$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34392e302f32342d3234203d3e20313331323734.roa File: 34332e3232392e34392e302f32342d3234203d3e20313331323734.roa (raw, json) Hash identifier: NjMhYq90S1vmqTmD7/WKyOVryE2lrKn7Oe7bbsvO/as= Subject key identifier: 81:59:8A:A6:95:ED:88:71:FF:97:C4:0D:48:F4:EE:3A:DB:68:1E:1E Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 010171FBA0BF14C6B61C9BEAE23F7CFDF7AB5D8C Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34392e302f32342d3234203d3e20313331323734.roa Signing time: Thu 07 May 2026 15:56:18 +0000 ROA not before: Thu 07 May 2026 15:51:18 +0000 ROA not after: Thu 06 May 2027 15:56:18 +0000 asID: 131274 IP address blocks: 43.229.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:32:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:01:71:fb:a0:bf:14:c6:b6:1c:9b:ea:e2:3f:7c:fd:f7:ab:5d:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 7 15:51:18 2026 GMT Not After : May 6 15:56:18 2027 GMT Subject: CN=81598AA695ED8871FF97C40D48F4EE3ADB681E1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:37:06:03:bf:31:75:f1:d1:f2:b8:2d:b1:97: a4:c9:6c:72:74:f7:ed:37:e1:75:86:c6:7a:b1:92: a5:93:31:06:3c:28:a0:31:02:c4:48:1d:9d:bb:e6: 49:e9:fe:fb:36:6a:d6:f2:4d:a5:77:92:dc:b3:3a: d3:47:e8:b7:86:90:20:01:89:b1:f2:c3:d5:75:8a: af:19:0a:d0:59:0b:1e:03:c8:fd:67:6a:ea:e8:5f: 76:27:29:ae:4f:96:30:81:1b:0c:29:72:cb:0d:47: 00:77:19:20:90:5c:98:74:13:6e:9e:97:55:f4:37: ca:3b:51:0b:9c:ae:a0:6d:88:87:d9:26:cf:94:3c: 5e:c3:d6:f1:25:1e:c0:82:20:ba:2a:fb:08:0e:8d: 10:9c:18:94:cf:b3:ed:0c:50:d1:6c:7b:5d:c0:c6: 7d:45:cc:7a:ff:b6:20:07:5c:bb:50:6b:09:75:77: 2a:28:8f:ee:f2:8a:47:a2:e0:6c:1f:dc:ce:63:e8: a9:47:23:fc:fd:80:88:4a:f3:d4:df:ad:82:6d:ea: f3:d2:2d:26:c8:3c:47:a5:11:d7:f4:ca:21:9c:f1: 4e:8a:30:51:2a:92:4b:07:0a:47:df:8c:37:45:b8: d5:98:75:86:9d:08:f7:ee:8a:f8:a4:09:6a:9b:80: 67:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:59:8A:A6:95:ED:88:71:FF:97:C4:0D:48:F4:EE:3A:DB:68:1E:1E X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34392e302f32342d3234203d3e20313331323734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.49.0/24 Signature Algorithm: sha256WithRSAEncryption 47:c7:2b:59:ca:06:cd:5c:70:3d:cc:07:e6:4e:2c:47:0b:d2: aa:c8:06:91:d0:89:41:d3:7a:30:ed:3f:a5:c9:c3:2a:58:5d: 2a:85:a4:46:49:be:87:01:73:ad:fb:7d:e2:64:94:56:09:ac: 82:dd:d8:5d:b8:32:c3:3a:68:5c:fd:7f:72:bd:ac:f4:e2:ef: 5c:f2:5c:72:d1:52:d1:8e:15:87:e4:5e:a8:b6:16:47:3b:6d: 1b:64:39:e8:fa:00:b3:37:7a:27:ab:f1:9a:4f:ba:42:0e:7d: b7:75:40:15:89:d9:5c:f9:eb:b9:b7:c4:db:b0:5b:8f:35:95: ee:64:46:6c:9b:40:35:9b:c2:1f:b6:ba:a5:96:bb:f9:fd:26: 1b:8e:ee:81:97:9f:34:77:6e:27:95:13:b5:3f:cd:23:15:7d: 59:aa:71:7a:b5:72:d3:6f:94:6a:5b:f2:bb:a2:33:27:c6:9f: 25:a4:3e:05:7a:3e:d2:88:25:63:30:d8:67:3e:04:44:03:85: 46:e9:23:91:c5:9a:1a:f7:0f:c4:1a:6f:b0:3a:ba:e3:97:e4: ee:bb:fd:0f:94:5b:87:1d:6a:91:cf:a3:13:d0:a6:fe:35:ca: fd:77:ac:13:e9:0b:44:9c:00:9a:5d:69:ca:ab:90:75:a8:66: 4d:0e:ab:72 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUAQFx+6C/FMa2HJvq4j98/ferXYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDcxNTUxMThaFw0yNzA1MDYxNTU2MThaMDMxMTAvBgNV BAMTKDgxNTk4QUE2OTVFRDg4NzFGRjk3QzQwRDQ4RjRFRTNBREI2ODFFMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaNwYDvzF18dHyuC2xl6TJbHJ0 9+034XWGxnqxkqWTMQY8KKAxAsRIHZ275knp/vs2atbyTaV3ktyzOtNH6LeGkCAB ibHyw9V1iq8ZCtBZCx4DyP1nauroX3YnKa5PljCBGwwpcssNRwB3GSCQXJh0E26e l1X0N8o7UQucrqBtiIfZJs+UPF7D1vElHsCCILoq+wgOjRCcGJTPs+0MUNFse13A xn1FzHr/tiAHXLtQawl1dyooj+7yikei4Gwf3M5j6KlHI/z9gIhK89TfrYJt6vPS LSbIPEelEdf0yiGc8U6KMFEqkksHCkffjDdFuNWYdYadCPfuivikCWqbgGc1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUgVmKppXtiHH/l8QNSPTuOttoHh4wHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3NzI0MTk0NzYwMjk0NS8wLzM0MzMyZTMyMzIz OTJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTMyMzczNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvlMTANBgkqhkiG9w0BAQsFAAOCAQEAR8crWcoGzVxwPcwH5k4sRwvS qsgGkdCJQdN6MO0/pcnDKlhdKoWkRkm+hwFzrft94mSUVgmsgt3YXbgywzpoXP1/ cr2s9OLvXPJcctFS0Y4Vh+ReqLYWRzttG2Q56PoAszd6J6vxmk+6Qg59t3VAFYnZ XPnrubfE27BbjzWV7mRGbJtANZvCH7a6pZa7+f0mG47ugZefNHduJ5UTtT/NIxV9 WapxerVy02+Ualvyu6IzJ8afJaQ+BXo+0oglYzDYZz4ERAOFRukjkcWaGvcPxBpv sDq645fk7rv9D5Rbhx1qkc+jE9Cm/jXK/XesE+kLRJwAml1pyquQdahmTQ6rcg== -----END CERTIFICATE-----Generated at Wed May 13 12:05:47 2026 by rpki-client