$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3235342e3133362e302f32322d3332203d3e2034383337.roa File: 34332e3235342e3133362e302f32322d3332203d3e2034383337.roa (raw, json) Hash identifier: E6EErF6dn2+3RoNEs+Qa/gAie91cIjN/HBs4TkYUFFs= Subject key identifier: 21:9A:67:4D:A4:79:DA:3E:9C:00:BD:15:2F:53:80:F8:49:D3:68:F8 Certificate issuer: /CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Certificate serial: 6199EEBB905A8A69D06B3D09FEF3B96D0CBB5781 Authority key identifier: 20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3235342e3133362e302f32322d3332203d3e2034383337.roa Signing time: Mon 11 May 2026 02:27:49 +0000 ROA not before: Mon 11 May 2026 02:22:49 +0000 ROA not after: Mon 10 May 2027 02:27:49 +0000 asID: 4837 IP address blocks: 43.254.136.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:99:ee:bb:90:5a:8a:69:d0:6b:3d:09:fe:f3:b9:6d:0c:bb:57:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20CAC8E70B5CB3094E47FF051623A98578C1E315 Validity Not Before: May 11 02:22:49 2026 GMT Not After : May 10 02:27:49 2027 GMT Subject: CN=219A674DA479DA3E9C00BD152F5380F849D368F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:4d:a2:a6:19:cc:8d:9d:cc:b9:58:d1:82: 6e:c7:f7:a6:c6:c3:0c:c6:1d:03:24:25:20:34:ac: b0:69:1e:f4:cc:88:2b:95:45:52:dc:29:26:8c:18: 04:54:3c:db:0e:ac:4c:10:11:63:75:8b:ee:be:15: 20:9c:5d:5f:f4:c6:fc:e4:21:da:21:7a:4c:11:1e: ba:bb:10:f7:c8:52:b1:91:7d:3d:4d:11:83:45:c2: 84:47:9f:e1:ad:09:d6:42:ab:88:b9:13:21:eb:66: f8:3a:73:f7:03:a0:1a:58:ac:b7:e7:1b:eb:af:0f: 21:54:ac:3f:35:ea:70:bc:40:f2:c7:04:3c:c1:83: f2:9e:d5:c3:08:1d:c6:ea:ea:58:1a:74:7d:79:50: 55:c2:db:96:71:e8:8f:43:2d:cd:d6:57:41:5d:a3: 4a:80:1b:08:7d:71:a4:e5:13:55:ec:ba:4b:75:9c: 28:a9:88:e8:e6:35:4d:ee:58:c4:da:de:c5:67:82: 44:7f:44:37:d6:14:06:39:14:28:c6:6f:fa:2d:88: fc:83:09:08:47:d3:ae:e7:e3:74:40:e4:5e:7c:23: 50:d0:4e:e0:e8:a1:3d:e8:1b:e1:fc:23:32:f0:02: 6e:63:2a:62:f7:5b:db:3d:f5:3f:59:a6:63:13:3f: 79:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9A:67:4D:A4:79:DA:3E:9C:00:BD:15:2F:53:80:F8:49:D3:68:F8 X509v3 Authority Key Identifier: keyid:20:CA:C8:E7:0B:5C:B3:09:4E:47:FF:05:16:23:A9:85:78:C1:E3:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/20CAC8E70B5CB3094E47FF051623A98578C1E315.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/20CAC8E70B5CB3094E47FF051623A98578C1E315.