
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e203233363530.roa
File: 34332e3234382e37362e302f32322d3234203d3e203233363530.roa (raw, json)
Hash identifier: dE5KBuEdxaP+cmPlwFFz9k3bcWMMkmCAjonkfCkklX0=
Subject key identifier: B5:46:74:E9:C7:4D:31:8C:20:C6:9D:3F:BA:9D:A2:42:BE:EB:EC:F0
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 02CE143C3E153844BB844B3384DFEF0192C65A22
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e203233363530.roa
Signing time: Mon 20 Apr 2026 05:41:44 +0000
ROA not before: Mon 20 Apr 2026 05:36:44 +0000
ROA not after: Mon 19 Apr 2027 05:41:44 +0000
asID: 23650
IP address blocks: 43.248.76.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Apr 2026 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ce:14:3c:3e:15:38:44:bb:84:4b:33:84:df:ef:01:92:c6:5a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Apr 20 05:36:44 2026 GMT
Not After : Apr 19 05:41:44 2027 GMT
Subject: CN=B54674E9C74D318C20C69D3FBA9DA242BEEBECF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bb:88:9c:ac:9a:f1:10:24:79:a5:99:ea:30:
ca:78:cd:37:f3:de:57:bd:29:fe:ab:57:fb:c4:dc:
69:6d:9d:e1:eb:9b:b5:38:88:4b:92:f7:01:9f:0f:
78:88:b0:f0:d3:fd:05:fc:7c:06:63:5a:38:38:57:
92:c7:0e:0e:a6:1a:d8:74:b3:70:a9:a1:bc:ea:4f:
01:50:62:8a:cb:f6:5f:12:d8:ab:8d:f3:d6:40:d1:
e1:20:57:13:2c:c5:c3:16:01:fa:62:98:58:f6:74:
a2:8a:97:e4:06:e6:f4:e0:45:46:4c:89:2a:a5:a6:
2b:16:d7:9a:59:65:01:74:f3:eb:f0:6c:59:6b:a1:
31:64:c5:41:73:7c:27:22:55:0c:a4:03:a5:cd:9f:
68:dc:35:60:58:58:5c:8b:57:1f:a8:a7:d4:e3:02:
d3:6e:05:2e:d8:48:cd:45:20:5c:80:71:ad:e6:06:
94:fc:89:7e:d7:20:3b:a8:84:2f:69:4a:b9:c2:e6:
fe:ff:69:6d:0b:e3:1a:58:aa:49:84:8a:82:c7:6d:
3a:a2:b5:c1:74:2f:d0:0f:27:4f:08:31:af:ba:51:
dd:0c:28:51:fb:d6:97:b9:e7:ef:2e:a1:56:d4:54:
72:50:e2:fd:f1:92:e7:2c:a8:68:a2:d8:0e:1f:7f:
cc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:46:74:E9:C7:4D:31:8C:20:C6:9D:3F:BA:9D:A2:42:BE:EB:EC:F0
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e203233363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.76.0/22
Signature Algorithm: sha256WithRSAEncryption
77:85:38:df:ab:1d:44:7c:76:94:6f:d4:c8:60:4a:61:23:9b:
b1:39:7f:05:fc:d6:d7:75:4a:ee:1d:8d:45:6e:73:ae:96:10:
50:0c:fb:33:fa:ad:80:61:86:99:40:8a:61:53:0a:4e:1d:29:
c3:6e:d9:c4:7a:68:82:3c:9a:9e:19:a4:b1:3b:16:0f:dd:93:
d1:f6:d1:e9:c1:e9:41:36:e4:03:dc:9e:cc:3e:fe:d2:06:84:
8a:ea:74:03:31:6e:34:6f:cd:af:9a:41:9e:4b:e2:3c:47:eb:
d2:3e:92:f3:19:8d:8d:23:0b:9c:55:56:52:f7:fa:24:ed:6f:
cb:6f:f2:a0:ee:73:b0:e9:68:44:46:cb:1e:24:de:47:81:cf:
1a:22:f0:5e:68:67:02:08:91:30:4e:ff:a1:8d:a8:f5:0b:b4:
59:70:1f:20:c9:30:76:d5:9e:cd:be:6f:8d:82:1e:a3:56:e7:
81:0c:a3:b1:b2:c7:d8:4c:3c:60:3c:73:99:c1:50:c2:de:2c:
a4:bd:e5:1d:7a:96:27:e2:fc:73:46:bb:6a:31:db:d2:e3:15:
df:69:73:3f:cb:3c:16:5a:8c:a3:64:96:27:6b:81:1a:20:16:
9f:2c:a7:6a:79:fc:67:c3:a7:64:4b:84:63:13:c1:0c:f9:5a:
38:64:05:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:54:48 2026 by rpki-client