$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e203535393936.roa File: 34332e3232392e35312e302f32342d3234203d3e203535393936.roa (raw, json) Hash identifier: azn6q499D4Nt8DLGsSen3zyYHX7jw3l0YqO8zIUSgG0= Subject key identifier: 55:4B:5B:97:78:2E:C5:3E:9C:E5:B6:DB:61:63:62:84:44:C5:5F:4A Certificate issuer: /CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Certificate serial: 28B920FF2AEC65E033C824DDD7867A1095F17703 Authority key identifier: 5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e203535393936.roa Signing time: Thu 07 May 2026 15:56:17 +0000 ROA not before: Thu 07 May 2026 15:51:17 +0000 ROA not after: Thu 06 May 2027 15:56:17 +0000 asID: 55996 IP address blocks: 43.229.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 15:10:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b9:20:ff:2a:ec:65:e0:33:c8:24:dd:d7:86:7a:10:95:f1:77:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DF8086D3EFA176487A1C376B7BCCF3E83AB2339 Validity Not Before: May 7 15:51:17 2026 GMT Not After : May 6 15:56:17 2027 GMT Subject: CN=554B5B97782EC53E9CE5B6DB6163628444C55F4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:06:cf:93:4d:0c:cc:0c:e1:e3:a8:e4:fe:18: c2:5f:f7:31:14:cd:d0:92:df:8f:6b:c6:fd:a5:04: 26:c8:f3:25:4a:6e:4f:6d:f9:7a:cc:48:1e:2c:ab: 7c:e3:a1:30:57:53:83:0d:94:c2:37:af:e2:80:16: f0:bb:e2:f6:85:20:e4:96:11:0b:1f:3a:21:1a:bd: 3e:27:82:87:b4:51:1c:d1:05:48:7e:3e:7d:75:62: 72:74:52:a6:e1:8c:4e:6e:7f:2e:91:d7:d2:5e:91: 18:be:98:15:32:9f:8d:9e:79:b5:97:f8:2b:96:b3: 89:75:e7:4c:36:6e:da:88:8c:2e:d6:42:6d:40:cf: d8:e4:4b:d5:43:e4:15:5f:26:ba:0f:17:de:7b:07: 61:14:8f:81:92:33:67:5d:ce:52:8b:58:ca:81:8d: 2e:dd:93:97:af:ac:45:59:ea:b4:fa:1b:a1:01:4b: f7:b0:d8:f9:21:90:a5:0a:c3:3c:31:0d:bf:93:69: b0:82:c2:c5:d0:25:eb:0a:be:9f:65:3b:e0:5a:07: a5:db:af:a6:b1:d6:5d:bc:03:f7:84:c3:9b:e2:d5: a6:3e:d4:df:78:cd:0e:fc:95:56:6f:84:28:1a:cf: 9a:a8:dd:83:8e:15:b9:35:39:73:cf:a3:11:d5:7d: de:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:4B:5B:97:78:2E:C5:3E:9C:E5:B6:DB:61:63:62:84:44:C5:5F:4A X509v3 Authority Key Identifier: keyid:5D:F8:08:6D:3E:FA:17:64:87:A1:C3:76:B7:BC:CF:3E:83:AB:23:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5DF8086D3EFA176487A1C376B7BCCF3E83AB2339.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065577241947602945/0/34332e3232392e35312e302f32342d3234203d3e203535393936.