
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3232342e34342e302f32322d3232203d3e2030.roa
File: 34332e3232342e34342e302f32322d3232203d3e2030.roa (raw, json)
Hash identifier: Lx4hWOfEA8dPjMZmg7VTKIrqr+5fWjYAkvHCD6HvbxQ=
Subject key identifier: FC:5C:51:07:69:CB:5C:DD:D9:84:6F:36:73:40:50:FC:C9:AB:65:CF
Certificate issuer: /CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Certificate serial: 18E25CDE0D9A656A15D41C9BDA24505F6887FB8F
Authority key identifier: D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3232342e34342e302f32322d3232203d3e2030.roa
Signing time: Thu 04 Jun 2026 09:53:48 +0000
ROA not before: Thu 04 Jun 2026 09:48:48 +0000
ROA not after: Thu 03 Jun 2027 09:53:48 +0000
asID: 0
IP address blocks: 43.224.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 12 Jun 2026 22:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:e2:5c:de:0d:9a:65:6a:15:d4:1c:9b:da:24:50:5f:68:87:fb:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D43DFC413BC84FA18BD1B8E07A23462C043ACB23
Validity
Not Before: Jun 4 09:48:48 2026 GMT
Not After : Jun 3 09:53:48 2027 GMT
Subject: CN=FC5C510769CB5CDDD9846F36734050FCC9AB65CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:20:77:27:6a:6d:56:70:34:a0:99:3e:c8:
fc:a6:ed:63:d0:67:0c:69:a0:1b:d4:e6:22:8b:20:
c4:c6:e1:1b:b0:85:69:38:af:a2:12:ef:d2:63:8e:
4d:b2:99:b2:ed:a9:19:c1:c8:1f:c5:3c:a1:d1:24:
b0:74:0d:0f:51:18:da:52:e3:98:41:08:22:ab:44:
b5:52:0c:72:6a:ac:b7:3a:49:61:20:0f:b7:ea:ce:
50:32:80:95:46:e0:93:bf:c1:41:28:1f:cc:fe:82:
a9:d9:71:bd:04:0e:0e:44:29:1e:08:c7:89:6d:80:
61:ab:ed:16:32:f3:52:ea:96:92:c4:18:1e:c3:03:
05:d3:6b:7f:2f:94:70:23:05:b0:0c:be:61:eb:92:
62:7e:db:8a:8d:5c:dd:e5:11:21:67:24:07:ba:1a:
fb:d1:6e:73:65:76:f5:c7:8e:50:c6:dd:23:22:9a:
15:d4:45:08:42:44:09:2a:20:8f:32:fc:c0:2b:e1:
bb:c9:8f:5b:6c:be:fe:b7:c8:93:64:bb:f5:fb:a7:
59:4f:e2:cb:c9:6f:b1:60:c0:c4:22:11:30:b8:13:
1b:86:6f:8f:bd:a2:c1:3a:2a:a9:81:a4:ff:25:95:
18:75:6d:67:05:d5:38:4e:bd:25:a0:23:43:78:c4:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5C:51:07:69:CB:5C:DD:D9:84:6F:36:73:40:50:FC:C9:AB:65:CF
X509v3 Authority Key Identifier:
keyid:D4:3D:FC:41:3B:C8:4F:A1:8B:D1:B8:E0:7A:23:46:2C:04:3A:CB:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D43DFC413BC84FA18BD1B8E07A23462C043ACB23.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1114852675259727895/0/34332e3232342e34342e302f32322d3232203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.224.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:d3:9a:a1:6a:ea:83:b2:e3:b4:c6:75:61:e3:22:a7:c1:8a:
aa:38:35:8c:6e:53:69:1f:ec:21:f7:09:c6:a7:9e:50:c6:42:
3e:ca:ae:3d:db:5a:bd:09:f5:c5:c8:dd:bc:fd:fe:1d:35:8f:
0c:dc:9d:b3:03:f0:64:a7:0d:2e:19:86:cb:97:77:c7:6d:83:
5b:88:ea:3e:7d:04:c1:a7:6a:f1:a4:24:b2:b5:cf:17:53:77:
f7:a0:28:5d:a2:b0:38:34:1d:1b:a6:89:ea:cb:4d:38:e7:50:
c2:6f:0e:80:b7:ef:77:87:64:6a:17:62:7b:e8:31:21:66:38:
d2:f8:de:e2:09:51:4b:3e:6b:99:79:00:c8:70:b5:f1:b0:4c:
cd:2d:03:3e:00:74:1c:ab:21:6a:ca:88:05:14:3a:49:eb:e1:
ff:3f:07:02:d6:af:fc:b8:a9:67:bb:16:11:6a:fc:52:bb:51:
e6:73:d0:c3:3f:0d:46:95:b9:8f:44:12:c5:18:61:74:d9:6d:
9d:0c:76:a5:23:7f:78:ca:2c:23:da:23:a6:a3:48:89:82:de:
78:b1:bc:41:38:28:95:a4:32:56:98:fe:44:dd:f1:be:23:8f:
28:91:e7:86:43:e6:64:78:84:7d:e5:68:77:2c:ce:35:ad:fb:
45:d6:7e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:32:38 2026 by rpki-client