
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233392e302f32342d3234203d3e2034383437.roa
File: 34332e3232362e3233392e302f32342d3234203d3e2034383437.roa (raw, json)
Hash identifier: xRq8BhZXlOdI58k137j6T8nL9u1mFcp0rNkuGPGOBN0=
Subject key identifier: 1F:65:0F:FA:32:D8:43:85:C1:14:7B:F6:10:79:EB:91:EA:CE:4C:0B
Certificate issuer: /CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Certificate serial: 2865A85FF04A2E42AA51BAA9D876E34C04AE0104
Authority key identifier: B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233392e302f32342d3234203d3e2034383437.roa
Signing time: Thu 04 Jun 2026 08:59:56 +0000
ROA not before: Thu 04 Jun 2026 08:54:56 +0000
ROA not after: Thu 03 Jun 2027 08:59:56 +0000
asID: 4847
IP address blocks: 43.226.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:04:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:65:a8:5f:f0:4a:2e:42:aa:51:ba:a9:d8:76:e3:4c:04:ae:01:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B28274A718A1FE9A74E76E477B0790607D2775C9
Validity
Not Before: Jun 4 08:54:56 2026 GMT
Not After : Jun 3 08:59:56 2027 GMT
Subject: CN=1F650FFA32D84385C1147BF61079EB91EACE4C0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:23:35:34:24:fc:8f:41:97:e8:98:f3:10:
a5:eb:63:aa:17:b2:0a:d6:88:12:3f:8c:a9:07:e1:
2e:3d:2f:4d:75:5a:89:0a:2b:7b:09:90:33:60:03:
06:de:fe:54:b2:40:c4:5c:0f:64:ac:9c:1f:89:53:
98:c0:3b:54:26:de:99:6c:a1:e3:33:fb:e0:c7:2f:
2a:b9:91:de:ee:84:71:6e:48:ba:c8:f7:8b:c7:45:
10:57:46:d4:d0:aa:62:d9:67:ee:c1:46:fc:eb:09:
89:15:7c:0b:63:e3:7a:80:ef:26:bc:f5:b9:47:5e:
ba:d7:88:19:84:ef:44:84:1d:1c:67:7d:5f:9a:6b:
60:e9:04:4c:59:3d:41:c6:71:29:f1:e1:fe:f0:c9:
dd:ae:e2:c8:1b:f2:b6:81:f1:df:f2:c3:85:ea:ab:
5d:25:b4:52:5c:a5:2f:62:4f:a0:ed:de:98:a7:61:
bf:81:38:ca:54:19:4e:4c:b4:23:57:79:86:6b:0b:
eb:a0:f2:26:f8:ef:43:f1:8f:ee:30:b3:49:c9:87:
28:c7:15:9d:a2:61:ca:27:cf:43:86:d9:00:2b:04:
df:86:51:e3:d5:62:38:e2:1f:f4:65:ba:9b:c5:83:
a0:69:33:05:36:16:e5:e6:e7:ee:6a:48:a3:21:ad:
de:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:65:0F:FA:32:D8:43:85:C1:14:7B:F6:10:79:EB:91:EA:CE:4C:0B
X509v3 Authority Key Identifier:
keyid:B2:82:74:A7:18:A1:FE:9A:74:E7:6E:47:7B:07:90:60:7D:27:75:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/B28274A718A1FE9A74E76E477B0790607D2775C9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B28274A718A1FE9A74E76E477B0790607D2775C9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1112724331735023633/0/34332e3232362e3233392e302f32342d3234203d3e2034383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.239.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:1e:41:b2:cd:19:77:e3:9a:b5:38:ed:a2:6f:62:21:22:e6:
6f:9f:1f:41:7a:9d:5a:b0:6d:42:97:39:94:69:e3:7c:11:e0:
88:a4:ea:7f:7c:74:c4:04:d7:73:64:8b:b8:e6:47:11:3d:68:
26:6f:17:80:af:f4:f7:43:36:2d:54:6a:b4:41:66:a9:d4:04:
dd:9d:4f:f4:00:4f:6c:72:40:e1:b0:23:87:b8:73:83:81:3e:
55:24:cc:f4:0e:a9:14:0f:e5:9f:c9:0f:00:69:fa:7d:de:95:
73:09:49:6d:e4:24:3b:94:70:4e:1a:e9:b8:56:70:9d:cc:e2:
70:9e:05:5f:5d:e9:b2:18:73:28:7f:37:4f:ed:58:37:e6:b7:
3d:7b:e5:69:20:d0:01:7f:ad:71:d5:8c:e6:ed:7a:8f:99:33:
46:30:54:8e:ab:7b:00:1f:8b:22:be:c8:e7:70:a2:86:5f:f3:
fe:ee:e3:f1:74:fc:27:85:db:0c:1a:8b:c1:62:6b:b9:91:40:
b4:78:bc:33:73:39:61:f8:d0:6c:e1:73:c7:df:fe:f4:f2:72:
76:a1:1d:46:2d:25:f5:51:99:28:d8:5a:28:01:2f:a4:9d:53:
8e:4c:e0:b7:9a:6e:a9:f8:d7:4e:b3:d8:a1:95:b4:b0:b6:ea:
84:53:57:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:13 2026 by rpki-client