
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132322e302f32332d3234203d3e203538343631.roa
File: 34332e3232352e3132322e302f32332d3234203d3e203538343631.roa (raw, json)
Hash identifier: uFj+oSr8t0Kdek4kXEBahNF59mkx6Jk4Bc9GuvMqt4g=
Subject key identifier: 4C:C4:DE:04:41:69:89:8E:75:55:FD:D0:5F:87:F6:CF:80:63:44:89
Certificate issuer: /CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Certificate serial: 58CD77B1DB71D62F91F95BC967D1EE281F3C6196
Authority key identifier: 10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132322e302f32332d3234203d3e203538343631.roa
Signing time: Wed 10 Jun 2026 09:03:02 +0000
ROA not before: Wed 10 Jun 2026 08:58:02 +0000
ROA not after: Wed 09 Jun 2027 09:03:02 +0000
asID: 58461
IP address blocks: 43.225.122.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:cd:77:b1:db:71:d6:2f:91:f9:5b:c9:67:d1:ee:28:1f:3c:61:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1065E9E54D1C1537CE34B5EE445B93476EFDD00F
Validity
Not Before: Jun 10 08:58:02 2026 GMT
Not After : Jun 9 09:03:02 2027 GMT
Subject: CN=4CC4DE044169898E7555FDD05F87F6CF80634489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:62:5c:4e:45:55:2a:dc:18:5e:7f:c6:96:a5:
29:aa:a2:09:90:21:3c:18:4f:3c:c1:34:36:a5:ef:
51:3d:c1:51:e3:f4:15:b9:d2:4e:b6:87:35:d1:0b:
1a:a4:9e:e5:2f:2f:e0:9e:dc:08:0f:e1:b0:5a:2d:
14:99:3a:7d:5e:93:d0:94:86:56:05:88:0a:ae:fd:
7d:9d:9c:36:55:51:df:99:fa:c0:15:fe:be:24:52:
d2:5b:d2:bc:c6:39:2a:f3:b4:9c:2c:4c:b4:05:42:
f1:26:03:12:1a:4d:70:59:83:f6:a3:f3:43:37:33:
91:74:56:37:43:bb:60:b0:88:61:29:40:fe:e0:49:
ee:9e:3d:4c:77:a3:4a:32:38:64:55:0c:c2:14:f0:
67:10:46:4a:75:55:2b:ee:91:1f:73:82:9c:92:c7:
30:7e:81:03:cc:4d:89:94:90:c0:14:3a:f6:e2:fd:
55:dc:37:27:8e:6a:5f:d3:ff:a3:e7:d5:56:b8:3a:
9d:32:ec:5d:fb:32:35:af:cc:7c:32:e5:94:22:37:
ca:4b:14:90:b8:19:ed:f8:78:ec:a1:93:63:64:74:
6f:44:0f:92:24:7e:f4:ec:4f:0a:04:3a:43:c7:37:
77:72:ec:02:5d:84:3b:02:57:25:df:48:88:bd:fd:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:DE:04:41:69:89:8E:75:55:FD:D0:5F:87:F6:CF:80:63:44:89
X509v3 Authority Key Identifier:
keyid:10:65:E9:E5:4D:1C:15:37:CE:34:B5:EE:44:5B:93:47:6E:FD:D0:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/1065E9E54D1C1537CE34B5EE445B93476EFDD00F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096727752351940609/0/34332e3232352e3132322e302f32332d3234203d3e203538343631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.225.122.0/23
Signature Algorithm: sha256WithRSAEncryption
75:34:06:94:13:dd:de:86:3b:cc:47:9a:a6:cd:30:f4:cc:73:
90:c4:c3:a0:a2:08:82:6a:69:0a:7d:9a:fe:3a:3c:c2:9f:fb:
f2:3f:31:e4:79:c6:f9:1b:e4:5b:1f:26:c9:75:31:fd:6c:68:
a9:92:59:3a:cd:40:83:10:d3:b5:bc:16:77:47:1a:90:47:c6:
00:60:7c:78:67:7a:5b:a1:5b:c7:be:a2:7f:b5:19:be:bd:32:
5c:0b:47:72:0c:4c:56:37:42:21:24:76:07:f2:ed:98:11:b9:
99:8b:74:4c:18:00:44:87:da:40:f0:1d:f2:d1:69:02:e8:19:
2a:2c:5e:55:98:36:8a:dd:c1:b1:78:6d:10:67:61:e4:4a:84:
5b:df:b2:f4:d2:a2:11:4c:c5:f0:87:a6:b0:b0:8e:63:e8:4a:
65:51:56:73:f0:85:93:b4:19:e5:69:fc:e6:a4:42:83:f8:26:
8b:cb:e0:d9:3b:1e:55:e2:17:d5:de:a4:21:a0:84:cd:0b:10:
b0:11:ac:64:cb:62:e6:d9:5f:1f:8a:ec:6f:20:28:ef:95:13:
34:56:43:3c:f0:5d:b2:e9:1d:46:e9:26:8c:3c:a7:8a:c5:81:
d3:43:44:00:3e:ea:a3:8a:21:ed:d8:a0:24:a1:ed:6b:b0:62:
d1:95:bb:82
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:24 2026 by rpki-client