$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094498863600893954/0/34332e3234372e3135322e302f32322d3232203d3e2030.roa File: 34332e3234372e3135322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: 1pk6tiEHf9kNqPoegfgckkczUu2VR2BfY6u9CKdeHko= Subject key identifier: 27:F5:09:EE:3E:6A:9F:40:19:7F:A4:FD:9F:4C:9B:E0:1B:EC:7A:A6 Certificate issuer: /CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Certificate serial: 3DA4370CD49507940E1B361A8C1F9A5E460DB267 Authority key identifier: 60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/34332e3234372e3135322e302f32322d3232203d3e2030.roa Signing time: Wed 22 Apr 2026 07:03:32 +0000 ROA not before: Wed 22 Apr 2026 06:58:32 +0000 ROA not after: Wed 21 Apr 2027 07:03:32 +0000 asID: 0 IP address blocks: 43.247.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 16:26:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:a4:37:0c:d4:95:07:94:0e:1b:36:1a:8c:1f:9a:5e:46:0d:b2:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E Validity Not Before: Apr 22 06:58:32 2026 GMT Not After : Apr 21 07:03:32 2027 GMT Subject: CN=27F509EE3E6A9F40197FA4FD9F4C9BE01BEC7AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bf:6a:e0:77:b7:5f:c1:ce:a8:7a:b4:aa:df: 36:15:a7:93:10:62:a8:77:ae:f6:00:02:10:2f:bf: 7f:69:ff:bd:c0:83:fe:99:00:18:3d:e2:01:ce:ac: 5b:bf:dd:a0:db:b2:8c:a1:1d:70:99:b0:65:73:94: 17:21:e0:7c:77:4b:a3:23:31:38:9a:f9:62:7b:69: e4:45:9e:88:f5:fe:5d:43:6f:e6:57:46:3e:40:fc: 0a:a5:17:9a:5f:fb:65:5f:44:fe:ba:9e:f6:bf:b0: c0:88:91:89:cc:51:84:e4:06:bd:3f:d8:e7:a8:55: d2:11:16:12:e4:68:3d:32:19:7a:f5:49:29:67:ae: 72:5c:a2:ab:7a:af:73:7e:db:da:da:cc:3d:d9:8f: 63:1c:81:7f:75:fb:e0:ad:ee:0b:8f:9d:15:ad:37: c4:a2:df:f1:d5:34:b4:98:ed:69:59:04:e7:12:5f: bd:cb:fd:45:83:3b:23:5e:d4:0b:3e:20:ae:9b:50: 6f:1e:2d:88:2f:46:9d:17:f2:08:ec:2e:27:56:61: 83:77:9d:dc:50:68:ad:60:79:72:f4:8e:a3:70:6e: 76:17:87:f7:29:25:c9:b7:45:45:e7:0f:26:b0:cb: bb:1f:d4:45:83:6f:de:e5:2a:78:d9:df:ef:08:b7: 30:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F5:09:EE:3E:6A:9F:40:19:7F:A4:FD:9F:4C:9B:E0:1B:EC:7A:A6 X509v3 Authority Key Identifier: keyid:60:1A:9A:8A:3B:50:5A:5E:E2:28:32:43:F7:AB:E7:A6:F5:4E:DC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/601A9A8A3B505A5EE2283243F7ABE7A6F54EDC4E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094498863600893954/0/34332e3234372e3135322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.152.0/22 Signature Algorithm: