
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108379782258622481/0/34332e3235302e32382e302f32322d3232203d3e2030.roa
File: 34332e3235302e32382e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: Dwg0AMc8vqTt2/APQLB8BZVnqH8sUz6MYb9gl8qRr6w=
Subject key identifier: D7:3D:4B:B9:14:18:95:9C:B7:E8:75:FB:C8:79:9C:FD:9C:B5:ED:D4
Certificate issuer: /CN=B4E055792301140D1D1A5A462561EA2D919B364F
Certificate serial: 0CDA6C5053A0EA5F703B4C8D80ADF39BDAF879D8
Authority key identifier: B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/34332e3235302e32382e302f32322d3232203d3e2030.roa
Signing time: Sun 17 May 2026 13:13:09 +0000
ROA not before: Sun 17 May 2026 13:08:09 +0000
ROA not after: Sun 16 May 2027 13:13:09 +0000
asID: 0
IP address blocks: 43.250.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 23 May 2026 23:26:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:da:6c:50:53:a0:ea:5f:70:3b:4c:8d:80:ad:f3:9b:da:f8:79:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B4E055792301140D1D1A5A462561EA2D919B364F
Validity
Not Before: May 17 13:08:09 2026 GMT
Not After : May 16 13:13:09 2027 GMT
Subject: CN=D73D4BB91418959CB7E875FBC8799CFD9CB5EDD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:24:48:8e:29:9d:e3:79:3f:f7:94:1b:86:79:
29:f0:6a:42:79:f3:93:b1:8c:0a:eb:a3:8b:cd:74:
42:a2:fb:ee:9a:93:8b:82:0c:37:c1:38:41:c8:f5:
d6:c7:a0:7d:29:ee:7f:42:45:57:fa:a3:4d:26:6b:
94:7c:ea:47:d0:75:9f:a6:5b:5b:cc:89:71:5d:0e:
f9:3a:05:b6:45:1e:1b:d0:a2:e7:d1:33:e6:6c:b2:
bd:e6:64:04:71:9d:cd:d0:03:36:d9:e8:e3:e4:73:
2e:c1:aa:d5:8b:75:6a:2c:ca:2a:e4:e0:d3:7c:25:
9f:08:8c:90:07:92:af:85:6e:00:d7:68:9e:85:83:
b3:03:9a:20:12:38:d6:72:be:c2:2c:ee:5a:4b:8a:
ef:12:e9:1f:33:8b:0b:26:aa:ed:9f:54:20:db:31:
b9:71:95:c0:79:b6:e1:20:be:8d:ed:6d:3f:6f:e4:
bb:26:31:a8:e6:3d:93:19:82:5a:33:f2:f1:9f:10:
59:5f:a3:08:21:5c:be:c7:f3:56:fe:1d:ab:5f:70:
d7:8e:1a:17:9f:ae:6c:93:07:bc:57:7f:77:7a:f7:
00:22:9e:6e:24:17:3b:64:e6:d0:b7:41:f2:5b:05:
cd:a6:70:a3:41:6b:0c:fe:bf:e2:12:a8:15:e9:f2:
a5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:4B:B9:14:18:95:9C:B7:E8:75:FB:C8:79:9C:FD:9C:B5:ED:D4
X509v3 Authority Key Identifier:
keyid:B4:E0:55:79:23:01:14:0D:1D:1A:5A:46:25:61:EA:2D:91:9B:36:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/B4E055792301140D1D1A5A462561EA2D919B364F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B4E055792301140D1D1A5A462561EA2D919B364F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108379782258622481/0/34332e3235302e32382e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.250.28.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:b4:54:8d:18:ac:c5:72:c2:f9:7d:f2:d9:71:b5:49:7b:82:
