$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32342d3234203d3e203535393936.roa File: 34332e3232392e34382e302f32342d3234203d3e203535393936.roa (raw, json) Hash identifier: C0m2CxnTlQL7W3Fi1XEgbs69WkWrnfz8u2pxr0AbFzY= Subject key identifier: 09:6B:06:CC:6A:65:80:2B:86:8A:28:E3:E6:5F:0E:19:E9:0C:A9:60 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 55767E9A02E6742286B4EA01ADB2CC1C163DF97F Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32342d3234203d3e203535393936.roa Signing time: Thu 07 May 2026 15:56:18 +0000 ROA not before: Thu 07 May 2026 15:51:18 +0000 ROA not after: Thu 06 May 2027 15:56:18 +0000 asID: 55996 IP address blocks: 43.229.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:37:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:76:7e:9a:02:e6:74:22:86:b4:ea:01:ad:b2:cc:1c:16:3d:f9:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 7 15:51:18 2026 GMT Not After : May 6 15:56:18 2027 GMT Subject: CN=096B06CC6A65802B868A28E3E65F0E19E90CA960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b5:c8:95:a8:cb:34:77:55:93:67:29:4f:61: 07:b2:9b:94:ed:bf:df:9e:6b:a1:d7:6f:86:17:a8: f0:09:f2:89:0b:5b:32:13:46:7b:13:6c:fe:a2:01: ab:cf:f1:1e:0d:19:63:37:e9:69:9b:7f:4f:45:4c: d5:3f:ca:b8:5a:29:5e:bb:62:be:67:73:15:58:b0: b8:5d:d3:af:1a:40:d1:27:ff:2b:63:31:a4:5d:25: de:51:2f:68:cc:7c:54:d9:dd:05:62:29:e6:18:2d: 3b:bb:bb:48:e4:1c:92:82:33:bc:d7:05:0f:09:e5: ce:2c:6e:b1:4c:49:e4:5e:0b:39:ab:c7:c1:52:16: 62:89:9f:38:b9:cb:83:6e:89:96:e3:7d:7f:58:39: c0:62:35:58:46:d4:d2:72:71:c2:a8:eb:5e:77:ba: 07:40:b7:06:36:56:d8:ea:21:67:c3:f9:f6:a5:8e: 75:52:69:f7:53:c5:4a:79:64:14:e5:6c:c6:8f:87: 64:cf:98:2d:40:62:29:f2:e8:bb:18:db:9f:20:bb: 89:75:dc:e7:56:45:e0:a6:04:c8:ce:b1:e6:09:23: 1d:40:18:16:26:6b:65:53:73:6d:16:2b:63:21:f9: cf:d2:27:22:c6:6e:95:8a:3a:8c:56:7b:26:c1:92: 2b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:6B:06:CC:6A:65:80:2B:86:8A:28:E3:E6:5F:0E:19:E9:0C:A9:60 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34382e302f32342d3234203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.48.0/24 Signature Algorithm: sha256WithRSAEncryption 91:ef:cf:29:ad:9c:75:93:00:63:46:2f:eb:ce:c8:57:66:1d: 05:5f:cb:37:01:28:83:c8:7f:2f:98:fd:d5:64:d1:b9:a6:92: 39:bd:fb:df:6f:89:a4:66:a5:6d:4e:7e:90:61:76:04:4b:4e: f3:b5:69:1b:b5:21:82:98:89:fe:9d:67:e2:7b:11:88:ff:00: 6a:70:97:f7:89:d6:a8:49:b2:17:0f:89:ff:a6:b2:de:59:c5: 69:e4:23:9d:5c:d1:c7:1f:7a:28:ca:fa:ef:d4:f5:02:f3:2e: 6e:40:94:cd:52:38:65:31:6e:33:f6:03:bf:69:22:02:e0:01: 8e:fd:8f:34:6c:04:8c:5c:0b:50:d6:e3:69:e7:a8:2a:cb:c6: 8b:4b:c5:48:c2:45:e5:8d:b7:91:0e:a5:5c:c5:2c:9e:6d:ab: f2:0e:9a:24:a1:e1:2e:7e:10:6f:a8:c8:3d:72:3f:67:34:50: 1c:f3:d6:70:64:74:f4:b0:61:4c:6b:d3:d1:f4:17:67:bd:8a: 55:d7:2f:4d:ad:e5:4e:b4:e8:0d:61:1a:9e:db:70:83:e3:2c: 4a:ce:26:bb:32:66:b2:9c:22:47:ba:9f:6f:5f:7e:71:41:35: 39:5d:24:1a:b4:88:8d:b8:9f:07:42:bb:96:73:0f:03:fa:a1: 56:b5:53:28 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUVXZ+mgLmdCKGtOoBrbLMHBY9+X8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDcxNTUxMThaFw0yNzA1MDYxNTU2MThaMDMxMTAvBgNV BAMTKDA5NkIwNkNDNkE2NTgwMkI4NjhBMjhFM0U2NUYwRTE5RTkwQ0E5NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWtciVqMs0d1WTZylPYQeym5Tt v9+ea6HXb4YXqPAJ8okLWzITRnsTbP6iAavP8R4NGWM36Wmbf09FTNU/yrhaKV67 Yr5ncxVYsLhd068aQNEn/ytjMaRdJd5RL2jMfFTZ3QViKeYYLTu7u0jkHJKCM7zX BQ8J5c4sbrFMSeReCzmrx8FSFmKJnzi5y4NuiZbjfX9YOcBiNVhG1NJyccKo6153 ugdAtwY2VtjqIWfD+faljnVSafdTxUp5ZBTlbMaPh2TPmC1AYiny6LsY258gu4l1 3OdWReCmBMjOseYJIx1AGBYma2VTc20WK2Mh+c/SJyLGbpWKOoxWeybBkiuFAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUCWsGzGplgCuGiijj5l8OGekMqWAwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzQzMzJlMzIzMjM5 MmUzNDM4MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvlMDANBgkqhkiG9w0BAQsFAAOCAQEAke/PKa2cdZMAY0Yv687IV2YdBV/L NwEog8h/L5j91WTRuaaSOb3732+JpGalbU5+kGF2BEtO87VpG7UhgpiJ/p1n4nsR iP8AanCX94nWqEmyFw+J/6ay3lnFaeQjnVzRxx96KMr679T1AvMubkCUzVI4ZTFu M/YDv2kiAuABjv2PNGwEjFwLUNbjaeeoKsvGi0vFSMJF5Y23kQ6lXMUsnm2r8g6a JKHhLn4Qb6jIPXI/ZzRQHPPWcGR09LBhTGvT0fQXZ72KVdcvTa3lTrToDWEanttw g+MsSs4muzJmspwiR7qfb19+cUE1OV0kGrSIjbifB0K7lnMPA/qhVrVTKA== -----END CERTIFICATE-----Generated at Wed May 13 10:32:53 2026 by rpki-client