
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3232392e3138352e302f32342d3234203d3e2034383437.roa
File: 34332e3232392e3138352e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: Mk1ZRjdXSKbl1/uFe7FLy9RQ8B0w6L8obQIaBkMJHl8=
Subject key identifier: 46:6A:02:99:07:FA:E3:E7:F4:98:F7:C3:87:41:34:55:2D:4C:BA:01
Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial: 5431883E01AC8F5F0EFD5A0E432CD5EB9995D0B8
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3232392e3138352e302f32342d3234203d3e2034383437.roa
Signing time: Sat 27 Jun 2026 17:12:31 +0000
ROA not before: Sat 27 Jun 2026 17:07:31 +0000
ROA not after: Sat 26 Jun 2027 17:12:31 +0000
asID: 4847
IP address blocks: 43.229.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:31:88:3e:01:ac:8f:5f:0e:fd:5a:0e:43:2c:d5:eb:99:95:d0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Validity
Not Before: Jun 27 17:07:31 2026 GMT
Not After : Jun 26 17:12:31 2027 GMT
Subject: CN=466A029907FAE3E7F498F7C3874134552D4CBA01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b2:f7:a8:7f:44:f2:1e:ce:04:67:cf:ba:7c:
3d:a3:bf:4a:55:7b:24:90:bd:60:89:ee:4e:de:5a:
31:fa:f9:a6:3e:16:9b:b4:29:95:ba:af:1e:37:50:
ca:1b:c3:b6:54:fb:d9:d4:02:e0:1d:67:0a:29:58:
5a:36:5e:fa:1d:a5:1f:fc:90:fd:88:7c:d8:f6:17:
6d:9f:a4:ef:30:9f:af:b2:8e:b2:d1:09:f5:b0:84:
de:04:a6:3d:3d:17:e3:6f:94:87:fc:c4:bd:ef:f3:
d3:d5:73:a2:6a:03:dd:61:43:c6:9c:ea:9d:1c:7b:
b3:46:3f:a6:d6:e1:6c:ff:b6:23:93:40:36:6a:aa:
d4:cc:d6:2f:78:d9:b6:94:b6:99:00:eb:73:a9:fd:
6b:34:d5:4b:8a:86:07:22:14:7d:c1:69:2e:f0:7f:
1c:58:e2:89:07:8f:74:9d:5c:87:5c:e4:a6:fa:1b:
cb:07:b5:57:a6:13:de:8e:02:4b:45:e6:4b:61:86:
94:06:d2:0e:6e:5d:0f:da:72:4b:ec:7f:f4:69:a4:
64:e7:6b:84:43:56:6e:4c:89:e8:e6:c4:1d:fd:4e:
60:48:3a:af:4d:e2:ff:7a:6e:fd:54:d6:54:57:b7:
44:56:12:66:07:5d:09:9a:9b:50:db:da:86:ce:c4:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6A:02:99:07:FA:E3:E7:F4:98:F7:C3:87:41:34:55:2D:4C:BA:01
X509v3 Authority Key Identifier:
keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3232392e3138352e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.229.185.0/24
Signature Algorithm: sha256WithRSAEncryption
47:a3:11:fb:58:d3:1c:dc:f3:29:6b:95:6b:03:5c:81:6e:be:
c2:58:a8:b4:2c:a2:74:3b:a3:da:1c:41:74:f5:18:b8:f2:46:
ea:43:87:bf:3f:72:a4:5f:c9:26:b7:97:3f:16:a3:37:6f:0d:
1a:eb:b1:43:52:78:79:9f:82:8b:0b:2f:38:67:a8:d3:87:01:
8e:27:ab:c1:17:03:11:9a:63:e8:53:9e:90:75:ba:de:ca:e8:
2c:cd:7c:26:95:13:64:bc:f8:be:ac:06:6d:10:3d:5a:5d:74:
92:2a:37:e8:b8:e6:f7:13:84:7e:de:d0:5f:79:f1:a2:ef:70:
12:8b:50:ab:ec:6d:3d:ab:2f:28:63:86:1a:57:8a:02:81:aa:
19:7e:7c:d0:8a:66:6b:1d:0d:d6:97:40:46:e8:42:b5:06:7f:
ed:a1:6b:86:11:a0:0a:99:c5:32:33:3c:c2:cc:97:8e:41:74:
1b:94:e6:62:fe:8b:cd:71:4d:b7:cf:2b:16:e8:7e:1a:be:f5:
f9:ac:c0:3e:8d:f1:e5:c9:2f:21:87:13:15:ac:6c:72:19:c6:
f7:4a:dc:5f:da:ef:17:12:67:37:0e:af:6e:b0:a1:37:d2:c8:
3d:ec:97:ca:8a:5c:93:a9:89:23:e7:83:0e:2d:36:59:2f:ab:
e2:89:84:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:51 2026 by rpki-client