$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e302e302f31382d3138203d3e203536303035.roa File: 34322e35312e302e302f31382d3138203d3e203536303035.roa (raw, json) Hash identifier: k/zrJuf0J4aj/PA+LSJrHLpBJpmom+IV686W2kEgh64= Subject key identifier: 67:78:E6:63:69:E0:1D:0A:26:12:39:FC:D4:45:0D:0F:08:56:79:BA Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 4AC91B6A2AB69E3BBD4DE2FE81F339797315FCB0 Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e302e302f31382d3138203d3e203536303035.roa Signing time: Sat 09 May 2026 09:24:36 +0000 ROA not before: Sat 09 May 2026 09:19:36 +0000 ROA not after: Sat 08 May 2027 09:24:36 +0000 asID: 56005 IP address blocks: 42.51.0.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:47:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:c9:1b:6a:2a:b6:9e:3b:bd:4d:e2:fe:81:f3:39:79:73:15:fc:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 9 09:19:36 2026 GMT Not After : May 8 09:24:36 2027 GMT Subject: CN=6778E66369E01D0A261239FCD4450D0F085679BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b7:aa:4c:42:e3:f7:67:a3:b2:9c:eb:de:5f: 20:da:78:f6:a4:cd:f4:da:fd:86:89:d3:4e:75:ec: 74:d6:16:f3:a4:6a:f4:0c:fb:0d:34:d0:14:7f:5f: 5d:46:1c:56:ac:1a:f8:76:3f:48:61:b8:18:d5:c6: 13:7d:98:65:b9:50:41:ac:9d:8a:9b:eb:6f:e5:e8: cb:b7:b8:68:c0:10:00:ba:7e:e3:68:c1:eb:af:fa: 2e:1b:e1:74:d4:80:b5:4f:f3:a5:5d:b8:07:15:a9: 27:1c:7f:37:6d:b0:56:70:7d:96:21:76:75:57:f9: ef:fb:04:a3:9f:f9:2d:fc:0f:2a:3f:5f:89:ad:48: ed:a1:90:88:73:20:6a:99:9d:b2:a9:88:dd:d4:fe: a1:7a:84:5d:82:09:f6:13:98:c4:78:f2:44:10:05: c7:40:16:c3:68:04:72:e1:85:41:af:20:5a:7e:bd: 51:4b:e6:a1:65:88:b0:6e:7b:01:b6:fb:71:32:a9: f9:42:67:15:29:f0:7e:9d:05:f3:ed:0f:e4:82:b9: b8:cb:7c:9d:d3:47:47:56:16:16:ae:9b:36:61:11: 5a:fe:28:eb:14:df:58:a7:8c:09:d8:d9:3c:c9:f2: 58:e3:de:52:a7:af:b1:25:d9:09:ac:11:3e:8f:89: 30:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:78:E6:63:69:E0:1D:0A:26:12:39:FC:D4:45:0D:0F:08:56:79:BA X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34322e35312e302e302f31382d3138203d3e203536303035.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.51.0.0/18 Signature Algorithm: sha256WithRSAEncryption 61:74:50:e1:3a:ce:07:4c:9b:3d:8b:c2:8b:dd:60:d0:f5:7e: 3e:67:99:ad:f9:1b:96:dd:66:da:23:bd:55:4f:9b:67:3c:f3: d2:86:a8:ae:5e:0c:e3:e1:6b:6a:99:97:24:7e:7f:6c:ac:99: 7b:c2:d5:55:a4:08:c5:df:b2:8a:73:8b:f1:7c:bc:fc:57:2b: 5d:65:7e:95:09:da:7d:ed:68:e1:ce:82:d0:e8:78:35:b2:62: 4d:3f:c6:bb:b3:b0:71:30:f0:75:f4:15:ff:6a:eb:f5:34:90: f7:59:50:c7:63:a9:96:33:56:37:01:b5:ad:22:ad:4b:fe:7f: ab:a5:1c:20:b0:80:97:70:8a:d7:fb:13:3b:46:6d:38:0c:38: 3c:9b:b3:f3:db:68:c4:51:95:58:65:cf:19:75:a3:dd:8b:81: 9e:6c:6e:5d:8d:99:60:f3:a1:d6:ee:60:c5:5a:49:37:be:ad: 69:c7:b6:f0:4f:44:c1:9d:53:1e:73:4a:62:a0:2b:2d:ea:a1: a0:91:60:0c:0e:49:93:20:c1:d9:4f:57:8b:98:5d:06:2a:a8: c2:9b:77:09:ce:6c:02:d7:13:a8:4a:05:f5:a0:0e:fb:92:25: 4d:49:7e:5a:26:2d:ea:45:81:a4:75:15:31:e7:6e:7c:b6:e1: 41:42:79:62 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUSskbaiq2nju9TeL+gfM5eXMV/LAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MDkwOTE5MzZaFw0yNzA1MDgwOTI0MzZaMDMxMTAvBgNV BAMTKDY3NzhFNjYzNjlFMDFEMEEyNjEyMzlGQ0Q0NDUwRDBGMDg1Njc5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/t6pMQuP3Z6OynOveXyDaePak zfTa/YaJ00517HTWFvOkavQM+w000BR/X11GHFasGvh2P0hhuBjVxhN9mGW5UEGs nYqb62/l6Mu3uGjAEAC6fuNoweuv+i4b4XTUgLVP86VduAcVqSccfzdtsFZwfZYh dnVX+e/7BKOf+S38Dyo/X4mtSO2hkIhzIGqZnbKpiN3U/qF6hF2CCfYTmMR48kQQ BcdAFsNoBHLhhUGvIFp+vVFL5qFliLBuewG2+3EyqflCZxUp8H6dBfPtD+SCubjL fJ3TR0dWFhaumzZhEVr+KOsU31injAnY2TzJ8ljj3lKnr7El2QmsET6PiTA3AgMB AAGjggINMIICCTAdBgNVHQ4EFgQUZ3jmY2ngHQomEjn81EUNDwhWebowHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1ODkwOTg1MjI2ODYyNTk1LzAvMzQzMjJlMzUzMTJl MzAyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNTM2MzAzMDM1LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG KjMAMA0GCSqGSIb3DQEBCwUAA4IBAQBhdFDhOs4HTJs9i8KL3WDQ9X4+Z5mt+RuW 3WbaI71VT5tnPPPShqiuXgzj4WtqmZckfn9srJl7wtVVpAjF37KKc4vxfLz8Vytd ZX6VCdp97WjhzoLQ6Hg1smJNP8a7s7BxMPB19BX/auv1NJD3WVDHY6mWM1Y3AbWt Iq1L/n+rpRwgsICXcIrX+xM7Rm04DDg8m7Pz22jEUZVYZc8ZdaPdi4GebG5djZlg 86HW7mDFWkk3vq1px7bwT0TBnVMec0pioCst6qGgkWAMDkmTIMHZT1eLmF0GKqjC m3cJzmwC1xOoSgX1oA77kiVNSX5aJi3qRYGkdRUx5258tuFBQnli -----END CERTIFICATE-----Generated at Wed May 13 13:31:13 2026 by rpki-client