16:d9:90:16:17:a9:90:d1:57:d2:da:ed:2f:c0:eb:53:30:96:
35:b0:cd:d8:cc:1c:8c:46:bc:cb:35:99:4c:3e:6a:37:7d:7b:
0e:14:06:4d:be:fb:85:11:db:6e:bb:f1:73:1d:73:aa:29:04:
17:67:e2:c3:18:12:cc:f7:67:18:67:91:c4:b3:c2:41:20:52:
cf:9c:0e:3d:fc:b5:ee:99:51:2a:42:9d:ec:38:c6:04:72:20:
45:3b:85:bb:45:79:36:f9:11:2c:8c:b2:d9:4e:a4:73:54:d9:
ea:09:b6:c4:ca:48:a6:9a:22:95:c9:c5:14:b5:23:f9:db:a9:
98:50:98:08:10:f2:18:4f:39:5a:e9:94:bf:f5:54:fa:94:e6:
dd:c2:92:83:2b:ea:39:98:4e:c6:19:21:d5:fa:ee:8b:03:30:
23:79:41:79:5b:45:a4:9e:a4:e1:a4:77:d4:28:ca:ff:6b:9a:
92:d8:07:30:f0:da:f3:92:91:33:7a:bb:66:52:f7:af:ad:6f:
cf:f4:6e:3b:17:14:6d:0d:0c:96:d3:55:5b:0d:ca:6c:2f:f8:
5d:e6:73:2c:ee:c3:32:c8:a6:5a:6c:4b:4d:f7:40:f1:1e:cc:
07:ce:e6:0e
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIUDNpsUFOg6l9wO0yNgK3zm9r4edgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRFMDU1NzkyMzAxMTQwRDFEMUE1QTQ2MjU2MUVBMkQ5
MTlCMzY0RjAeFw0yNjA1MTcxMzA4MDlaFw0yNzA1MTYxMzEzMDlaMDMxMTAvBgNV
BAMTKEQ3M0Q0QkI5MTQxODk1OUNCN0U4NzVGQkM4Nzk5Q0ZEOUNCNUVERDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgJEiOKZ3jeT/3lBuGeSnwakJ5
85OxjArro4vNdEKi++6ak4uCDDfBOEHI9dbHoH0p7n9CRVf6o00ma5R86kfQdZ+m
W1vMiXFdDvk6BbZFHhvQoufRM+Zssr3mZARxnc3QAzbZ6OPkcy7BqtWLdWosyirk
4NN8JZ8IjJAHkq+FbgDXaJ6Fg7MDmiASONZyvsIs7lpLiu8S6R8ziwsmqu2fVCDb
MblxlcB5tuEgvo3tbT9v5LsmMajmPZMZgloz8vGfEFlfowghXL7H81b+HatfcNeO
GhefrmyTB7xXf3d69wAinm4kFztk5tC3QfJbBc2mcKNBawz+v+ISqBXp8qXlAgMB
AAGjggIJMIICBTAdBgNVHQ4EFgQU1z1LuRQYlZy36HX7yHmc/Zy17dQwHwYDVR0j
BBgwFoAUtOBVeSMBFA0dGlpGJWHqLZGbNk8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw
ODM3OTc4MjI1ODYyMjQ4MS8wL0I0RTA1NTc5MjMwMTE0MEQxRDFBNUE0NjI1NjFF
QTJEOTE5QjM2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjRFMDU1NzkyMzAxMTQwRDFEMUE1QTQ2MjU2MUVBMkQ5MTlCMzY0Ri5jZXIw
gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTA4Mzc5NzgyMjU4NjIyNDgxLzAvMzQzMzJlMzIzNTMw
MmUzMjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr+hww
DQYJKoZIhvcNAQELBQADggEBADu0VI0YrMVywvl98tlxtUl7ghbZkBYXqZDRV9La
7S/A61MwljWwzdjMHIxGvMs1mUw+ajd9ew4UBk2++4UR22678XMdc6opBBdn4sMY
Esz3ZxhnkcSzwkEgUs+cDj38te6ZUSpCnew4xgRyIEU7hbtFeTb5ESyMstlOpHNU
2eoJtsTKSKaaIpXJxRS1I/nbqZhQmAgQ8hhPOVrplL/1VPqU5t3CkoMr6jmYTsYZ
IdX67osDMCN5QXlbRaSepOGkd9Qoyv9rmpLYBzDw2vOSkTN6u2ZS96+tb8/0bjsX
FG0NDJbTVVsNymwv+F3mcyzuwzLIplpsS033QPEezAfO5g4=
-----END CERTIFICATE-----
Generated at Sat May 23 03:04:06 2026 by rpki-client