bd:e9:fd:60:14:a0:e3:c5:0f:22:f8:ad:f4:fd:35:
fa:51:8b:e2:44:f8:ab:bc:93:f4:04:af:f3:db:2e:a8:2d:3b:
1f:b6:a9:24:41:a1:06:b3:ff:cf:3d:83:9e:49:13:49:24:28:
06:e8:9e:8a:3c:83:ff:b2:f5:7f:a0:24:f7:5c:e2:95:36:2f:
31:fb:64:fe:01:fb:64:a2:73:15:83:7c:72:fd:43:ac:3a:8e:
15:ad:78:0b:00:f2:6e:7a:41:d0:eb:8b:9e:30:60:a0:23:3e:
43:f9:4a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 29 22:56:25 2026 by rpki-client