
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e37322e302f32332d3233203d3e20313334373731.roa
File: 34332e3234302e37322e302f32332d3233203d3e20313334373731.roa (raw, json)
Hash identifier: niOaBgNt3J592u2TM2mQUyFJ98uVCICr8V+xTMvty0g=
Subject key identifier: EC:C9:6D:C1:5C:E4:21:A9:C0:AA:50:52:49:52:0E:C3:B8:0D:D5:B3
Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Certificate serial: 306C99B21193D1900A4C5DE4C9F0D7F87058826F
Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e37322e302f32332d3233203d3e20313334373731.roa
Signing time: Thu 28 May 2026 02:36:14 +0000
ROA not before: Thu 28 May 2026 02:31:14 +0000
ROA not after: Thu 27 May 2027 02:36:14 +0000
asID: 134771
IP address blocks: 43.240.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 12:59:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:6c:99:b2:11:93:d1:90:0a:4c:5d:e4:c9:f0:d7:f8:70:58:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796
Validity
Not Before: May 28 02:31:14 2026 GMT
Not After : May 27 02:36:14 2027 GMT
Subject: CN=ECC96DC15CE421A9C0AA505249520EC3B80DD5B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d2:71:7d:0b:0d:07:16:18:ab:cc:9e:0e:50:
cb:fe:be:c0:e3:2f:95:6b:42:9c:15:84:bb:83:b9:
41:0c:aa:8f:c7:e6:2d:b2:39:22:cd:e3:a0:d2:dc:
d0:36:f3:2e:71:e2:e2:81:03:b0:86:54:39:8f:bb:
3e:9b:af:07:02:24:c8:43:f5:b2:3a:24:a1:82:33:
4b:c9:df:d7:bb:bc:72:68:b0:72:88:f3:17:b5:32:
be:aa:dc:57:52:b9:ba:80:f3:3c:93:87:82:eb:de:
9c:2f:8d:08:e1:8b:7c:69:f6:3d:7f:ae:07:2d:e4:
4a:5a:62:c8:56:48:9b:b4:89:0b:28:80:9b:60:33:
f6:e7:ff:0c:7f:ac:0c:9e:ee:58:0e:46:fc:c0:86:
e3:c2:c8:82:b2:6d:2d:d1:3d:6f:69:6d:45:49:f9:
7e:e3:83:9e:67:e1:1a:c1:b6:3c:d2:f2:29:f7:9d:
77:34:30:c1:1a:d9:7e:98:2c:ba:b8:2a:d8:69:af:
6f:a0:ee:8a:4e:60:6c:a8:36:38:cd:42:28:a4:09:
a1:27:92:ac:3a:85:d4:91:27:88:41:1e:6d:70:31:
65:7f:1a:28:20:1e:99:0c:b7:28:67:18:94:df:a0:
2b:36:8c:47:42:eb:44:35:a3:5e:a1:8a:ec:b8:eb:
8f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C9:6D:C1:5C:E4:21:A9:C0:AA:50:52:49:52:0E:C3:B8:0D:D5:B3
X509v3 Authority Key Identifier:
keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e37322e302f32332d3233203d3e20313334373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.72.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:fc:a8:a8:db:3a:e9:5b:d4:54:21:84:26:7c:3d:ce:a7:07:
31:8f:14:f3:e5:7d:ee:1a:f1:80:4a:fe:fd:60:37:66:e1:24:
6e:47:bb:6a:26:7d:49:cb:af:de:17:b9:a6:fe:d9:18:ca:fe:
2f:25:ce:03:24:01:96:76:88:7a:06:91:ac:a7:2c:c1:98:0e:
3f:78:69:ca:da:39:70:9a:d9:87:53:54:e8:bb:12:db:2a:df:
7f:f3:1f:38:9c:75:e9:d7:8b:97:58:ce:87:a5:2d:5d:72:33:
d1:e5:37:c4:9c:2e:19:5a:b6:02:ce:3c:2d:b1:de:ff:e9:97:
5f:30:ec:1e:70:aa:ee:5f:c0:cf:c8:f8:8e:3a:55:ef:f2:1c:
91:dd:b0:5b:cb:77:90:dc:a0:61:b7:c5:50:aa:3f:95:b4:d8:
be:82:d3:7f:d0:c5:9b:08:fa:60:b7:50:af:8f:b4:15:ab:a1:
95:b9:b0:17:83:78:a4:7a:c7:f5:29:6a:c0:15:cf:7a:9a:e4:
82:9d:46:10:a3:5a:0e:2a:5b:7b:5c:44:d3:42:4e:18:7c:36:
d3:cc:4b:1a:1b:51:52:0b:b6:0c:03:2e:97:07:d8:17:7f:d6:
2e:db:fc:96:59:a6:04:49:de:5d:fc:19:c1:3e:be:f4:29:5b:
35:93:61:65
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri May 29 23:53:07 2026 by rpki-client