
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203338303139.roa
File: 34332e3234312e3138302e302f32322d3232203d3e203338303139.roa (raw, json)
Hash identifier: zoSIijyIzxMHIyqM6fuIarjhtGW5rdAeJUWmqZfTCYQ=
Subject key identifier: 1A:61:BF:81:2E:63:B2:73:4D:40:5B:81:72:53:F4:62:63:F7:54:B6
Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial: 27B090DABD487B6BF19E0300D72539530EC9AF08
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203338303139.roa
Signing time: Tue 23 Jun 2026 07:37:25 +0000
ROA not before: Tue 23 Jun 2026 07:32:25 +0000
ROA not after: Tue 22 Jun 2027 07:37:25 +0000
asID: 38019
IP address blocks: 43.241.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 06:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:b0:90:da:bd:48:7b:6b:f1:9e:03:00:d7:25:39:53:0e:c9:af:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Validity
Not Before: Jun 23 07:32:25 2026 GMT
Not After : Jun 22 07:37:25 2027 GMT
Subject: CN=1A61BF812E63B2734D405B817253F46263F754B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:87:f4:41:ee:45:4f:fe:11:26:09:b1:c5:
9c:46:f9:51:0f:b7:74:dc:45:9f:d7:59:cb:98:76:
c6:f5:db:0a:7f:04:a2:39:f3:4d:c3:b3:d0:06:d3:
e5:99:1e:51:a7:fe:5f:ad:66:c6:42:ef:6a:98:af:
9f:4e:5f:75:a6:25:be:6b:d4:d4:39:9b:57:53:62:
08:de:5f:80:8d:d5:55:3f:95:5b:0e:25:72:fc:17:
32:f6:af:4e:be:a9:57:dc:7a:ba:1a:86:26:25:d6:
25:9a:78:30:91:ac:ae:58:25:a3:1d:3b:c3:bb:1f:
23:60:49:dd:a5:9e:1e:ff:4a:cb:13:a6:18:2c:d3:
b8:3f:7a:4c:44:72:aa:fe:e8:8d:be:6a:fd:ba:a5:
3c:03:cd:92:1b:a8:2d:d4:76:da:03:3c:1a:e9:4b:
0f:83:8d:f7:57:b3:5b:04:1b:ca:2a:ad:0f:f9:d4:
e4:d6:32:b4:35:7f:87:da:87:73:99:0d:2f:1f:8a:
04:e5:53:b3:34:bb:4c:a6:d7:d3:15:e8:d5:92:35:
3b:3c:e6:73:39:b4:b5:56:d1:af:a8:c5:3a:16:60:
b8:ec:22:56:ba:13:42:8e:43:2f:ac:36:2e:b3:24:
3a:dd:bb:2d:65:84:8f:d9:7f:13:fc:ad:bb:af:51:
f7:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:61:BF:81:2E:63:B2:73:4D:40:5B:81:72:53:F4:62:63:F7:54:B6
X509v3 Authority Key Identifier:
keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203338303139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.180.0/22
Signature Algorithm: sha256WithRSAEncryption
46:a9:57:27:ab:cb:23:be:82:83:51:e8:c3:b7:b9:e0:77:ac:
a7:c8:6a:76:00:68:f4:11:b0:64:10:1a:76:11:a7:82:60:da:
25:0f:d1:5f:ac:ba:90:98:94:5f:0c:29:7d:94:8d:19:6d:f2:
