$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34332e3234322e37322e302f32322d3232203d3e20313333373734.roa File: 34332e3234322e37322e302f32322d3232203d3e20313333373734.roa (raw, json) Hash identifier: uwR1P/ibjSn0EqNSQlz8TQd0LIi6DXH9VY+ve+oFQ5E= Subject key identifier: 19:B1:A3:FD:7C:34:74:BE:F8:FE:12:A0:EA:26:88:37:0A:32:C9:42 Certificate issuer: /CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Certificate serial: 67678796B2C16D6F0368F92673E959B64580BBB3 Authority key identifier: EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34332e3234322e37322e302f32322d3232203d3e20313333373734.roa Signing time: Mon 11 May 2026 02:49:04 +0000 ROA not before: Mon 11 May 2026 02:44:04 +0000 ROA not after: Mon 10 May 2027 02:49:04 +0000 asID: 133774 IP address blocks: 43.242.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:67:87:96:b2:c1:6d:6f:03:68:f9:26:73:e9:59:b6:45:80:bb:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EC9E1C840C8705E754C2E3FF32A44FB9D78101D4 Validity Not Before: May 11 02:44:04 2026 GMT Not After : May 10 02:49:04 2027 GMT Subject: CN=19B1A3FD7C3474BEF8FE12A0EA2688370A32C942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:00:13:20:5e:b5:a9:14:9d:73:01:34:ce:92: c6:d4:06:bc:5c:28:ea:77:79:48:82:34:f8:d2:b9: 1f:3f:1d:80:73:77:0b:58:74:b1:c6:b1:0f:ec:9b: d6:09:ac:a0:20:9e:4b:5d:38:7a:01:fb:a2:cb:90: 20:c1:47:33:88:42:d2:31:87:9b:ac:ed:ad:1d:67: 4f:fb:78:1f:c6:47:8b:1f:55:04:1d:be:28:91:4e: be:40:d1:38:40:bb:e1:4b:32:b8:fe:78:3a:29:b6: 0e:6f:5e:29:75:64:36:cc:93:82:f2:6a:09:fb:c7: 9c:f4:72:0a:e3:10:b8:b6:c7:03:a7:bd:1c:c2:e2: b7:cd:6d:de:91:aa:67:30:73:74:2d:23:40:60:10: 56:40:31:a2:91:42:8a:a8:1a:0c:5b:d8:c5:f2:e6: 3c:e6:66:5e:5b:04:47:c9:8f:11:62:94:2a:87:e7: ab:ce:79:6e:de:37:36:4e:31:35:23:11:3b:b0:93: 78:f3:29:7d:15:1c:1f:f9:46:1f:c0:de:c4:ee:aa: af:45:cd:9c:55:cf:fc:5b:62:00:fc:9c:90:d9:44: 60:ca:a6:8d:79:68:a4:d2:2c:45:86:64:dd:58:4d: 79:22:83:be:9f:3a:fe:c6:40:52:38:af:2b:f5:2c: d4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:B1:A3:FD:7C:34:74:BE:F8:FE:12:A0:EA:26:88:37:0A:32:C9:42 X509v3 Authority Key Identifier: keyid:EC:9E:1C:84:0C:87:05:E7:54:C2:E3:FF:32:A4:4F:B9:D7:81:01:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EC9E1C840C8705E754C2E3FF32A44FB9D78101D4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579796714487809/0/34332e3234322e37322e302f32322d3232203d3e20313333373734.