$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35352e302f32342d3234203d3e20313334333636.roa File: 34332e3234322e35352e302f32342d3234203d3e20313334333636.roa (raw, json) Hash identifier: TPILL8m50JKWMp/Q/Id2AI8hJlh/bXmQEghcul1gboo= Subject key identifier: B8:81:66:3F:85:D2:7F:D5:43:28:AB:B1:D4:BD:AB:B5:CC:8D:A7:7C Certificate issuer: /CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Certificate serial: 356EACCE7E1EC2DF648B2A8B17F3B8097AC7E5 Authority key identifier: 36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35352e302f32342d3234203d3e20313334333636.roa Signing time: Sun 10 May 2026 07:36:31 +0000 ROA not before: Sun 10 May 2026 07:31:31 +0000 ROA not after: Sun 09 May 2027 07:36:31 +0000 asID: 134366 IP address blocks: 43.242.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:37:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6e:ac:ce:7e:1e:c2:df:64:8b:2a:8b:17:f3:b8:09:7a:c7:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3685DAC8828B3EB4989761422A77AA7B265F96CE Validity Not Before: May 10 07:31:31 2026 GMT Not After : May 9 07:36:31 2027 GMT Subject: CN=B881663F85D27FD54328ABB1D4BDABB5CC8DA77C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4d:90:3d:15:91:56:79:3b:81:be:82:91:57: a6:b6:c7:ee:75:4f:e8:74:ba:38:3a:33:e0:27:12: eb:fe:62:ce:eb:a3:8f:33:40:1c:6b:2e:23:52:48: 79:4a:7c:12:5a:ba:22:4b:aa:7e:40:32:f7:07:35: 31:1d:5b:af:a8:b6:a3:2c:eb:ce:21:10:e0:bc:25: 39:1b:45:a9:59:b4:02:8c:ab:ea:70:73:bf:a8:0e: 9f:57:b3:29:bf:be:6c:bf:c1:36:cd:ca:80:c2:05: f6:c8:99:4c:09:b9:85:1d:b2:ca:79:52:1a:f4:0e: eb:25:3e:25:80:15:11:ba:09:13:e1:70:27:97:66: 68:3c:28:da:80:56:95:50:56:eb:cc:85:55:47:b3: 7b:83:9e:1e:09:2d:e1:76:47:88:e6:99:2a:07:63: e1:b5:12:82:45:6d:74:0b:19:47:b4:58:35:5e:dc: bf:6c:09:b8:65:79:6b:d2:57:21:9d:fa:6f:e5:a9: bf:eb:3e:54:39:fd:5d:04:59:46:b9:02:d6:25:97: ac:23:51:de:56:4d:99:4e:25:07:b9:77:2c:02:9c: b0:0a:e4:c9:55:7d:a3:48:67:97:d4:aa:33:3e:47: 7f:34:b8:95:ca:43:10:dc:a0:59:55:87:69:cd:1e: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:81:66:3F:85:D2:7F:D5:43:28:AB:B1:D4:BD:AB:B5:CC:8D:A7:7C X509v3 Authority Key Identifier: keyid:36:85:DA:C8:82:8B:3E:B4:98:97:61:42:2A:77:AA:7B:26:5F:96:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/3685DAC8828B3EB4989761422A77AA7B265F96CE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/3685DAC8828B3EB4989761422A77AA7B265F96CE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394523651/0/34332e3234322e35352e302f32342d3234203d3e20313334333636.