$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34332e3234322e36302e302f32322d3234203d3e203539303438.roa File: 34332e3234322e36302e302f32322d3234203d3e203539303438.roa (raw, json) Hash identifier: 6ZTubDkVKvr6xO6C1ZQLTp+obk3d65d/QJKT3IxLSzg= Subject key identifier: 48:7F:47:AF:29:4B:51:55:7D:36:E9:E8:A5:09:6D:91:EC:89:15:9F Certificate issuer: /CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Certificate serial: 6BD1EA0811A25A531B84EE3B1EB938EE69AF5311 Authority key identifier: 0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34332e3234322e36302e302f32322d3234203d3e203539303438.roa Signing time: Mon 11 May 2026 07:00:48 +0000 ROA not before: Mon 11 May 2026 06:55:48 +0000 ROA not after: Mon 10 May 2027 07:00:48 +0000 asID: 59048 IP address blocks: 43.242.60.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:d1:ea:08:11:a2:5a:53:1b:84:ee:3b:1e:b9:38:ee:69:af:53:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4A64A90B48C8ED4AA286E8883D595B769FDF8B Validity Not Before: May 11 06:55:48 2026 GMT Not After : May 10 07:00:48 2027 GMT Subject: CN=487F47AF294B51557D36E9E8A5096D91EC89159F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:18:fa:42:2d:4d:90:bf:02:d2:ab:d9:06:95: 10:08:91:89:05:78:89:12:9c:e0:f3:16:1a:67:77: 9d:99:c3:dd:86:6d:17:91:4b:e0:f8:42:cc:e7:62: 60:7e:73:f3:9b:a4:e4:13:e9:3f:64:f2:9f:e5:3c: e7:dd:c8:25:c9:ee:0c:4a:20:45:70:0e:14:53:0e: 3a:37:cc:b6:65:50:74:8f:e7:82:ab:83:62:5e:a2: 79:ba:e9:4f:53:aa:cb:5c:a7:d2:1f:24:1b:34:a8: bc:cf:26:84:8b:b8:02:16:b0:35:62:63:0f:3d:f5: 8f:a3:24:41:c0:1d:83:5e:e6:b1:90:9d:f2:0f:5f: bf:ad:2c:a2:05:84:0f:20:bd:62:11:7d:56:4a:26: 6c:1b:a1:ab:c8:f8:b8:93:08:ab:5a:7a:0e:24:40: 44:8b:7e:de:57:82:c0:a4:a9:d5:c5:ac:22:3f:be: 26:e3:ff:6c:4e:6c:4e:c6:e6:db:c9:5c:55:a3:47: 5e:85:84:7d:85:60:1d:6e:ce:33:ba:c9:31:cf:ae: dc:b6:0e:1f:43:e8:df:6c:dd:46:19:91:9f:d0:25: ec:51:11:38:0b:cf:20:9b:c5:be:1e:87:42:56:fc: 63:24:d6:0e:47:2b:25:c5:30:91:ff:b2:25:b1:9c: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:47:AF:29:4B:51:55:7D:36:E9:E8:A5:09:6D:91:EC:89:15:9F X509v3 Authority Key Identifier: keyid:0E:4A:64:A9:0B:48:C8:ED:4A:A2:86:E8:88:3D:59:5B:76:9F:DF:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/0E4A64A90B48C8ED4AA286E8883D595B769FDF8B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095912410859962371/0/34332e3234322e36302e302f32322d3234203d3e203539303438.