
$ rpki-client -vvvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa
File: 34332e3234382e39362e302f32312d3234203d3e203536303436.roa (raw, json)
Hash identifier: bg6zPuU8Ssz8W/nlu3pvUl1iE6RuAke/SXjsH15qWRU=
Subject key identifier: 28:5F:B8:2D:58:8E:49:53:31:42:8D:F7:69:3A:11:55:4E:5E:8F:4B
Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Certificate serial: 25FDE02E1027A13F743F3681BD93BA37C29181C4
Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa
Signing time: Tue 18 Aug 2026 02:20:54 +0000
ROA not before: Tue 18 Aug 2026 02:15:54 +0000
ROA not after: Tue 17 Aug 2027 02:20:54 +0000
asID: 56046
IP address blocks: 43.248.96.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 06 Sep 2026 15:25:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:fd:e0:2e:10:27:a1:3f:74:3f:36:81:bd:93:ba:37:c2:91:81:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6
Validity
Not Before: Aug 18 02:15:54 2026 GMT
Not After : Aug 17 02:20:54 2027 GMT
Subject: CN=285FB82D588E495331428DF7693A11554E5E8F4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9f:d1:77:0a:08:20:e0:ed:0c:51:2f:61:d4:
24:fd:b5:a2:df:16:01:f0:04:ee:90:31:86:72:53:
df:bf:9b:d8:7f:4e:5d:b3:42:81:71:dd:56:4b:bd:
a8:5e:ef:ad:e2:de:9c:e5:75:56:e6:93:8d:10:35:
a0:95:0f:b1:a9:79:e1:cf:6d:08:23:c6:4d:80:37:
81:30:ca:ac:1e:77:b4:08:61:c2:1b:60:88:fc:1f:
ec:f0:dc:e3:87:ae:20:a0:1e:fa:ed:cf:ac:21:86:
ff:39:a7:d1:1d:04:04:88:ff:22:4e:73:60:30:91:
be:8d:ee:54:06:70:83:9f:ad:f5:29:02:2a:9f:76:
a1:51:51:d4:31:61:4a:02:10:12:da:2f:89:52:6a:
d0:d6:d0:97:f6:65:79:82:92:97:1c:15:c5:1b:f2:
18:39:79:5d:26:28:15:b1:e3:44:fc:9e:e2:6f:b2:
91:a8:f9:09:4b:7f:6c:00:bc:da:eb:24:00:f2:f5:
41:d4:f6:34:dc:23:bd:5f:87:7a:f8:e5:61:4b:72:
03:0c:4f:7c:40:fb:2f:72:05:a8:95:1b:a2:8c:1b:
18:e8:3f:c2:ce:67:5f:07:7b:ff:a1:56:20:4a:1c:
6b:4e:af:df:e8:00:bc:bd:c6:10:2c:0e:3a:fd:1c:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5F:B8:2D:58:8E:49:53:31:42:8D:F7:69:3A:11:55:4E:5E:8F:4B
X509v3 Authority Key Identifier:
keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e39362e302f32312d3234203d3e203536303436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.248.96.0/21
Signature Algorithm: sha256WithRSAEncryption
a6:11:54:33:c8:c5:a6:a1:4d:9b:cd:f0:2a:d8:35:5a:e0:54:
c3:e1:4a:ee:b2:f8:3b:d9:63:10:c7:63:05:38:01:75:9f:1f:
fc:5a:30:11:84:df:01:00:c4:8e:67:ab:09:6e:6c:96:c3:4f:
d0:74:c0:20:70:9f:c8:1f:74:45:85:ca:96:a4:c3:ca:5c:db:
d9:9c:f0:64:7e:d7:82:2a:bf:e0:a0:c6:0d:6a:4e:64:6a:79:
00:84:ed:af:84:f6:be:2a:c7:2b:71:ac:18:e5:df:d5:55:53:
36:f8:f2:f2:36:78:e1:0a:7b:a8:83:12:8f:f7:6e:5c:05:d6:
3f:b8:a1:c2:0b:cb:54:38:67:c8:07:44:03:06:9b:74:67:d7:
9d:fe:73:df:a6:56:3a:20:12:0d:cd:3c:05:35:ed:c3:a8:84:
c3:f2:7a:c4:65:35:b9:d2:a3:ad:e8:d4:cb:b9:86:ac:90:2d:
3b:45:c3:00:72:a1:76:cc:f2:37:b0:36:db:9a:c9:a6:0a:57:
ab:c5:bf:6b:7b:f1:d1:3e:2d:2a:73:f7:ce:1d:b4:c2:c1:4f:
68:c2:58:42:c8:69:44:73:9a:84:3f:e0:ff:01:27:5f:b7:1a:
83:cf:5b:0a:50:9b:84:23:7a:8b:38:ae:ea:ac:7c:22:7d:32:
de:a7:a3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:20:31 2026 by rpki-client