
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3232392e3138372e302f32342d3234203d3e2034383038.roa
File: 34332e3232392e3138372e302f32342d3234203d3e2034383038.roa (raw, json)
Hash identifier: mQ/yWNZmDUQo9Pngz7MlnXAExe/cEgg0ErqD67vpet0=
Subject key identifier: 46:DF:4D:0C:57:DD:78:0E:7F:75:4A:83:60:76:E2:B2:EE:CA:3B:89
Certificate issuer: /CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Certificate serial: 7DB5FF2F8B7A98AC45967F6AB17E54387508BA0B
Authority key identifier: EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3232392e3138372e302f32342d3234203d3e2034383038.roa
Signing time: Sat 20 Jun 2026 17:09:48 +0000
ROA not before: Sat 20 Jun 2026 17:04:48 +0000
ROA not after: Sat 19 Jun 2027 17:09:48 +0000
asID: 4808
IP address blocks: 43.229.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 15 Jul 2026 13:44:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:b5:ff:2f:8b:7a:98:ac:45:96:7f:6a:b1:7e:54:38:75:08:ba:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E
Validity
Not Before: Jun 20 17:04:48 2026 GMT
Not After : Jun 19 17:09:48 2027 GMT
Subject: CN=46DF4D0C57DD780E7F754A836076E2B2EECA3B89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:37:cc:2a:b1:ff:ed:0b:dc:2e:18:a0:8b:13:
5d:8e:88:7a:8b:74:46:a5:44:e5:39:5d:f7:7c:7f:
59:f4:36:8f:2a:b9:19:33:55:99:6e:1e:ef:bf:0b:
fd:aa:3d:57:c6:ab:39:11:a4:99:29:d2:60:46:42:
2c:57:07:90:22:0d:66:40:55:db:f1:be:4e:f1:06:
45:a1:7a:ef:04:36:01:04:46:2a:8e:f9:11:8b:34:
cd:3e:fe:bf:4e:66:53:92:23:54:ab:2b:f2:05:0c:
42:20:9c:d6:73:89:f5:f7:5a:5d:04:38:e7:df:db:
90:a9:00:ea:b8:2c:f3:75:5c:5c:8e:6a:8b:c6:b0:
be:ee:c8:86:26:7d:a6:66:d3:5b:5f:fd:b4:35:d7:
44:4e:99:58:36:83:6d:e9:30:36:c3:a8:a5:bf:d1:
d5:2e:1b:5b:83:54:7d:51:27:fd:5e:95:ba:a7:00:
f5:b7:ad:a8:72:b5:3a:36:d7:b4:1d:43:b0:47:8b:
66:b1:c9:20:0c:f2:89:f5:6e:66:9f:ea:4f:77:f5:
10:ab:7c:24:37:52:4d:03:97:7d:d2:53:aa:20:43:
f2:aa:10:96:9c:65:f7:c2:eb:8f:6f:ed:fb:e7:e7:
ac:4f:b6:8f:e0:f5:e7:0d:8c:f0:c7:5e:8a:46:83:
ad:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DF:4D:0C:57:DD:78:0E:7F:75:4A:83:60:76:E2:B2:EE:CA:3B:89
X509v3 Authority Key Identifier:
keyid:EB:E8:B4:E6:EA:7C:58:B2:E5:6E:3C:59:9F:86:A1:32:62:9D:0F:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EBE8B4E6EA7C58B2E56E3C599F86A132629D0F3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1108656271558443027/0/34332e3232392e3138372e302f32342d3234203d3e2034383038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.229.187.0/24
Signature Algorithm: sha256WithRSAEncryption
35:8d:ed:6b:b3:f9:82:59:a3:f9:ee:15:ad:25:ae:c7:9b:d4:
b5:06:d6:54:c7:49:3c:c0:5f:f1:d1:b4:19:ee:dc:de:77:0e:
cb:c9:59:c1:5b:10:70:c0:7a:ba:89:fe:4c:3b:db:21:42:93:
a8:ce:84:0a:d5:05:de:6a:bf:18:2d:95:92:73:d5:cd:19:c6:
25:96:fe:23:aa:d2:2d:9c:ab:09:a1:d8:5c:c4:fa:06:8f:b5:
27:ab:5a:2a:1f:d3:e2:90:ac:44:16:13:73:ae:a9:01:a1:d5:
87:59:dd:30:07:15:9f:e7:84:60:18:82:48:61:bc:5e:c6:12:
19:bc:52:6c:4a:54:61:11:97:4a:df:aa:2f:e9:cd:c7:ff:92:
cd:3e:29:f1:de:34:4f:61:05:0c:d7:88:16:ef:43:5c:1c:18:
ba:f2:71:43:05:44:72:c3:f0:18:1c:33:75:e0:25:aa:33:c0:
97:15:3f:88:86:d0:0d:9c:d1:51:bd:be:c9:f4:38:d6:31:28:
3b:a3:26:65:a6:71:13:ef:a7:3e:68:48:f9:c6:e3:36:3c:52:
dc:24:fc:a8:0e:7a:4f:73:f1:36:34:4c:61:7a:bd:c0:b9:de:
10:2e:79:15:9a:c1:a4:e6:54:71:9a:c7:53:dd:45:e5:ba:04:
0a:f1:c7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 21:55:28 2026 by rpki-client