$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34332e3232342e35362e302f32322d3234203d3e203539303438.roa File: 34332e3232342e35362e302f32322d3234203d3e203539303438.roa (raw, json) Hash identifier: 2AzEOe7+Lt7hm+/M8NZOYg3KK78gG9HdK+UdOm6e4Ys= Subject key identifier: 1E:90:67:64:44:53:AF:6F:8C:0C:23:CF:58:92:6A:F3:CC:7D:B4:F1 Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 1CC53552D18C4768482A2236152623B08D112765 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34332e3232342e35362e302f32322d3234203d3e203539303438.roa Signing time: Mon 11 May 2026 07:00:47 +0000 ROA not before: Mon 11 May 2026 06:55:47 +0000 ROA not after: Mon 10 May 2027 07:00:47 +0000 asID: 59048 IP address blocks: 43.224.56.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:c5:35:52:d1:8c:47:68:48:2a:22:36:15:26:23:b0:8d:11:27:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:47 2026 GMT Not After : May 10 07:00:47 2027 GMT Subject: CN=1E9067644453AF6F8C0C23CF58926AF3CC7DB4F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:63:81:10:01:bf:2e:14:e5:a5:cf:c0:bc:7e: d6:b1:a4:f3:ad:12:c9:b4:38:bb:d9:ad:41:c8:35: 4d:87:92:be:9e:7d:cd:ed:07:ad:91:dd:81:12:16: 11:bb:f7:98:0c:af:98:86:2a:3c:19:41:0b:7d:b9: f1:c6:9d:93:7b:b9:29:fc:f4:a5:61:06:ce:19:64: 97:a6:53:4d:2a:fa:2e:7f:73:08:d4:31:37:17:5b: 92:96:95:c2:50:09:21:bb:4a:ca:52:ce:11:1c:ae: c8:01:2a:ba:e1:59:fd:9d:85:04:e9:63:a9:02:d2: 4f:27:fb:9e:bd:46:f9:3f:77:01:b5:d0:39:99:80: 91:cd:fe:55:43:b0:d7:5d:93:b0:11:44:ad:9b:f1: 1d:38:49:60:c9:84:e5:d4:58:da:66:b0:ae:61:3e: fc:36:a3:99:25:d1:5d:ab:c1:1a:4b:2b:ee:a3:fe: 95:4e:ca:4a:38:03:81:49:ee:3a:02:40:57:b1:40: 01:42:6f:80:f7:7c:0b:84:47:f4:22:72:fe:48:da: 03:69:39:d3:5c:a9:c5:87:c9:8f:89:10:04:14:51: 4b:fb:07:da:0e:78:c0:3f:69:a7:3a:0f:b4:91:eb: 72:ce:3f:7e:54:2d:1a:86:85:57:87:1f:a2:b8:b6: f0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:90:67:64:44:53:AF:6F:8C:0C:23:CF:58:92:6A:F3:CC:7D:B4:F1 X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34332e3232342e35362e302f32322d3234203d3e203539303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.224.56.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:24:86:e9:de:84:43:83:59:32:79:c9:9c:de:0c:63:16:1d: c1:72:b9:21:da:78:21:a1:e6:0a:9b:8f:cf:fb:a9:b9:6e:63: 43:4e:32:63:03:e0:f2:87:0a:b1:ec:9f:5c:ce:72:aa:6e:54: e3:b3:3a:e2:14:9a:cc:e8:c7:bf:a7:f8:32:15:17:b6:8e:65: 75:a9:29:6f:82:17:b3:58:1c:7b:5e:a1:88:1b:63:d6:36:12: 7c:4c:f7:a0:8f:43:fb:ca:0c:48:48:ca:24:40:47:b4:0d:e2: f2:20:6b:f5:2c:c2:79:6e:89:d8:0b:b4:9c:34:83:bc:75:e8: 0e:cd:c5:c4:f9:67:10:4a:ea:4b:6e:71:0d:c4:e5:0a:f2:5e: be:a1:7d:58:5b:e4:05:1b:91:60:66:80:09:24:11:c4:c1:b7: 4f:32:e4:20:27:9b:98:e1:bd:13:79:98:50:77:87:6d:26:cb: 86:df:a7:cc:11:9d:ab:20:dc:d7:de:3c:48:bf:ee:39:e1:58: 3d:1c:ee:81:7b:3a:de:c3:18:1e:17:6e:80:1f:30:31:e1:5b: 6b:fb:b9:6e:f3:f7:c0:3b:50:2c:6a:02:35:15:18:2d:9d:c9: 2d:45:02:f1:05:54:2f:1b:6b:0a:e2:6f:5c:91:19:e5:8d:51: 42:42:99:9a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUHMU1UtGMR2hIKiI2FSYjsI0RJ2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDdaFw0yNzA1MTAwNzAwNDdaMDMxMTAvBgNV BAMTKDFFOTA2NzY0NDQ1M0FGNkY4QzBDMjNDRjU4OTI2QUYzQ0M3REI0RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY4EQAb8uFOWlz8C8ftaxpPOt Esm0OLvZrUHINU2Hkr6efc3tB62R3YESFhG795gMr5iGKjwZQQt9ufHGnZN7uSn8 9KVhBs4ZZJemU00q+i5/cwjUMTcXW5KWlcJQCSG7SspSzhEcrsgBKrrhWf2dhQTp Y6kC0k8n+569Rvk/dwG10DmZgJHN/lVDsNddk7ARRK2b8R04SWDJhOXUWNpmsK5h Pvw2o5kl0V2rwRpLK+6j/pVOyko4A4FJ7joCQFexQAFCb4D3fAuER/Qicv5I2gNp OdNcqcWHyY+JEAQUUUv7B9oOeMA/aac6D7SR63LOP35ULRqGhVeHH6K4tvAvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUHpBnZERTr2+MDCPPWJJq88x9tPEwHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzQzMzJlMzIzMjM0 MmUzNTM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivgODANBgkqhkiG9w0BAQsFAAOCAQEATCSG6d6EQ4NZMnnJnN4MYxYdwXK5 Idp4IaHmCpuPz/upuW5jQ04yYwPg8ocKseyfXM5yqm5U47M64hSazOjHv6f4MhUX to5ldakpb4IXs1gce16hiBtj1jYSfEz3oI9D+8oMSEjKJEBHtA3i8iBr9SzCeW6J 2Au0nDSDvHXoDs3FxPlnEErqS25xDcTlCvJevqF9WFvkBRuRYGaACSQRxMG3TzLk ICebmOG9E3mYUHeHbSbLht+nzBGdqyDc1948SL/uOeFYPRzugXs63sMYHhdugB8w MeFba/u5bvP3wDtQLGoCNRUYLZ3JLUUC8QVULxtrCuJvXJEZ5Y1RQkKZmg== -----END CERTIFICATE-----Generated at Wed May 13 10:40:29 2026 by rpki-client