
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203233373234.roa
File: 34332e3233312e3136332e302f32342d3234203d3e203233373234.roa (raw, json)
Hash identifier: pcpus7lziotmJzbcDYGefZ16mC5ZQevR5pHmZItnRKo=
Subject key identifier: E0:36:BF:90:DD:2B:80:D1:39:A6:67:01:29:9C:38:B2:39:12:61:F9
Certificate issuer: /CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Certificate serial: 77BE57E5F7D6496B1E677592B4E833DEE74EC948
Authority key identifier: B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203233373234.roa
Signing time: Wed 20 May 2026 02:59:52 +0000
ROA not before: Wed 20 May 2026 02:54:52 +0000
ROA not after: Wed 19 May 2027 02:59:52 +0000
asID: 23724
IP address blocks: 43.231.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 30 May 2026 07:35:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:be:57:e5:f7:d6:49:6b:1e:67:75:92:b4:e8:33:de:e7:4e:c9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B688E80F89CAEC6A8C84A7E51838424287ABCA89
Validity
Not Before: May 20 02:54:52 2026 GMT
Not After : May 19 02:59:52 2027 GMT
Subject: CN=E036BF90DD2B80D139A66701299C38B2391261F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:1a:3b:e0:24:7f:d6:db:af:0c:6a:0c:a8:
30:89:e0:c3:40:60:87:ff:e5:1f:a1:d9:31:b3:59:
7e:95:6f:11:69:44:3b:12:79:bc:97:3f:13:35:2e:
88:b7:94:ee:b1:8a:eb:3e:0c:d8:db:3d:3f:83:02:
a2:2f:5b:d3:21:08:e9:a1:c5:30:3d:53:1d:47:4f:
9e:71:40:f4:e3:4e:17:20:e2:6d:53:51:f9:e3:da:
8a:6c:e4:aa:2e:29:89:4b:28:c9:93:55:b5:75:64:
98:4c:3d:5c:40:5c:a2:a6:cf:55:3d:04:5d:76:8c:
01:85:66:71:c8:1d:95:53:66:62:a1:b1:8c:60:14:
90:0d:89:4c:4c:13:60:5a:d8:51:93:fa:e3:0f:0b:
0f:3e:d6:ff:e7:75:7c:57:22:30:20:44:c0:8f:db:
2a:0f:4c:d6:52:cd:a6:f2:d3:fe:a1:13:d8:2d:c2:
c2:d2:ee:1d:a5:93:87:c0:65:5c:9b:95:02:61:6e:
dd:cf:67:0d:47:b6:32:9c:a9:44:39:d4:f3:24:ce:
7a:93:b0:f3:6d:6c:ef:7b:2c:51:bf:ba:7f:a0:f5:
07:b3:f9:0c:1b:c6:52:86:1a:92:98:1a:45:ee:c7:
fe:c7:d3:de:88:8e:a9:a8:bb:d0:1d:3d:21:45:c6:
78:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:36:BF:90:DD:2B:80:D1:39:A6:67:01:29:9C:38:B2:39:12:61:F9
X509v3 Authority Key Identifier:
keyid:B6:88:E8:0F:89:CA:EC:6A:8C:84:A7:E5:18:38:42:42:87:AB:CA:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/B688E80F89CAEC6A8C84A7E51838424287ABCA89.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B688E80F89CAEC6A8C84A7E51838424287ABCA89.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097047430748176387/0/34332e3233312e3136332e302f32342d3234203d3e203233373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.231.163.0/24
Signature Algorithm: sha256WithRSAEncryption
57:c5:19:15:fe:c7:2e:a3:d7:0a:89:1c:d2:3d:f5:78:fc:37:
2d:fe:e0:51:4e:bb:4b:df:29:cd:92:c4:60:f7:b1:3d:ba:33:
fb:49:40:65:0e:b4:e3:47:e0:08:e9:e0:52:d9:3d:05:de:dc:
45:00:ca:04:b1:38:5b:9f:c9:88:b2:f6:c5:26:05:3f:a5:1f:
79:ed:f1:cb:d3:a1:a6:f2:4b:88:73:dc:d9:ab:61:62:f3:19:
1c:3b:b2:56:df:6e:e6:d6:48:79:f4:99:63:dd:21:69:53:de:
65:a7:66:39:fb:61:9b:f9:a4:b4:58:86:6e:7e:c3:c3:2c:ed:
73:f2:0d:58:b4:b3:b0:f4:bd:53:6c:ef:97:7a:a8:92:c9:6f:
f6:53:c6:25:d1:8b:1a:11:dd:67:33:19:79:79:17:ee:ee:00:
43:77:30:36:13:34:e4:e9:fa:19:14:42:12:11:cd:80:c6:91:
b0:49:18:73:b1:49:f1:1b:ca:32:8f:f0:01:e9:2f:83:33:99:
a5:8e:01:36:61:0a:8a:27:15:63:a7:72:10:88:02:09:9c:77:
9a:53:b0:f6:95:aa:8e:2c:7d:ef:03:39:56:8c:f8:cf:91:a4:
3b:e3:0e:9a:c3:ae:2b:41:b7:3e:49:25:c3:2b:ac:5b:b4:96:
6e:1b:7d:d0
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 30 00:42:53 2026 by rpki-client