sha256WithRSAEncryption 91:8d:59:78:94:95:7e:62:d0:89:59:d7:c6:e3:a6:11:b9:17: 19:70:bf:18:c1:7d:99:ba:fb:07:1b:9a:67:60:65:90:22:42: 11:73:da:de:68:1b:bc:2b:71:b9:c2:14:f8:12:ee:ff:c4:94: 1e:a6:05:81:09:fe:7d:7e:84:89:fa:6e:37:6f:cf:b9:89:ed: 85:8c:19:32:03:69:62:03:f8:92:a3:ef:43:13:20:5d:c5:28: 5b:63:1f:eb:58:c3:7d:d5:36:be:74:2c:5b:8d:44:02:05:0e: 90:d7:85:28:00:80:75:3a:5c:45:fa:8d:68:90:79:82:d0:7a: 78:02:cb:ec:09:b6:ed:f7:b7:0b:f1:01:6e:47:ee:06:65:e3: 66:0f:c5:13:a7:08:2d:21:17:45:a6:5d:c4:86:c3:b9:b2:06: 9d:8d:be:80:e5:fa:7f:83:1a:9b:0e:d9:2d:11:c3:f3:b0:d5: f6:b6:7e:49:ce:83:2c:2c:49:7c:e8:ff:de:ce:dc:f0:bb:33: 5a:82:9b:e5:da:c1:d2:98:07:14:8b:86:cc:b4:0f:44:bf:4d: 28:51:ff:33:11:c4:51:cc:34:67:44:f7:98:dd:ae:10:7a:ed: 6f:09:40:94:b2:c9:e7:7c:d4:76:7e:db:37:e2:0c:dd:b6:a2: b3:3f:d2:d6 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUPaQ3DNSVB5QOGzYajB+aXkYNsmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZG NTRFREM0RTAeFw0yNjA0MjIwNjU4MzJaFw0yNzA0MjEwNzAzMzJaMDMxMTAvBgNV BAMTKDI3RjUwOUVFM0U2QTlGNDAxOTdGQTRGRDlGNEM5QkUwMUJFQzdBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4v2rgd7dfwc6oerSq3zYVp5MQ Yqh3rvYAAhAvv39p/73Ag/6ZABg94gHOrFu/3aDbsoyhHXCZsGVzlBch4Hx3S6Mj MTia+WJ7aeRFnoj1/l1Db+ZXRj5A/AqlF5pf+2VfRP66nva/sMCIkYnMUYTkBr0/ 2OeoVdIRFhLkaD0yGXr1SSlnrnJcoqt6r3N+29razD3Zj2McgX91++Ct7guPnRWt N8Si3/HVNLSY7WlZBOcSX73L/UWDOyNe1As+IK6bUG8eLYgvRp0X8gjsLidWYYN3 ndxQaK1geXL0jqNwbnYXh/cpJcm3RUXnDyawy7sf1EWDb97lKnjZ3+8ItzBBAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUJ/UJ7j5qn0AZf6T9n0yb4BvseqYwHwYDVR0j BBgwFoAUYBqaijtQWl7iKDJD96vnpvVO3E4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQ5ODg2MzYwMDg5Mzk1NC8wLzYwMUE5QThBM0I1MDVBNUVFMjI4MzI0M0Y3QUJF N0E2RjU0RURDNEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjAxQTlBOEEzQjUwNUE1RUUyMjgzMjQzRjdBQkU3QTZGNTRFREM0RS5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0NDk4ODYzNjAwODkzOTU0LzAvMzQzMzJlMzIzNDM3 MmUzMTM1MzIyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAiv3 mDANBgkqhkiG9w0BAQsFAAOCAQEAkY1ZeJSVfmLQiVnXxuOmEbkXGXC/GMF9mbr7 BxuaZ2BlkCJCEXPa3mgbvCtxucIU+BLu/8SUHqYFgQn+fX6EifpuN2/PuYnthYwZ MgNpYgP4kqPvQxMgXcUoW2Mf61jDfdU2vnQsW41EAgUOkNeFKACAdTpcRfqNaJB5 gtB6eALL7Am27fe3C/EBbkfuBmXjZg/FE6cILSEXRaZdxIbDubIGnY2+gOX6f4Ma mw7ZLRHD87DV9rZ+Sc6DLCxJfOj/3s7c8LszWoKb5drB0pgHFIuGzLQPRL9NKFH/ MxHEUcw0Z0T3mN2uEHrtbwlAlLLJ53zUdn7bN+IM3baisz/S1g== -----END CERTIFICATE-----Generated at Wed May 13 09:09:04 2026 by rpki-client