
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e203536303436.roa
File: 34332e3234382e3132382e302f32302d3234203d3e203536303436.roa (raw, json)
Hash identifier: YOf0bSr4MFI4TJxOtY7hHe+xbX/Xx+j1JZ2QddjM7ts=
Subject key identifier: 96:44:0B:2E:84:FD:5D:95:52:42:B9:1A:F1:5D:01:AD:99:01:6B:BA
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 10C650B457FA3737341E00FB024A9F962B391E5F
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e203536303436.roa
Signing time: Tue 18 Aug 2026 02:20:54 +0000
ROA not before: Tue 18 Aug 2026 02:15:54 +0000
ROA not after: Tue 17 Aug 2027 02:20:54 +0000
asID: 56046
IP address blocks: 43.248.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:c6:50:b4:57:fa:37:37:34:1e:00:fb:02:4a:9f:96:2b:39:1e:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Aug 18 02:15:54 2026 GMT
Not After : Aug 17 02:20:54 2027 GMT
Subject: CN=96440B2E84FD5D955242B91AF15D01AD99016BBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:40:fb:18:1c:51:d9:36:92:68:3e:19:f6:d2:
06:27:a8:cf:b3:8f:07:d8:27:e9:0e:e0:97:94:39:
99:2d:22:46:8b:2d:7b:56:f3:bf:4b:ef:94:43:66:
ee:d0:73:64:23:20:a3:ec:cc:77:b5:32:14:07:02:
e4:87:58:ae:b4:39:d5:16:5a:08:d6:42:29:ff:f2:
b3:b1:eb:9e:de:4b:45:13:b9:ed:42:ac:a6:e6:f0:
b7:1a:1a:fe:52:9a:80:74:c0:b8:74:97:45:9f:f6:
80:34:56:d3:eb:94:da:a5:da:3a:ae:6b:ce:3a:2f:
97:ad:22:55:63:7f:c6:71:d1:8a:d8:72:1f:e3:c1:
50:f4:7b:9a:30:a3:a6:d0:ae:4b:38:0e:97:58:07:
d6:8a:67:c5:e6:5d:68:8e:87:c0:72:6e:26:dc:79:
f7:64:22:3d:9e:e1:53:08:6a:f1:63:1f:c2:9c:ef:
1b:e0:3e:3c:87:43:9c:f9:40:93:5f:65:fa:c6:f3:
69:e2:76:59:c0:b4:ed:06:31:38:fc:6b:69:f6:2d:
a9:cc:5e:78:96:00:90:9e:e5:8a:b4:6b:d4:1c:e2:
60:e3:8c:4c:48:a4:d1:b9:e8:5e:f7:a3:d0:4d:4e:
6d:8d:e9:53:bc:b9:0e:ef:b4:88:81:af:dd:48:8a:
18:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:44:0B:2E:84:FD:5D:95:52:42:B9:1A:F1:5D:01:AD:99:01:6B:BA
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e3132382e302f32302d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.128.0/20
Signature Algorithm: sha256WithRSAEncryption
52:a3:00:01:f3:e9:1f:d5:a2:de:65:04:22:0a:58:c4:4b:98:
b3:70:83:f1:54:26:b2:6b:49:a8:44:d5:95:d8:7d:e4:ce:15:
bd:77:cb:75:42:00:56:da:68:44:b0:3f:b1:62:39:d4:b4:5c:
48:d6:7b:e8:2c:10:a1:3e:30:7e:c7:b2:9a:9f:80:8c:fa:02:
32:6b:e0:5a:d8:55:3c:10:75:fe:56:1b:c1:2c:52:de:b3:9c:
a5:5e:7c:4b:70:49:6f:0b:5b:ff:00:fa:d9:d0:9a:41:21:27:
27:d8:47:80:bd:73:f0:4e:7f:9c:e1:5e:44:2d:da:9f:5d:3d:
18:b0:5f:4c:b0:2e:e5:75:d9:74:b8:66:1d:a7:4c:e1:f7:f4:
bf:cd:85:3c:e0:5d:1e:cc:11:a2:80:58:00:ff:d2:7d:58:48:
fc:19:bc:22:f7:fb:d0:d2:a8:89:99:5d:2d:d8:d8:b9:ac:06:
e9:ff:f3:74:a7:40:11:57:5c:09:9f:96:8a:22:fa:27:6b:a3:
5a:1e:75:5f:08:52:97:a6:0c:9d:4b:33:ff:55:91:15:09:f0:
b8:7e:f2:56:e8:10:f9:a3:8e:4e:01:c4:c0:b2:fc:5c:1b:ac:
23:1a:6a:40:f0:ea:f7:02:d4:f9:07:b6:8d:d7:a0:67:c2:58:
98:0a:de:78
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Sep 5 08:20:25 2026 by rpki-client