
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa
File: 34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa (raw, json)
Hash identifier: mI2r7zoGl3B06ATUJWbVG4P4Kp/guwKwSUfh90y6bTw=
Subject key identifier: FC:75:49:F8:22:4A:49:6F:6F:D0:1E:E9:4E:4A:87:84:86:41:03:01
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 0D11A2E3E5E70220D7A8DAE88D7700499EF6B728
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa
Signing time: Mon 20 Apr 2026 05:49:16 +0000
ROA not before: Mon 20 Apr 2026 05:44:16 +0000
ROA not after: Mon 19 Apr 2027 05:49:16 +0000
asID: 153911
IP address blocks: 43.248.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:11:a2:e3:e5:e7:02:20:d7:a8:da:e8:8d:77:00:49:9e:f6:b7:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:44:16 2026 GMT
Not After : Apr 19 05:49:16 2027 GMT
Subject: CN=FC7549F8224A496F6FD01EE94E4A878486410301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9a:1f:d2:31:fc:63:f8:66:4b:3d:15:b8:0e:
6d:55:88:ff:8b:f0:88:d1:51:27:06:d8:bd:51:b3:
ef:ec:cd:89:a2:1a:ef:f5:48:46:4a:6e:3e:3d:d8:
77:36:a9:65:03:45:75:ae:4a:39:41:1f:99:5b:71:
fc:e9:94:41:78:5b:78:0f:61:f3:0d:03:9b:3b:22:
c0:59:96:f8:b1:c9:2a:5e:bf:53:63:5e:2a:a2:c2:
1f:80:2d:81:89:5f:51:de:a3:e9:37:9b:3b:e1:cf:
9b:fb:c3:be:e0:d9:2a:51:ed:12:0e:24:18:19:c8:
13:74:b5:2b:fe:f7:65:53:d3:a3:7b:65:23:62:3d:
64:7d:40:14:ce:3e:5b:8d:74:f1:ff:8a:b5:dd:c8:
a6:05:cf:79:52:49:e4:e1:ca:42:9e:3a:8a:33:ed:
ff:14:7e:e6:21:aa:e7:06:40:86:ed:8f:5f:26:d9:
f6:eb:a3:7a:67:34:e6:ed:46:14:af:e8:4f:a8:df:
d7:ea:c2:74:67:79:b1:82:2d:ba:05:d7:f8:11:cd:
9a:bc:54:74:91:d8:1e:b7:e6:54:d2:54:d8:7d:00:
d1:9d:4a:91:00:b0:2c:c8:ad:d1:7f:a5:65:a9:58:
b7:e1:5c:0b:74:80:60:7e:e1:ff:70:2d:95:ad:4e:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:75:49:F8:22:4A:49:6F:6F:D0:1E:E9:4E:4A:87:84:86:41:03:01
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3131362e302f32322d3234203d3e20313533393131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.116.0/22
Signature Algorithm: sha256WithRSAEncryption
70:6e:8a:23:a1:59:17:f7:4f:b1:69:59:62:13:24:29:64:3f:
1a:03:41:29:d8:26:44:ef:ac:cf:1a:7e:e9:a1:b1:38:b6:ae:
a7:3e:f2:57:e4:bf:fe:a9:4f:c7:e9:da:25:16:f2:10:5e:a3:
8c:77:01:dd:06:10:13:51:24:44:2d:47:96:2d:ef:63:fd:d8:
74:10:65:82:7a:58:cd:81:eb:21:d1:d0:d5:52:42:9e:c6:ec:
88:c2:21:72:b4:d0:4e:4e:af:4d:06:00:78:a8:be:43:e4:58:
21:f1:3a:da:3d:4b:e1:99:97:65:e9:0f:e6:2a:d0:0e:b0:ce:
dc:e9:cb:3b:85:24:a7:71:b5:27:a5:0c:0d:f0:c9:88:41:6b:
aa:bf:2d:19:28:4b:38:0e:68:16:61:18:80:40:99:68:c2:87:
50:e3:b0:f2:d8:8d:34:7d:a5:e4:e2:da:f6:80:48:9d:57:39:
01:de:66:77:b6:0d:0f:ce:f3:4f:06:70:4e:c8:b2:d6:ec:93:
c5:b2:8c:d3:c0:d3:3c:27:6b:8a:b8:49:aa:e1:4f:ff:81:f2:
c7:45:3b:08:75:22:02:45:eb:eb:72:28:f5:bc:15:6d:e0:3e:
62:1e:66:c7:3d:33:b7:89:a8:61:4f:f3:d4:40:9a:9b:bf:bd:
37:7c:c8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:39:09 2026 by rpki-client