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.72.0/22 Signature Algorithm: sha256WithRSAEncryption 6a:1b:bb:cd:16:6b:6f:5d:d9:a2:df:0a:0c:fe:1e:e5:e8:8a: 9a:fb:07:8d:3d:44:5a:92:5c:ed:92:5b:2d:43:d2:1f:99:e2: 8c:ae:a4:83:e8:79:b3:80:e8:af:9c:04:6d:fd:7f:64:42:a8: 62:02:6f:61:ba:93:67:d9:b8:ea:e9:d5:d1:a4:85:c8:a8:40: a3:fa:c1:9d:b7:55:c1:2b:46:02:2c:36:b1:ab:8f:db:7f:bd: fb:0f:bd:69:8b:26:6a:90:0d:68:01:0c:1a:ad:33:fc:77:23: a9:5c:58:3a:b0:88:1d:9b:96:7c:58:f6:6b:16:d8:6c:6e:26: 42:ca:f8:5b:58:75:30:ad:19:b4:5b:30:7a:8d:bf:1d:8b:26: 73:5a:51:20:65:d8:86:b8:ec:69:51:18:f6:fd:be:a6:6d:16: d8:5c:f1:18:9b:43:58:17:a1:cb:ba:ab:99:a3:f9:6d:d6:83: c3:d0:6f:23:40:c9:4b:9d:22:00:69:9b:a7:dd:44:63:67:8c: 76:21:3a:2a:fb:af:62:e1:bb:33:1c:b7:94:4b:8c:4c:22:49: 27:b6:41:dc:b8:3b:ea:d0:a9:02:c6:a2:bf:49:7d:6a:db:05: 9d:f2:69:5d:c5:a5:b6:f2:1c:da:19:77:05:4f:e9:e9:cb:0b: 7c:ff:16:0d -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZ2eHlrLBbW8DaPkmc+lZtkWAu7MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlE NzgxMDFENDAeFw0yNjA1MTEwMjQ0MDRaFw0yNzA1MTAwMjQ5MDRaMDMxMTAvBgNV BAMTKDE5QjFBM0ZEN0MzNDc0QkVGOEZFMTJBMEVBMjY4ODM3MEEzMkM5NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChABMgXrWpFJ1zATTOksbUBrxc KOp3eUiCNPjSuR8/HYBzdwtYdLHGsQ/sm9YJrKAgnktdOHoB+6LLkCDBRzOIQtIx h5us7a0dZ0/7eB/GR4sfVQQdviiRTr5A0ThAu+FLMrj+eDoptg5vXil1ZDbMk4Ly agn7x5z0cgrjELi2xwOnvRzC4rfNbd6Rqmcwc3QtI0BgEFZAMaKRQoqoGgxb2MXy 5jzmZl5bBEfJjxFilCqH56vOeW7eNzZOMTUjETuwk3jzKX0VHB/5Rh/A3sTuqq9F zZxVz/xbYgD8nJDZRGDKpo15aKTSLEWGZN1YTXkig76fOv7GQFI4ryv1LNR/AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUGbGj/Xw0dL74/hKg6iaINwoyyUIwHwYDVR0j BBgwFoAU7J4chAyHBedUwuP/MqRPudeBAdQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTc5NjcxNDQ4NzgwOS8wL0VDOUUxQzg0MEM4NzA1RTc1NEMyRTNGRjMyQTQ0 RkI5RDc4MTAxRDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUM5RTFDODQwQzg3MDVFNzU0QzJFM0ZGMzJBNDRGQjlENzgxMDFENC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTc5NjcxNDQ4NzgwOS8wLzM0MzMyZTMyMzQz MjJlMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzMzM3MzczNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivySDANBgkqhkiG9w0BAQsFAAOCAQEAahu7zRZrb13Zot8KDP4e5eiK mvsHjT1EWpJc7ZJbLUPSH5nijK6kg+h5s4Dor5wEbf1/ZEKoYgJvYbqTZ9m46unV 0aSFyKhAo/rBnbdVwStGAiw2sauP23+9+w+9aYsmapANaAEMGq0z/HcjqVxYOrCI HZuWfFj2axbYbG4mQsr4W1h1MK0ZtFsweo2/HYsmc1pRIGXYhrjsaVEY9v2+pm0W 2FzxGJtDWBehy7qrmaP5bdaDw9BvI0DJS50iAGmbp91EY2eMdiE6KvuvYuG7Mxy3 lEuMTCJJJ7ZB3Lg76tCpAsaiv0l9atsFnfJpXcWltvIc2hl3BU/p6csLfP8WDQ== -----END CERTIFICATE-----Generated at Wed May 13 13:26:54 2026 by rpki-client