$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34392e302f32342d3234203d3e2034383131.roa File: 34332e3232392e34392e302f32342d3234203d3e2034383131.roa (raw, json) Hash identifier: ZlF9KkmqSaU1S65NQ+Blx+R33WBEXI0yGOnr+zY+kk8= Subject key identifier: F7:AE:62:6F:7B:A1:EF:39:A6:C0:65:F3:EB:47:F8:9D:6D:BD:2A:22 Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 0ED49755B2FA4453625AB17F04471D9EF17F31F9 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34392e302f32342d3234203d3e2034383131.roa Signing time: Thu 07 May 2026 15:56:18 +0000 ROA not before: Thu 07 May 2026 15:51:18 +0000 ROA not after: Thu 06 May 2027 15:56:18 +0000 asID: 4811 IP address blocks: 43.229.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d4:97:55:b2:fa:44:53:62:5a:b1:7f:04:47:1d:9e:f1:7f:31:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 7 15:51:18 2026 GMT Not After : May 6 15:56:18 2027 GMT Subject: CN=F7AE626F7BA1EF39A6C065F3EB47F89D6DBD2A22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e9:2d:11:23:fa:0c:7f:ef:99:8c:13:63:c2: 60:b8:d8:be:b1:a1:cc:d4:04:ac:9e:cd:e5:2e:30: 82:c4:35:e1:9d:5e:0b:93:74:34:64:66:94:86:bc: de:0d:f4:18:3b:73:3b:90:01:a5:f6:84:67:13:fb: 20:e6:b3:d6:86:ac:c6:99:86:5f:45:be:86:26:02: e5:bf:76:16:b8:b5:2e:8d:8e:62:4c:cb:5b:00:cb: 44:e4:b8:fb:29:7f:bb:2b:c9:a7:33:c1:32:dd:1c: 4f:ad:af:d5:06:2c:3c:d3:d2:5b:f9:38:9d:d0:32: 81:aa:f2:77:40:ee:4e:7a:6b:e1:b3:b1:5a:25:95: 5a:38:0a:2e:0f:c3:50:37:16:af:79:d9:6d:33:ac: 67:7f:51:eb:34:14:48:a8:d3:22:1e:5b:4c:c8:57: 72:ea:8e:51:89:83:c8:25:03:86:24:4d:2f:25:03: 4e:2e:d9:fe:7c:ca:67:59:07:04:15:43:e4:e6:a6: bd:7f:77:00:cd:f5:b1:00:23:31:d7:ca:60:64:a8: 5b:8e:7e:5b:70:cc:17:5b:37:3e:b3:57:71:c5:54: b1:ea:b6:cd:0a:3d:7f:bb:a6:5d:f9:39:49:3f:6e: 1c:f5:b6:b3:50:58:f7:ba:16:41:b4:af:1d:4f:0e: 20:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:AE:62:6F:7B:A1:EF:39:A6:C0:65:F3:EB:47:F8:9D:6D:BD:2A:22 X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e34392e302f32342d3234203d3e2034383131.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.49.0/24 Signature Algorithm: sha256WithRSAEncryption 9b:ed:3b:cd:23:90:8e:5a:5e:54:27:ca:b6:42:70:18:45:00: da:a1:ca:e6:9b:eb:d0:3a:04:1a:ac:de:22:a7:ee:2f:d8:a3: 3a:f3:65:d5:f9:24:b8:91:8f:f4:ba:e3:19:c0:08:0f:4f:62: ed:79:74:e5:a0:1b:4a:25:34:9d:47:87:c2:81:a6:b4:3d:33: 2e:16:e6:fa:19:db:5f:9d:41:4d:39:25:0c:b6:5a:34:ff:5b: 89:97:6c:89:50:b3:8d:52:0d:69:18:43:63:de:db:c4:a6:3f: 27:64:af:61:b1:34:d1:24:11:4e:b6:89:07:9d:52:f2:cc:e2: a6:d5:e3:5e:60:41:7f:a4:f2:a9:25:61:ad:80:c8:a0:c6:4f: b9:5f:71:a1:b2:a6:cb:f4:54:84:1f:fd:c3:4f:24:e9:2a:f6: dc:8b:af:4d:c4:9e:85:9f:fe:36:57:a8:68:1f:6b:f6:32:a1: 4c:c4:58:9c:83:28:df:78:8e:ef:de:af:32:8e:67:ed:9f:57: 65:d8:53:c9:4a:68:f9:d0:27:fa:7f:36:f1:07:aa:58:7a:2e: 8b:dc:df:eb:2b:66:2e:9e:91:d2:e9:2a:21:c6:88:02:00:e6: db:9d:6c:44:83:b4:08:20:ee:52:d2:87:fe:82:47:bf:11:f6: 2f:96:b9:7f -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUDtSXVbL6RFNiWrF/BEcdnvF/MfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDcxNTUxMThaFw0yNzA1MDYxNTU2MThaMDMxMTAvBgNV BAMTKEY3QUU2MjZGN0JBMUVGMzlBNkMwNjVGM0VCNDdGODlENkRCRDJBMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu6S0RI/oMf++ZjBNjwmC42L6x oczUBKyezeUuMILENeGdXguTdDRkZpSGvN4N9Bg7czuQAaX2hGcT+yDms9aGrMaZ hl9FvoYmAuW/dha4tS6NjmJMy1sAy0TkuPspf7sryaczwTLdHE+tr9UGLDzT0lv5 OJ3QMoGq8ndA7k56a+GzsVollVo4Ci4Pw1A3Fq952W0zrGd/Ues0FEio0yIeW0zI V3LqjlGJg8glA4YkTS8lA04u2f58ymdZBwQVQ+Tmpr1/dwDN9bEAIzHXymBkqFuO fltwzBdbNz6zV3HFVLHqts0KPX+7pl35OUk/bhz1trNQWPe6FkG0rx1PDiCtAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU965ib3uh7zmmwGXz60f4nW29KiIwHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzQzMzJlMzIzMjM5 MmUzNDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODMxMzEucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr5TEwDQYJKoZIhvcNAQELBQADggEBAJvtO80jkI5aXlQnyrZCcBhFANqhyuab 69A6BBqs3iKn7i/YozrzZdX5JLiRj/S64xnACA9PYu15dOWgG0olNJ1Hh8KBprQ9 My4W5voZ21+dQU05JQy2WjT/W4mXbIlQs41SDWkYQ2Pe28SmPydkr2GxNNEkEU62 iQedUvLM4qbV415gQX+k8qklYa2AyKDGT7lfcaGypsv0VIQf/cNPJOkq9tyLr03E noWf/jZXqGgfa/YyoUzEWJyDKN94ju/erzKOZ+2fV2XYU8lKaPnQJ/p/NvEHqlh6 Lovc3+srZi6ekdLpKiHGiAIA5tudbESDtAgg7lLSh/6CR78R9i+WuX8= -----END CERTIFICATE-----Generated at Wed May 13 07:59:33 2026 by rpki-client