
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232362e3136342e302f32322d3232203d3e2034383337.roa
File: 34332e3232362e3136342e302f32322d3232203d3e2034383337.roa (raw, json)
Hash identifier: x+QPmnwrPhc3lW8SkGqLUtKqg3APJb9c2dJvQgejs9c=
Subject key identifier: 10:33:07:5E:B4:72:DC:7B:39:C6:B0:F6:68:63:2A:B4:50:7E:80:05
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 5BC11519EB2E18E318BFD4740392B65859540548
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232362e3136342e302f32322d3232203d3e2034383337.roa
Signing time: Thu 04 Jun 2026 07:16:48 +0000
ROA not before: Thu 04 Jun 2026 07:11:48 +0000
ROA not after: Thu 03 Jun 2027 07:16:48 +0000
asID: 4837
IP address blocks: 43.226.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:c1:15:19:eb:2e:18:e3:18:bf:d4:74:03:92:b6:58:59:54:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 4 07:11:48 2026 GMT
Not After : Jun 3 07:16:48 2027 GMT
Subject: CN=1033075EB472DC7B39C6B0F668632AB4507E8005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:28:b3:9b:c3:b6:42:54:58:14:6c:54:32:24:
60:b8:7c:57:f0:5f:c2:78:1a:aa:11:57:f8:81:9c:
42:d4:db:cc:02:c3:a8:2a:da:1d:dc:8e:86:58:69:
60:33:b2:3f:10:d2:1d:bd:81:6c:7f:a9:a6:70:26:
ae:d2:72:ac:04:e1:d4:9a:c4:89:a0:2d:b1:f0:5a:
a5:08:82:91:2d:77:65:26:00:71:34:8e:ec:9e:e9:
f7:17:ec:11:41:44:d7:c7:52:15:97:b4:0e:2a:22:
14:92:aa:7f:05:66:1b:b4:e9:97:e7:0d:c0:13:00:
93:59:6d:67:b1:08:43:9b:6e:3a:00:f4:3b:d8:9c:
1c:e0:c5:74:02:67:18:86:cd:3d:5f:83:75:c6:99:
fe:7a:f8:ec:81:3a:23:6a:25:16:37:c1:0a:47:72:
c6:42:e3:52:6b:e3:a9:0a:ef:d5:22:62:e9:04:bf:
51:d8:b7:8e:88:d2:2a:ef:28:98:8c:74:0b:74:9b:
70:88:33:a2:f0:b9:a4:c2:f6:5c:04:ae:e2:f0:3f:
d4:be:7b:2d:62:b3:6f:05:f5:6b:f5:b6:47:db:de:
a3:68:ee:e0:ac:ad:1a:9e:39:65:f5:c9:92:35:51:
f4:ef:e2:b6:7c:e5:fa:17:6d:df:3c:e0:27:bf:29:
3d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:33:07:5E:B4:72:DC:7B:39:C6:B0:F6:68:63:2A:B4:50:7E:80:05
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232362e3136342e302f32322d3232203d3e2034383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.164.0/22
Signature Algorithm: sha256WithRSAEncryption
b8:55:10:32:fb:26:42:a9:19:15:eb:4b:46:ac:64:37:09:f4:
40:88:4b:7f:69:1d:2c:3a:ab:09:22:33:ed:f0:f6:1f:4e:b3:
b8:09:f7:02:c8:0c:66:6a:bd:f5:73:2d:5d:f1:a8:13:cd:d3:
30:9e:83:33:29:f0:9c:11:dd:d9:89:a8:cf:b6:f6:e4:05:1d:
f2:51:60:b1:48:cd:3b:5a:bb:46:b9:af:16:9d:35:25:ce:1c:
11:24:82:b0:5f:b0:74:bf:8b:a2:f3:cc:ec:2d:71:28:9f:ef:
a6:94:48:40:80:56:77:ab:fc:70:cc:49:1b:cc:36:f0:9e:b1:
38:5c:ee:d3:05:af:60:18:c5:fc:35:60:68:e4:fa:9f:5a:fe:
f8:48:b3:8a:7b:93:bc:e7:da:45:04:fe:77:e3:f8:10:0f:a2:
8e:eb:b8:1b:36:cc:c3:7a:ce:2e:42:65:df:91:3a:14:a2:96:
fa:6e:7b:2b:c9:ad:75:f9:5d:a4:45:bf:ae:77:8e:6c:05:b0:
56:6a:d4:1d:87:6f:4e:98:f9:d4:79:a5:cd:5f:6c:16:0b:dd:
a9:a5:1d:13:4d:d3:3c:a6:21:67:30:d5:e8:e2:b3:38:cb:79:
7c:5c:4b:e0:13:1a:31:95:05:6a:f8:7f:d0:cf:78:25:81:85:
19:0c:16:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:44:29 2026 by rpki-client