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095984294767099905/0/34332e3235342e3133362e302f32322d3332203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.136.0/22 Signature Algorithm: sha256WithRSAEncryption 0f:89:77:bb:84:23:22:ae:b7:a1:87:a3:d8:51:db:95:1c:7a: 8d:3f:68:43:be:0d:fd:5c:8c:21:0e:5f:78:71:6c:78:71:5e: 77:37:5c:4e:85:39:84:0f:4e:11:e0:61:16:f6:1c:88:54:f1: 78:d5:6f:3c:b2:fb:3d:08:96:32:71:a5:11:54:0b:c0:04:6a: f8:4e:69:d8:f5:9c:e9:98:ec:05:69:f8:c6:f0:d4:28:0e:51: 21:11:58:d0:2b:c6:92:6d:05:38:bf:0c:7c:a1:3b:7b:99:bc: a7:1c:ee:f2:19:41:9d:09:7b:9e:fa:4b:b1:76:1c:7b:7c:e9: 07:10:d2:f8:52:66:12:b8:a7:df:93:ae:a8:20:31:34:9f:08: 12:8a:02:82:ac:97:6c:8d:9f:cf:0c:f6:bd:9e:f9:ae:e8:30: f2:97:98:81:6a:f9:5e:e1:60:bc:86:3d:e2:23:f6:f8:ee:39: ae:f0:a2:7c:53:76:d6:15:4f:58:d3:f7:f4:a3:d5:20:f2:05: b8:de:ff:b4:77:6d:bf:a1:0c:89:aa:e3:04:b8:b8:1f:65:c2: 52:1d:7f:8d:4a:03:12:ad:ef:2c:5c:dc:0a:21:f5:a7:85:65: 1f:ed:6a:d4:1b:6c:38:4b:c6:4b:8e:66:98:04:f6:a6:09:12: 1d:ea:b3:46 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYZnuu5BaimnQaz0J/vO5bQy7V4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3 OEMxRTMxNTAeFw0yNjA1MTEwMjIyNDlaFw0yNzA1MTAwMjI3NDlaMDMxMTAvBgNV BAMTKDIxOUE2NzREQTQ3OURBM0U5QzAwQkQxNTJGNTM4MEY4NDlEMzY4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoE2iphnMjZ3MuVjRgm7H96bG wwzGHQMkJSA0rLBpHvTMiCuVRVLcKSaMGARUPNsOrEwQEWN1i+6+FSCcXV/0xvzk IdohekwRHrq7EPfIUrGRfT1NEYNFwoRHn+GtCdZCq4i5EyHrZvg6c/cDoBpYrLfn G+uvDyFUrD816nC8QPLHBDzBg/Ke1cMIHcbq6lgadH15UFXC25Zx6I9DLc3WV0Fd o0qAGwh9caTlE1Xsukt1nCipiOjmNU3uWMTa3sVngkR/RDfWFAY5FCjGb/otiPyD CQhH067n43RA5F58I1DQTuDooT3oG+H8IzLwAm5jKmL3W9s99T9ZpmMTP3nNAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUIZpnTaR52j6cAL0VL1OA+EnTaPgwHwYDVR0j BBgwFoAUIMrI5wtcswlOR/8FFiOphXjB4xUwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk4NDI5NDc2NzA5OTkwNS8wLzIwQ0FDOEU3MEI1Q0IzMDk0RTQ3RkYwNTE2MjNB OTg1NzhDMUUzMTUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjBDQUM4RTcwQjVDQjMwOTRFNDdGRjA1MTYyM0E5ODU3OEMxRTMxNS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTg0Mjk0NzY3MDk5OTA1LzAvMzQzMzJlMzIzNTM0 MmUzMTMzMzYyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv+iDANBgkqhkiG9w0BAQsFAAOCAQEAD4l3u4QjIq63oYej2FHblRx6jT9o Q74N/VyMIQ5feHFseHFedzdcToU5hA9OEeBhFvYciFTxeNVvPLL7PQiWMnGlEVQL wARq+E5p2PWc6ZjsBWn4xvDUKA5RIRFY0CvGkm0FOL8MfKE7e5m8pxzu8hlBnQl7 nvpLsXYce3zpBxDS+FJmErin35OuqCAxNJ8IEooCgqyXbI2fzwz2vZ75rugw8peY gWr5XuFgvIY94iP2+O45rvCifFN21hVPWNP39KPVIPIFuN7/tHdtv6EMiarjBLi4 H2XCUh1/jUoDEq3vLFzcCiH1p4VlH+1q1BtsOEvGS45mmAT2pgkSHeqzRg== -----END CERTIFICATE-----Generated at Wed May 13 15:57:58 2026 by rpki-client