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.55.0/24 Signature Algorithm: sha256WithRSAEncryption 97:11:0f:67:58:10:39:7a:1c:95:70:11:1b:bc:35:4c:f2:74: d3:1b:51:ee:84:fc:6d:46:18:c6:33:87:69:04:ac:c7:78:38: f3:2c:c5:73:3c:17:43:0d:37:7a:1b:56:60:45:2b:be:96:92: 74:26:b5:5f:4b:30:ff:f7:83:64:48:02:7a:ed:a3:65:9e:64: d1:9f:ea:2d:a4:38:67:16:8d:74:43:2e:34:d1:bb:e9:ca:32: 7b:0d:f8:de:d3:bd:c7:6a:01:d5:4c:9c:88:ef:5c:6e:2c:a9: e7:b1:e2:5c:f7:9c:8a:6e:b7:e1:79:35:5e:e5:7d:43:bd:2c: 9b:67:c2:bc:19:33:70:92:5b:e2:fe:f6:55:3c:81:3a:ca:d3: 01:2b:2c:8f:ab:ca:6a:d9:82:2e:86:c5:b3:cd:53:fd:d5:9e: b4:49:9c:7b:bd:b1:72:3a:d8:13:8b:e8:07:c8:d2:66:b6:d5: 13:34:f5:dc:20:28:e4:d7:fa:00:ca:c9:b1:e6:05:52:51:ed: 81:48:55:78:92:e4:93:94:aa:16:d7:cb:d3:74:6c:c4:54:a8: 88:94:09:2d:99:bf:80:2d:64:73:4f:7c:28:38:48:3e:b0:35: 75:29:f3:2c:c4:31:49:ef:4b:22:97:95:18:5c:12:1b:d5:e9: ba:d1:78:61 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgITNW6szn4ewt9kiyqLF/O4CXrH5TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEygzNjg1REFDODgyOEIzRUI0OTg5NzYxNDIyQTc3QUE3QjI2 NUY5NkNFMB4XDTI2MDUxMDA3MzEzMVoXDTI3MDUwOTA3MzYzMVowMzExMC8GA1UE AxMoQjg4MTY2M0Y4NUQyN0ZENTQzMjhBQkIxRDRCREFCQjVDQzhEQTc3QzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMRNkD0VkVZ5O4G+gpFXprbH7nVP 6HS6ODoz4CcS6/5izuujjzNAHGsuI1JIeUp8Elq6IkuqfkAy9wc1MR1br6i2oyzr ziEQ4LwlORtFqVm0Aoyr6nBzv6gOn1ezKb++bL/BNs3KgMIF9siZTAm5hR2yynlS GvQO6yU+JYAVEboJE+FwJ5dmaDwo2oBWlVBW68yFVUeze4OeHgkt4XZHiOaZKgdj 4bUSgkVtdAsZR7RYNV7cv2wJuGV5a9JXIZ36b+Wpv+s+VDn9XQRZRrkC1iWXrCNR 3lZNmU4lB7l3LAKcsArkyVV9o0hnl9SqMz5HfzS4lcpDENygWVWHac0enRsCAwEA AaOCAhQwggIQMB0GA1UdDgQWBBS4gWY/hdJ/1UMoq7HUvau1zI2nfDAfBgNVHSME GDAWgBQ2hdrIgos+tJiXYUIqd6p7Jl+WzjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDY1 NTc5NTM0Mzk0NTIzNjUxLzAvMzY4NURBQzg4MjhCM0VCNDk4OTc2MTQyMkE3N0FB N0IyNjVGOTZDRS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS8zNjg1REFDODgyOEIzRUI0OTg5NzYxNDIyQTc3QUE3QjI2NUY5NkNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTc5NTM0Mzk0NTIzNjUxLzAvMzQzMzJlMzIzNDMy MmUzNTM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEzMzM0MzMzNjM2LnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQAK/I3MA0GCSqGSIb3DQEBCwUAA4IBAQCXEQ9nWBA5ehyVcBEbvDVM8nTT G1HuhPxtRhjGM4dpBKzHeDjzLMVzPBdDDTd6G1ZgRSu+lpJ0JrVfSzD/94NkSAJ6 7aNlnmTRn+otpDhnFo10Qy400bvpyjJ7Dfje073HagHVTJyI71xuLKnnseJc95yK brfheTVe5X1DvSybZ8K8GTNwklvi/vZVPIE6ytMBKyyPq8pq2YIuhsWzzVP91Z60 SZx7vbFyOtgTi+gHyNJmttUTNPXcICjk1/oAysmx5gVSUe2BSFV4kuSTlKoW18vT dGzEVKiIlAktmb+ALWRzT3woOEg+sDV1KfMsxDFJ70sil5UYXBIb1em60Xhh -----END CERTIFICATE-----Generated at Wed May 13 13:27:13 2026 by rpki-client