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.229.51.0/24 Signature Algorithm: sha256WithRSAEncryption b2:20:b1:78:93:fa:f0:f8:18:45:05:f0:df:29:bd:1c:6e:16: 46:37:bd:83:5a:a2:b8:e1:d5:63:20:76:a8:1e:4d:4d:9e:93: 76:34:78:3f:74:a5:60:42:5f:0e:02:80:52:6c:e9:7f:93:12: eb:84:87:d3:f2:71:99:51:5f:c8:9d:24:af:8c:f0:42:1a:7c: 8c:97:a1:a5:72:5b:03:6d:39:8d:95:f2:72:ac:4d:b8:ca:60: 42:9a:2b:8e:04:49:cf:f4:80:69:5c:71:47:fb:3c:97:90:62: 56:7a:aa:c8:5a:cb:3e:bd:a1:97:2b:02:30:bd:d2:71:2e:f2: 25:2b:1a:e5:63:e9:5a:89:b7:98:65:9a:5a:93:04:6a:e4:58: bb:60:ed:da:dd:74:bc:2f:25:d1:a9:80:46:95:c1:4f:17:83: e0:39:12:30:77:d5:74:eb:33:f6:00:2f:2d:09:88:f8:fe:14: 38:74:19:47:9b:cb:a8:a1:14:5b:d1:10:66:34:3c:9f:f4:94: 5b:ee:8e:7b:60:de:a8:a0:5f:a6:5c:fe:53:6b:c4:c8:ac:1a: 17:e4:a0:49:e7:c3:8c:f0:0b:5d:9c:da:50:d7:00:20:9e:0f: 1a:04:62:de:a6:cc:a7:37:93:a2:f4:e7:a0:f3:71:91:55:9e: 96:66:40:54 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUKLkg/yrsZeAzyCTd14Z6EJXxdwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4 M0FCMjMzOTAeFw0yNjA1MDcxNTUxMTdaFw0yNzA1MDYxNTU2MTdaMDMxMTAvBgNV BAMTKDU1NEI1Qjk3NzgyRUM1M0U5Q0U1QjZEQjYxNjM2Mjg0NDRDNTVGNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Bs+TTQzMDOHjqOT+GMJf9zEU zdCS349rxv2lBCbI8yVKbk9t+XrMSB4sq3zjoTBXU4MNlMI3r+KAFvC74vaFIOSW EQsfOiEavT4ngoe0URzRBUh+Pn11YnJ0UqbhjE5ufy6R19JekRi+mBUyn42eebWX +CuWs4l150w2btqIjC7WQm1Az9jkS9VD5BVfJroPF957B2EUj4GSM2ddzlKLWMqB jS7dk5evrEVZ6rT6G6EBS/ew2PkhkKUKwzwxDb+TabCCwsXQJesKvp9lO+BaB6Xb r6ax1l28A/eEw5vi1aY+1N94zQ78lVZvhCgaz5qo3YOOFbk1OXPPoxHVfd4XAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUVUtbl3guxT6c5bbbYWNihETFX0owHwYDVR0j BBgwFoAUXfgIbT76F2SHocN2t7zPPoOrIzkwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3NzI0MTk0NzYwMjk0NS8wLzVERjgwODZEM0VGQTE3NjQ4N0ExQzM3NkI3QkND RjNFODNBQjIzMzkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNURGODA4NkQzRUZBMTc2NDg3QTFDMzc2QjdCQ0NGM0U4M0FCMjMzOS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc3MjQxOTQ3NjAyOTQ1LzAvMzQzMzJlMzIzMjM5 MmUzNTMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzNi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACvlMzANBgkqhkiG9w0BAQsFAAOCAQEAsiCxeJP68PgYRQXw3ym9HG4WRje9 g1qiuOHVYyB2qB5NTZ6TdjR4P3SlYEJfDgKAUmzpf5MS64SH0/JxmVFfyJ0kr4zw Qhp8jJehpXJbA205jZXycqxNuMpgQporjgRJz/SAaVxxR/s8l5BiVnqqyFrLPr2h lysCML3ScS7yJSsa5WPpWom3mGWaWpMEauRYu2Dt2t10vC8l0amARpXBTxeD4DkS MHfVdOsz9gAvLQmI+P4UOHQZR5vLqKEUW9EQZjQ8n/SUW+6Oe2DeqKBfplz+U2vE yKwaF+SgSefDjPALXZzaUNcAIJ4PGgRi3qbMpzeTovTnoPNxkVWelmZAVA== -----END CERTIFICATE-----Generated at Wed May 13 09:20:50 2026 by rpki-client