
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232362e3136352e302f32342d3234203d3e20313430373136.roa
File: 34332e3232362e3136352e302f32342d3234203d3e20313430373136.roa (raw, json)
Hash identifier: VVa6YdS/aG2PbyUoPLVRQNYtwpKeH8FnD6rn4gGwi8k=
Subject key identifier: 01:BA:BE:3D:63:0C:D4:BB:50:65:36:D1:ED:F7:5F:4C:4D:DD:2F:F2
Certificate issuer: /CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Certificate serial: 27EF9BBE2DAD2EFE1D1FEF702AEE4C446CA14B12
Authority key identifier: 37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232362e3136352e302f32342d3234203d3e20313430373136.roa
Signing time: Wed 03 Jun 2026 06:19:07 +0000
ROA not before: Wed 03 Jun 2026 06:14:07 +0000
ROA not after: Wed 02 Jun 2027 06:19:07 +0000
asID: 140716
IP address blocks: 43.226.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 19:45:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:ef:9b:be:2d:ad:2e:fe:1d:1f:ef:70:2a:ee:4c:44:6c:a1:4b:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3722ACC8B2E55402121EEAE0194C9ED635B781DD
Validity
Not Before: Jun 3 06:14:07 2026 GMT
Not After : Jun 2 06:19:07 2027 GMT
Subject: CN=01BABE3D630CD4BB506536D1EDF75F4C4DDD2FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:83:35:f7:1b:d7:bb:76:d2:eb:1a:4b:8d:
95:2f:4b:c2:7e:7b:a1:03:00:29:5c:8f:34:82:f4:
ce:19:50:40:de:87:30:0a:4b:ae:6c:c4:b0:f2:cb:
c3:b3:f2:05:b4:7e:10:38:48:0f:e4:d8:3e:8f:28:
0b:56:89:a4:cd:ce:4c:8e:a0:05:23:e1:3b:1c:80:
c6:38:2e:02:f0:de:9e:60:96:74:00:23:46:f6:9b:
33:ae:70:14:19:1f:5d:ea:20:1d:f2:8c:3f:f7:7a:
14:af:2c:b0:07:21:ad:d8:1d:8f:28:ab:a9:79:57:
30:e4:67:1e:2f:12:42:b1:32:df:ef:00:b8:cb:92:
3a:bc:2e:ab:0c:3e:9f:f6:55:f8:5a:d4:85:fd:31:
d0:f2:ff:bc:78:74:e6:ea:24:bd:b8:35:56:f4:67:
81:38:fd:d3:95:85:8b:1b:60:27:c8:04:e0:c0:95:
79:2a:62:8f:a1:02:6d:3a:3a:65:6d:ec:9c:9c:dc:
ae:49:a8:af:47:5e:bc:3d:7c:d7:1d:85:b9:f8:85:
0e:a3:72:00:0a:f8:ee:e7:e0:32:cd:fe:e0:56:91:
bf:13:ff:62:de:b1:2d:c1:9c:53:5f:bf:62:dc:28:
53:bc:54:a3:14:b5:8d:c8:99:75:fd:ab:34:19:fb:
80:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BA:BE:3D:63:0C:D4:BB:50:65:36:D1:ED:F7:5F:4C:4D:DD:2F:F2
X509v3 Authority Key Identifier:
keyid:37:22:AC:C8:B2:E5:54:02:12:1E:EA:E0:19:4C:9E:D6:35:B7:81:DD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/3722ACC8B2E55402121EEAE0194C9ED635B781DD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3722ACC8B2E55402121EEAE0194C9ED635B781DD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114356856265965585/0/34332e3232362e3136352e302f32342d3234203d3e20313430373136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.226.165.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:ff:ba:1d:e9:6b:c2:26:02:d4:cc:11:bf:e9:94:8f:74:6a:
