
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203538353432.roa
File: 34332e3234312e3138302e302f32322d3232203d3e203538353432.roa (raw, json)
Hash identifier: Rn7Hf2921Dc5UYgYrqbetrAyxHkG4VSopTyreGn+WM0=
Subject key identifier: 9E:2E:39:01:5C:72:95:C1:78:71:72:57:11:C3:CE:FB:88:07:47:0B
Certificate issuer: /CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Certificate serial: 13E99C8316055C6BA2E5124715EFC9E3E096BF17
Authority key identifier: F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203538353432.roa
Signing time: Tue 23 Jun 2026 07:37:25 +0000
ROA not before: Tue 23 Jun 2026 07:32:25 +0000
ROA not after: Tue 22 Jun 2027 07:37:25 +0000
asID: 58542
IP address blocks: 43.241.180.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 06:36:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:e9:9c:83:16:05:5c:6b:a2:e5:12:47:15:ef:c9:e3:e0:96:bf:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F916D71CF28A7FC30E705FE11476FF473B105CD8
Validity
Not Before: Jun 23 07:32:25 2026 GMT
Not After : Jun 22 07:37:25 2027 GMT
Subject: CN=9E2E39015C7295C17871725711C3CEFB8807470B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bd:98:b1:b4:a8:e2:30:75:b5:d4:67:0b:a0:
4c:d4:ef:98:08:1e:bf:de:b4:10:bb:c5:12:14:3d:
c3:03:6c:0c:13:d3:4a:ad:be:f9:8d:39:cd:e8:bd:
66:df:0a:18:ef:32:6f:6d:b2:72:9f:a1:cd:97:30:
2d:5b:de:26:85:89:af:26:86:15:b2:4f:3e:a4:82:
fe:43:95:44:72:da:8f:73:e6:08:bf:b6:ed:8c:de:
4e:10:dd:fa:32:94:46:c4:a5:8a:94:6b:c3:23:0a:
3b:a9:36:d6:38:d1:7d:13:7b:f4:d7:9d:4c:9a:c2:
ab:58:20:8a:97:8e:c3:7d:2d:21:5e:4c:dd:ee:3b:
90:5f:d0:52:82:64:7a:0c:6e:1b:f3:ad:c2:68:c1:
5d:80:9d:cb:9e:68:26:b6:a9:b7:0f:ac:e6:49:aa:
50:7e:0e:a7:47:a6:33:86:fc:a3:18:96:30:d6:7d:
05:48:6e:43:d0:1b:fb:1e:8a:32:aa:42:d8:33:f3:
25:06:3f:39:bd:22:bb:d3:bc:03:ba:08:59:d3:3a:
67:4d:7f:29:20:9f:fd:76:32:25:6a:34:90:ae:12:
f1:67:26:ac:bd:3c:4b:40:5f:02:32:c2:da:ec:d9:
5f:5f:cf:da:f2:7e:d0:6a:a2:90:c9:34:46:5e:29:
ca:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:2E:39:01:5C:72:95:C1:78:71:72:57:11:C3:CE:FB:88:07:47:0B
X509v3 Authority Key Identifier:
keyid:F9:16:D7:1C:F2:8A:7F:C3:0E:70:5F:E1:14:76:FF:47:3B:10:5C:D8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/F916D71CF28A7FC30E705FE11476FF473B105CD8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/F916D71CF28A7FC30E705FE11476FF473B105CD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1099978515324862467/0/34332e3234312e3138302e302f32322d3232203d3e203538353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.241.180.0/22
Signature Algorithm: sha256WithRSAEncryption
62:b5:50:02:b4:0f:6d:97:a3:1a:b8:41:aa:f8:dc:a8:ff:b6:
6d:bc:50:76:25:ba:f2:79:e6:e1:5b:a5:77:91:7e:f3:b1:b5:
0f:ad:ba:09:09:79:54:1b:1f:92:43:ca:07:65:9f:56:90:eb:
ed:23:c3:fe:f3:40:6b:10:44:f8:26:9d:ca:0a:11:7c:07:67:
2e:bb:5b:bc:78:60:79:86:15:a9:86:07:1a:7a:c2:c9:79:ad:
d8:fc:cb:aa:34:94:4a:65:69:f8:86:fe:94:50:5a:d7:0b:2e:
79:cb:77:40:a2:89:de:f7:72:ea:fb:9a:9a:92:be:9d:69:6e:
3d:8f:a3:a6:79:a1:e3:e3:c9:ac:fd:77:64:a2:f8:59:19:36:
04:27:90:a3:5a:a0:a4:59:d5:15:d1:6a:1f:92:5d:61:0c:34:
74:4c:6f:7b:0a:cc:c3:90:0f:08:dd:07:56:91:97:81:77:bb:
ab:c5:23:07:77:ae:a6:29:0a:aa:38:7a:0c:0b:2d:b7:e9:d6:
36:b3:52:02:cd:de:87:60:45:37:d0:88:6e:cb:50:8f:d6:ee:
1e:de:1f:64:7e:e2:4d:71:49:c0:12:81:5b:3c:7a:34:9f:b3:
83:30:71:68:a0:58:b4:02:a9:6c:cc:eb:8a:6f:c9:ae:1b:4c:
78:f9:d9:19
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 14 20:58:50 2026 by rpki-client