
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233372e302f32342d3234203d3e2034383437.roa
File: 34332e3232362e3233372e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: JZJqJZP5x92EcKJOGTK+RkWD4L2yse7pUVqsvK7BRUk=
Subject key identifier: C4:78:CC:7F:86:2B:A6:B7:D7:29:C0:84:30:0C:E0:9C:19:24:A7:4A
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 49C3EE2288613900D2AD7B1AE2DB214567E13412
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233372e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 08:59:38 +0000
ROA not before: Thu 04 Jun 2026 08:54:38 +0000
ROA not after: Thu 03 Jun 2027 08:59:38 +0000
asID: 4847
IP address blocks: 43.226.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:c3:ee:22:88:61:39:00:d2:ad:7b:1a:e2:db:21:45:67:e1:34:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:54:38 2026 GMT
Not After : Jun 3 08:59:38 2027 GMT
Subject: CN=C478CC7F862BA6B7D729C084300CE09C1924A74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:69:1d:02:a7:c1:9e:6c:32:18:2c:df:ab:23:
be:ea:be:e4:8e:bb:5c:a3:e0:16:2e:ac:a6:1e:bd:
ee:c1:eb:0f:e5:7b:85:f4:02:b5:5b:c2:23:a5:26:
c1:f6:35:c2:e9:fe:31:94:80:91:b0:1b:ab:f8:dd:
73:af:79:55:18:8d:21:30:6c:37:a4:a7:db:18:2c:
73:e3:ba:33:7a:6d:c8:61:de:18:61:9e:da:d3:d1:
9f:50:f1:6a:b9:09:91:54:98:18:76:de:85:b0:de:
d9:3c:b7:67:87:e8:55:b3:46:cf:8c:47:c6:8b:02:
ce:1e:5d:45:3d:f4:34:fc:aa:2b:60:36:11:ce:11:
b9:07:21:9f:28:8f:a6:56:0d:4a:38:66:67:8e:e4:
7b:6c:4a:24:05:1b:68:3c:fe:7b:5a:f6:47:19:6c:
51:5d:17:09:c5:60:2a:ca:1c:b4:c3:1f:10:c8:22:
4a:01:ac:18:08:df:c2:c1:84:48:a9:ca:e1:54:b4:
fa:76:7a:34:4c:b4:a6:20:d9:64:81:b3:81:46:d7:
ac:84:d5:b5:fe:b1:c5:ac:ab:45:1f:aa:c7:f3:fd:
35:a7:1d:60:07:6c:67:27:bc:53:f8:15:b5:de:d4:
e5:c6:f3:73:64:c4:b1:a5:9d:44:d7:d3:d6:b9:07:
79:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:78:CC:7F:86:2B:A6:B7:D7:29:C0:84:30:0C:E0:9C:19:24:A7:4A
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233372e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.237.0/24
Signature Algorithm: sha256WithRSAEncryption
71:16:54:21:11:05:95:44:d7:0c:78:db:d5:21:2e:1c:65:8e:
f2:83:ac:b0:a2:c9:06:b6:93:31:41:76:bd:cd:b7:71:67:2d:
5b:a4:1d:f8:6e:b6:8a:aa:44:27:01:4c:15:00:d3:06:eb:03:
0b:45:7e:7b:83:39:47:e0:26:b2:aa:12:f3:42:0e:b7:12:b8:
e4:41:54:fa:7b:22:b4:cf:4f:c8:8f:bd:24:2f:21:7b:b9:d6:
9a:a2:f8:8e:37:00:b9:c9:6a:7f:b1:d6:af:85:8c:52:2e:19:
d3:1e:7e:7b:8b:74:9a:99:0a:53:a8:56:17:c9:72:36:df:82:
17:5b:38:3b:8e:1f:5b:75:f1:52:45:e0:3b:19:aa:af:f5:5f:
f8:78:ed:bc:a6:c0:6c:51:3e:2f:3d:07:f4:3c:72:49:3f:ec:
74:0f:0e:55:06:72:e7:c6:b3:ab:44:c8:c0:61:1c:d9:31:25:
52:6e:2a:8e:96:b8:2e:ac:53:44:57:bf:11:85:2c:24:34:84:
e1:3e:d2:7d:1a:47:46:ed:33:86:45:a1:4b:ce:f9:71:ae:8b:
1a:2f:9d:42:1d:bf:dd:f5:58:b3:ea:b4:22:6d:52:8a:f6:aa:
24:81:67:64:7f:b8:94:31:33:4c:fb:70:3b:ab:13:b3:61:cc:
f2:23:9d:c9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUScPuIohhOQDSrXsa4tshRWfhNBIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3
RDI3NzVDOTAeFw0yNjA2MDQwODU0MzhaFw0yNzA2MDMwODU5MzhaMDMxMTAvBgNV
BAMTKEM0NzhDQzdGODYyQkE2QjdENzI5QzA4NDMwMENFMDlDMTkyNEE3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMaR0Cp8GebDIYLN+rI77qvuSO
u1yj4BYurKYeve7B6w/le4X0ArVbwiOlJsH2NcLp/jGUgJGwG6v43XOveVUYjSEw
bDekp9sYLHPjujN6bchh3hhhntrT0Z9Q8Wq5CZFUmBh23oWw3tk8t2eH6FWzRs+M
R8aLAs4eXUU99DT8qitgNhHOEbkHIZ8oj6ZWDUo4ZmeO5HtsSiQFG2g8/nta9kcZ
bFFdFwnFYCrKHLTDHxDIIkoBrBgI38LBhEipyuFUtPp2ejRMtKYg2WSBs4FG16yE
1bX+scWsq0Ufqsfz/TWnHWAHbGcnvFP4FbXe1OXG83NkxLGlnUTX09a5B3kpAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUxHjMf4YrprfXKcCEMAzgnBkkp0owHwYDVR0j
BBgwFoAUsoJ0pxih/pp0525HeweQYH0ndckwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
MjcyNDMzMTczNTAyMzYzMy8wL0IyODI3NEE3MThBMUZFOUE3NEU3NkU0NzdCMDc5
MDYwN0QyNzc1QzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvQjI4Mjc0QTcxOEExRkU5QTc0RTc2RTQ3N0IwNzkwNjA3RDI3NzVDOS5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMTEyNzI0MzMxNzM1MDIzNjMzLzAvMzQzMzJlMzIzMjM2
MmUzMjMzMzcyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEACvi7TANBgkqhkiG9w0BAQsFAAOCAQEAcRZUIREFlUTXDHjb1SEuHGWO8oOs
sKLJBraTMUF2vc23cWctW6Qd+G62iqpEJwFMFQDTBusDC0V+e4M5R+AmsqoS80IO
txK45EFU+nsitM9PyI+9JC8he7nWmqL4jjcAuclqf7HWr4WMUi4Z0x5+e4t0mpkK
U6hWF8lyNt+CF1s4O44fW3XxUkXgOxmqr/Vf+HjtvKbAbFE+Lz0H9DxyST/sdA8O
VQZy58azq0TIwGEc2TElUm4qjpa4LqxTRFe/EYUsJDSE4T7SfRpHRu0zhkWhS875
ca6LGi+dQh2/3fVYs+q0Im1SivaqJIFnZH+4lDEzTPtwO6sTs2HM8iOdyQ==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:12 2026 by rpki-client