$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138382e302f32322d3332203d3e2034383038.roa File: 34332e3234372e3138382e302f32322d3332203d3e2034383038.roa (raw, json) Hash identifier: rhGWHb7CEz3GRcQ4JkTEOeeP9/h0igCZc3WCvzS2D2o= Subject key identifier: CD:0C:C5:01:A1:E1:FF:90:EC:05:DC:BC:9F:92:1A:4E:96:14:60:91 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 36F070E24D92D012AE22A7A1026876F888D74F89 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138382e302f32322d3332203d3e2034383038.roa Signing time: Mon 11 May 2026 02:34:34 +0000 ROA not before: Mon 11 May 2026 02:29:34 +0000 ROA not after: Mon 10 May 2027 02:34:34 +0000 asID: 4808 IP address blocks: 43.247.188.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f0:70:e2:4d:92:d0:12:ae:22:a7:a1:02:68:76:f8:88:d7:4f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: May 11 02:29:34 2026 GMT Not After : May 10 02:34:34 2027 GMT Subject: CN=CD0CC501A1E1FF90EC05DCBC9F921A4E96146091 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b5:c9:2f:97:78:b0:19:32:1c:3b:6d:fb:ba: 17:ee:f2:15:fd:6f:15:63:74:9e:74:e0:60:11:83: fa:87:bf:7e:97:bf:d7:4d:bc:45:f2:f1:32:e6:18: b2:57:51:52:44:9e:ed:e5:ca:f8:5e:6c:73:90:bd: 50:c2:8c:12:3a:56:a9:43:a2:da:ad:e5:7d:80:cb: 41:a1:8b:3c:99:ea:b9:27:8b:6c:11:13:f2:0e:ab: b0:4e:30:15:4a:45:6c:2e:86:8d:cb:49:75:9d:6f: 79:86:8c:05:77:09:38:bc:84:c0:e5:f8:bc:a7:f1: 3b:53:cb:10:d2:c8:9d:e1:02:19:02:39:f4:2d:8d: 42:86:ca:6d:87:de:1d:25:c8:5f:9d:3e:01:26:ed: d6:d2:50:a5:fd:18:ed:9f:95:a8:90:df:b3:81:4c: 61:39:66:18:60:ee:7e:d1:d5:71:1f:d1:01:f7:2e: a8:22:e2:30:ff:a2:8c:2d:92:b9:19:cc:3e:38:d9: 77:ac:48:98:39:7f:81:2d:a2:af:3e:6d:27:06:c2: 32:07:90:df:c0:2b:d1:fc:a5:1b:2d:b2:b4:79:31: bc:25:2b:8e:90:45:cf:02:e6:85:c9:4b:28:07:b7: f0:ca:96:f4:41:c7:16:4f:d7:9d:88:d1:7c:53:38: 9f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:0C:C5:01:A1:E1:FF:90:EC:05:DC:BC:9F:92:1A:4E:96:14:60:91 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3234372e3138382e302f32322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.188.0/22 Signature Algorithm: sha256WithRSAEncryption b4:17:7e:29:4c:e3:6f:0c:f5:d4:7f:27:38:41:8c:eb:e7:36: a4:c9:19:ed:7c:79:9d:46:f7:21:cd:83:bb:9f:4b:42:76:9e: 8f:3b:08:5e:84:93:80:85:d9:7a:bc:b4:25:fa:09:05:58:29: 3b:82:82:c4:64:e2:f5:79:ef:a8:e9:66:39:60:ad:8c:3e:e5: 30:e6:1a:ec:97:f2:47:27:3a:ef:63:3a:7c:c3:1e:4c:16:8f: 6e:ae:50:71:0f:ec:33:f6:40:f0:74:93:06:37:72:0d:06:f4: 05:73:a1:fa:60:d5:ec:fb:ac:a9:a5:f6:12:6e:90:4f:03:c5: c2:08:a3:fd:72:04:c2:28:0c:50:eb:c1:e0:30:df:86:e3:c1: 40:19:41:28:25:dc:ad:57:a8:b4:1f:b8:99:0d:f0:9c:a5:31: e5:7a:a8:b4:d5:f2:fb:f6:e0:81:62:79:51:79:90:cc:d4:0e: 5e:0a:44:b8:60:78:f1:d4:4d:45:ca:e9:3e:ac:d9:bf:a3:c0: d5:9e:6e:fc:56:b1:a5:a0:cc:07:13:77:2e:d5:96:a3:be:b7: e9:9b:31:e9:d5:8b:49:70:d7:4c:f7:70:94:d8:d3:e6:af:dc: 44:65:28:09:bb:55:74:aa:cd:a2:1b:2e:87:d0:0e:66:25:86: a3:33:85:4f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUNvBw4k2S0BKuIqehAmh2+IjXT4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA1MTEwMjI5MzRaFw0yNzA1MTAwMjM0MzRaMDMxMTAvBgNV BAMTKENEMENDNTAxQTFFMUZGOTBFQzA1RENCQzlGOTIxQTRFOTYxNDYwOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXtckvl3iwGTIcO237uhfu8hX9 bxVjdJ504GARg/qHv36Xv9dNvEXy8TLmGLJXUVJEnu3lyvhebHOQvVDCjBI6VqlD otqt5X2Ay0GhizyZ6rkni2wRE/IOq7BOMBVKRWwuho3LSXWdb3mGjAV3CTi8hMDl +Lyn8TtTyxDSyJ3hAhkCOfQtjUKGym2H3h0lyF+dPgEm7dbSUKX9GO2flaiQ37OB TGE5Zhhg7n7R1XEf0QH3Lqgi4jD/oowtkrkZzD442XesSJg5f4Etoq8+bScGwjIH kN/AK9H8pRstsrR5MbwlK46QRc8C5oXJSygHt/DKlvRBxxZP152I0XxTOJ/3AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUzQzFAaHh/5DsBdy8n5IaTpYUYJEwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzQzMzJlMzIzNDM3 MmUzMTM4MzgyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv3vDANBgkqhkiG9w0BAQsFAAOCAQEAtBd+KUzjbwz11H8nOEGM6+c2pMkZ 7Xx5nUb3Ic2Du59LQnaejzsIXoSTgIXZery0JfoJBVgpO4KCxGTi9XnvqOlmOWCt jD7lMOYa7JfyRyc672M6fMMeTBaPbq5QcQ/sM/ZA8HSTBjdyDQb0BXOh+mDV7Pus qaX2Em6QTwPFwgij/XIEwigMUOvB4DDfhuPBQBlBKCXcrVeotB+4mQ3wnKUx5Xqo tNXy+/bggWJ5UXmQzNQOXgpEuGB48dRNRcrpPqzZv6PA1Z5u/FaxpaDMBxN3LtWW o7636Zsx6dWLSXDXTPdwlNjT5q/cRGUoCbtVdKrNohsuh9AOZiWGozOFTw== -----END CERTIFICATE-----Generated at Wed May 13 18:03:53 2026 by rpki-client