8b:9b:d8:d8:0c:7c:38:61:8f:ea:8b:e0:14:13:df:73:87:a5:
b0:6c:75:f2:46:bc:9a:33:7d:b8:d7:14:c6:b8:f5:30:ae:57:
26:5f:18:25:29:7c:8d:fe:dc:86:1f:a3:b1:f8:b7:f2:54:1c:
68:48:6c:7b:4f:76:cc:cc:e3:35:ae:79:41:d7:aa:2c:75:46:
8b:fb:c9:14:14:87:5f:d7:5e:23:52:a5:ca:e2:8c:7c:a5:47:
21:16:45:6f:75:aa:52:63:6d:48:f4:ea:2c:8b:7d:2f:1c:d1:
37:42:84:0f:f0:2b:e0:a1:75:bf:ab:7e:c2:72:4a:8d:15:df:
23:2b:7e:79:42:ea:07:27:38:3c:92:03:94:b1:07:86:b5:01:
9d:13:4c:92:be:c1:67:6f:9d:5b:7d:97:a7:e2:d3:a2:a3:30:
97:27:17:2b:72:c9:34:7d:4a:7b:b1:7e:98:d0:59:00:25:65:
3d:5d:00:c3:03:09:c2:ed:2f:18:69:21:14:28:df:03:ea:13:
8d:07:a1:dd:9b:68:19:7b:16:82:ae:d2:1b:43:ad:4f:7d:69:
89:c7:6c:14:6c:25:70:46:51:06:50:91:1c:98:6d:16:9f:33:
6d:ca:61:f7
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgIUJ++bvi2tLv4dH+9wKu5MRGyhSxIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYz
NUI3ODFERDAeFw0yNjA2MDMwNjE0MDdaFw0yNzA2MDIwNjE5MDdaMDMxMTAvBgNV
BAMTKDAxQkFCRTNENjMwQ0Q0QkI1MDY1MzZEMUVERjc1RjRDNERERDJGRjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC724M19xvXu3bS6xpLjZUvS8J+
e6EDAClcjzSC9M4ZUEDehzAKS65sxLDyy8Oz8gW0fhA4SA/k2D6PKAtWiaTNzkyO
oAUj4TscgMY4LgLw3p5glnQAI0b2mzOucBQZH13qIB3yjD/3ehSvLLAHIa3YHY8o
q6l5VzDkZx4vEkKxMt/vALjLkjq8LqsMPp/2Vfha1IX9MdDy/7x4dObqJL24NVb0
Z4E4/dOVhYsbYCfIBODAlXkqYo+hAm06OmVt7Jyc3K5JqK9HXrw9fNcdhbn4hQ6j
cgAK+O7n4DLN/uBWkb8T/2LesS3BnFNfv2LcKFO8VKMUtY3ImXX9qzQZ+4DpAgMB
AAGjggIXMIICEzAdBgNVHQ4EFgQUAbq+PWMM1LtQZTbR7fdfTE3dL/IwHwYDVR0j
BBgwFoAUNyKsyLLlVAISHurgGUye1jW3gd0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEx
NDM1Njg1NjI2NTk2NTU4NS8wLzM3MjJBQ0M4QjJFNTU0MDIxMjFFRUFFMDE5NEM5
RUQ2MzVCNzgxREQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvMzcyMkFDQzhCMkU1NTQwMjEyMUVFQUUwMTk0QzlFRDYzNUI3ODFERC5jZXIw
gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz
LmNubmljLmNuL3JlcG8vQTExMTQzNTY4NTYyNjU5NjU1ODUvMC8zNDMzMmUzMjMy
MzYyZTMxMzYzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzMDM3MzEzNi5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEACvipTANBgkqhkiG9w0BAQsFAAOCAQEAjv+6HelrwiYC1MwRv+mU
j3Rqi5vY2Ax8OGGP6ovgFBPfc4elsGx18ka8mjN9uNcUxrj1MK5XJl8YJSl8jf7c
hh+jsfi38lQcaEhse092zMzjNa55QdeqLHVGi/vJFBSHX9deI1KlyuKMfKVHIRZF
b3WqUmNtSPTqLIt9LxzRN0KED/Ar4KF1v6t+wnJKjRXfIyt+eULqByc4PJIDlLEH
hrUBnRNMkr7BZ2+dW32Xp+LToqMwlycXK3LJNH1Ke7F+mNBZACVlPV0AwwMJwu0v
GGkhFCjfA+oTjQeh3ZtoGXsWgq7SG0OtT31picdsFGwlcEZRBlCRHJhtFp8zbcph
9w==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:43:57 2026 by rpki-client