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.242.60.0/22 Signature Algorithm: sha256WithRSAEncryption a8:b7:fd:c2:1d:54:78:ea:f8:8f:63:36:76:b9:2c:41:f7:ca: f4:78:0b:15:4f:47:1e:97:e5:5a:00:62:af:0a:05:7d:4c:59: a9:83:37:78:15:a0:40:ad:1f:bc:d3:df:de:27:de:44:d8:99: af:14:2e:d8:70:d8:1e:89:d3:29:a6:7c:ab:59:1d:73:4d:92: 98:45:91:87:8e:e8:52:c4:9e:fe:5c:5c:95:98:e2:64:11:53: 02:50:b7:0d:66:74:53:21:b0:1e:ad:f9:ac:d3:5c:db:ed:15: 65:33:d9:1d:d5:dd:f5:a2:08:4f:b6:7b:b0:6f:5d:7e:ab:8e: 7c:b6:3b:ea:d4:5e:c9:96:87:a0:da:6a:08:27:f3:a1:90:aa: 91:37:c0:dc:ff:a8:45:ed:d7:6a:2a:30:40:ea:ba:40:e0:b0: b2:29:cc:85:8f:d2:37:27:e4:b4:e0:11:49:68:56:c0:74:af: 7e:b5:48:d6:bf:98:ce:f7:ef:42:09:4d:5c:85:c1:17:57:3d: b2:33:f2:e8:bc:97:6c:5f:0d:68:9e:ad:3f:66:87:56:6c:0f: d5:09:d4:3c:c7:0f:81:8b:3a:ed:5b:ea:cc:6e:f4:f8:e8:3b: 85:4f:d7:76:6d:3e:dd:5a:f2:a7:52:fb:85:35:c2:2b:b6:5f: 90:fc:9b:29 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUa9HqCBGiWlMbhO47Hrk47mmvUxEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3 NjlGREY4QjAeFw0yNjA1MTEwNjU1NDhaFw0yNzA1MTAwNzAwNDhaMDMxMTAvBgNV BAMTKDQ4N0Y0N0FGMjk0QjUxNTU3RDM2RTlFOEE1MDk2RDkxRUM4OTE1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtGPpCLU2QvwLSq9kGlRAIkYkF eIkSnODzFhpnd52Zw92GbReRS+D4QsznYmB+c/ObpOQT6T9k8p/lPOfdyCXJ7gxK IEVwDhRTDjo3zLZlUHSP54Krg2Jeonm66U9Tqstcp9IfJBs0qLzPJoSLuAIWsDVi Yw899Y+jJEHAHYNe5rGQnfIPX7+tLKIFhA8gvWIRfVZKJmwboavI+LiTCKtaeg4k QESLft5XgsCkqdXFrCI/vibj/2xObE7G5tvJXFWjR16FhH2FYB1uzjO6yTHPrty2 Dh9D6N9s3UYZkZ/QJexRETgLzyCbxb4eh0JW/GMk1g5HKyXFMJH/siWxnPatAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUSH9HrylLUVV9NunopQltkeyJFZ8wHwYDVR0j BBgwFoAUDkpkqQtIyO1KooboiD1ZW3af34swDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTkxMjQxMDg1OTk2MjM3MS8wLzBFNEE2NEE5MEI0OEM4RUQ0QUEyODZFODg4M0Q1 OTVCNzY5RkRGOEIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMEU0QTY0QTkwQjQ4QzhFRDRBQTI4NkU4ODgzRDU5NUI3NjlGREY4Qi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTEyNDEwODU5OTYyMzcxLzAvMzQzMzJlMzIzNDMy MmUzNjMwMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzOTMwMzQzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivyPDANBgkqhkiG9w0BAQsFAAOCAQEAqLf9wh1UeOr4j2M2drksQffK9HgL FU9HHpflWgBirwoFfUxZqYM3eBWgQK0fvNPf3ifeRNiZrxQu2HDYHonTKaZ8q1kd c02SmEWRh47oUsSe/lxclZjiZBFTAlC3DWZ0UyGwHq35rNNc2+0VZTPZHdXd9aII T7Z7sG9dfquOfLY76tReyZaHoNpqCCfzoZCqkTfA3P+oRe3XaiowQOq6QOCwsinM hY/SNyfktOARSWhWwHSvfrVI1r+YzvfvQglNXIXBF1c9sjPy6LyXbF8NaJ6tP2aH VmwP1QnUPMcPgYs67VvqzG70+Og7hU/Xdm0+3Vryp1L7hTXCK7ZfkPybKQ== -----END CERTIFICATE-----Generated at Wed May 13 12:46:46 2026 by rpki-client