
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136322e302f32342d3234203d3e2034383038.roa
File: 34332e3233312e3136322e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: ejDFxPmWT+05HCia7pY1Rse7RbdQUNfTamQE0Gdm3Jo=
Subject key identifier: 95:D7:C1:FC:65:FF:EA:A0:16:CE:B4:7F:FE:1C:78:E5:75:CA:8E:D1
Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial: 44C9944A8AC1FA346F5D31BC6BF424129D1C0072
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136322e302f32342d3234203d3e2034383038.roa
Signing time: Wed 20 May 2026 02:59:50 +0000
ROA not before: Wed 20 May 2026 02:54:50 +0000
ROA not after: Wed 19 May 2027 02:59:50 +0000
asID: 4808
IP address blocks: 43.231.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:c9:94:4a:8a:c1:fa:34:6f:5d:31:bc:6b:f4:24:12:9d:1c:00:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Validity
Not Before: May 20 02:54:50 2026 GMT
Not After : May 19 02:59:50 2027 GMT
Subject: CN=95D7C1FC65FFEAA016CEB47FFE1C78E575CA8ED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:71:d9:4c:d6:7a:bd:3c:9c:56:64:8f:6b:
72:63:e1:98:77:79:22:c5:6b:fb:e4:d1:9d:3a:4c:
f4:65:59:c9:9c:11:ec:56:0b:90:3d:9d:52:2c:43:
5f:e9:a0:d6:64:ee:d5:6f:96:e9:33:94:b9:4f:65:
86:69:bd:65:a7:f1:7c:6f:2e:37:27:9e:aa:f0:b5:
9c:f4:78:d7:a2:61:3e:be:c0:39:01:98:2b:56:49:
e3:3c:a7:54:55:1c:43:8b:82:4e:87:15:c6:18:ca:
29:93:d3:53:76:0c:b7:e6:f6:9d:be:dd:d4:01:21:
10:4a:4a:8c:5c:d8:cc:9f:9a:f6:cc:16:a3:31:f3:
5d:e8:3e:72:a9:76:0e:46:13:bc:d8:77:e6:2f:d9:
2c:5c:3b:ef:4d:2c:91:1d:eb:c7:c8:83:3d:81:38:
47:ef:75:0d:17:44:9f:fe:5b:dd:ca:9a:31:39:58:
c6:8b:d3:13:99:26:bd:1e:f3:28:0c:bb:65:1a:7e:
f3:92:23:d4:40:f0:ee:39:4d:03:65:ff:13:ab:d9:
3a:45:05:70:7e:ee:4f:21:90:86:5f:2c:17:d9:12:
e8:9b:c5:7c:84:13:04:e7:50:f5:5e:86:ca:1b:5a:
65:3c:e6:e6:8c:d8:47:36:a4:14:b1:00:75:35:44:
c9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D7:C1:FC:65:FF:EA:A0:16:CE:B4:7F:FE:1C:78:E5:75:CA:8E:D1
X509v3 Authority Key Identifier:
keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136322e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.231.162.0/24
Signature Algorithm: sha256WithRSAEncryption
19:08:11:0e:dc:44:87:27:55:4c:3d:c8:f6:cd:80:a9:4c:95:
10:a8:cc:fc:ec:8e:9a:45:db:ce:25:fd:53:e5:09:e4:fc:f8:
7f:0f:d8:63:48:de:cd:dd:96:f2:9c:98:9d:db:54:3f:d1:df:
e6:84:3b:47:3e:36:b4:3c:ed:6c:c0:2a:9f:44:82:0f:52:79:
6c:00:60:a8:09:54:ad:47:07:65:b2:f6:1d:e4:99:60:bf:88:
bb:65:ff:02:13:ea:ab:63:f3:99:65:f4:b2:1c:de:4f:15:47:
ff:70:23:ee:21:80:27:37:1f:71:d8:65:cf:9f:84:92:1a:d2:
65:82:98:68:e3:36:5a:35:35:ab:e9:4c:f6:a3:45:5a:ad:22:
6e:e2:61:38:7a:46:47:c7:07:3b:9e:43:a0:16:b8:c3:93:ec:
b9:3c:79:96:c3:97:6e:6e:82:2e:11:51:fc:84:dc:6f:b0:59:
2b:7f:c4:bd:f4:08:4c:46:4b:4b:ba:20:35:a6:44:64:37:95:
1b:31:c9:74:35:f9:1f:1a:ed:41:43:14:2c:b9:73:f8:4a:4a:
b0:e5:be:e3:e7:bf:a6:01:56:1a:63:c6:56:ea:0c:f8:e1:1d:
ea:93:e3:0c:39:16:b3:e3:aa:18:cd:fb:a0:05:bb:49:05:53:
96:67:d6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:47 2026 by rpki-client