26:ec:32:28:ec:bd:7a:7e:b9:ef:06:b9:54:5d:2d:92:fb:84:
3d:fe:17:c6:5c:01:f2:e7:4b:5c:0e:50:c1:32:46:0e:fe:02:
f8:a7:6d:21:70:df:1f:cc:23:d2:16:74:2c:b0:17:7c:c0:b0:
00:5b:80:73:11:8d:df:08:84:66:71:88:dc:e3:bf:f8:54:d1:
cc:5c:37:ec:79:07:11:6a:1c:c3:22:ae:02:6c:4e:34:b0:0f:
b2:66:e8:de:20:d9:8b:0c:8b:58:c7:f9:6f:66:db:5f:d9:08:
e9:f6:5c:54:0a:06:36:64:13:c9:98:a5:e2:48:47:5b:11:31:
5d:0f:ff:c4:ff:02:8e:0e:e8:b1:a0:96:d0:00:a5:e3:64:92:
a6:9c:ef:01:b4:ea:55:a3:a6:a7:46:62:10:f7:cc:74:b6:3c:
13:56:3f:d2:29:f9:99:ed:fa:41:e6:98:74:77:8c:2e:a5:17:
14:e8:57:b0:50:1d:41:9a:cd:a2:da:1e:0b:d3:10:e7:83:47:
1f:7c:bb:53
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIUJ7CQ2r1Ie2vxngMA1yU5Uw7JrwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDcz
QjEwNUNEODAeFw0yNjA2MjMwNzMyMjVaFw0yNzA2MjIwNzM3MjVaMDMxMTAvBgNV
BAMTKDFBNjFCRjgxMkU2M0IyNzM0RDQwNUI4MTcyNTNGNDYyNjNGNzU0QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn34f0Qe5FT/4RJgmxxZxG+VEP
t3TcRZ/XWcuYdsb12wp/BKI5803Ds9AG0+WZHlGn/l+tZsZC72qYr59OX3WmJb5r
1NQ5m1dTYgjeX4CN1VU/lVsOJXL8FzL2r06+qVfceroahiYl1iWaeDCRrK5YJaMd
O8O7HyNgSd2lnh7/SssTphgs07g/ekxEcqr+6I2+av26pTwDzZIbqC3UdtoDPBrp
Sw+DjfdXs1sEG8oqrQ/51OTWMrQ1f4fah3OZDS8figTlU7M0u0ym19MV6NWSNTs8
5nM5tLVW0a+oxToWYLjsIla6E0KOQy+sNi6zJDrduy1lhI/ZfxP8rbuvUfd5AgMB
AAGjggIUMIICEDAdBgNVHQ4EFgQUGmG/gS5jsnNNQFuBclP0YmP3VLYwHwYDVR0j
BBgwFoAU+RbXHPKKf8MOcF/hFHb/RzsQXNgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
OTk3ODUxNTMyNDg2MjQ2Ny8wL0Y5MTZENzFDRjI4QTdGQzMwRTcwNUZFMTE0NzZG
RjQ3M0IxMDVDRDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvRjkxNkQ3MUNGMjhBN0ZDMzBFNzA1RkUxMTQ3NkZGNDczQjEwNUNEOC5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu
Y25uaWMuY24vcmVwby9BMTA5OTk3ODUxNTMyNDg2MjQ2Ny8wLzM0MzMyZTMyMzQz
MTJlMzEzODMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzMzODMwMzEzOS5yb2Ew
GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC
AAEwBgMEAivxtDANBgkqhkiG9w0BAQsFAAOCAQEARqlXJ6vLI76Cg1How7e54Hes
p8hqdgBo9BGwZBAadhGngmDaJQ/RX6y6kJiUXwwpfZSNGW3yJuwyKOy9en657wa5
VF0tkvuEPf4XxlwB8udLXA5QwTJGDv4C+KdtIXDfH8wj0hZ0LLAXfMCwAFuAcxGN
3wiEZnGI3OO/+FTRzFw37HkHEWocwyKuAmxONLAPsmbo3iDZiwyLWMf5b2bbX9kI
6fZcVAoGNmQTyZil4khHWxExXQ//xP8Cjg7osaCW0ACl42SSppzvAbTqVaOmp0Zi
EPfMdLY8E1Y/0in5me36QeaYdHeMLqUXFOhXsFAdQZrNotoeC9MQ54NHH3y7Uw==
-----END CERTIFICATE-----
Generated at Tue Jul 14 21:56:42 2026 by rpki-client