$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/34332e3234302e3230322e302f32342d3234203d3e2030.roa File: 34332e3234302e3230322e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: E/gjhJ9Hm91GpWCRMJAiLbm9DE3TG+yaRqQ1xloE1CU= Subject key identifier: F9:D8:46:7E:26:D1:F4:6B:93:38:37:BB:B4:39:0E:0D:C6:8C:95:AD Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 1F18671A787A3B060CFDF2A262858FFB01D3C29E Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/34332e3234302e3230322e302f32342d3234203d3e2030.roa Signing time: Tue 12 May 2026 01:55:20 +0000 ROA not before: Tue 12 May 2026 01:50:20 +0000 ROA not after: Tue 11 May 2027 01:55:20 +0000 asID: 0 IP address blocks: 43.240.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:18:67:1a:78:7a:3b:06:0c:fd:f2:a2:62:85:8f:fb:01:d3:c2:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: May 12 01:50:20 2026 GMT Not After : May 11 01:55:20 2027 GMT Subject: CN=F9D8467E26D1F46B933837BBB4390E0DC68C95AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:d8:5c:b2:7f:a4:16:95:6f:58:f2:1b:92:0f: 88:08:4c:96:7e:5f:2a:fd:5b:81:26:e0:a2:53:bc: d8:0c:55:3c:34:37:3e:bb:00:b1:a9:f9:f2:f3:0c: ee:25:b1:90:13:40:2a:06:75:e8:6d:9e:80:09:1f: 3f:0d:af:f8:9f:16:2a:8f:73:e5:c3:21:15:0f:f1: b6:b7:aa:62:e8:6d:43:ba:de:f0:66:2c:b5:dd:30: d0:9c:18:77:59:51:c6:76:70:01:17:c3:8e:ea:c1: 35:27:a5:0c:a9:a3:8b:a1:71:46:41:a3:37:3c:a7: 5c:0d:23:bf:ed:5d:fe:78:3f:e9:1f:9d:10:02:26: 0d:1b:6c:9c:25:53:66:f9:a2:1c:88:87:15:26:24: 4a:48:0d:90:df:a8:1c:24:30:25:83:6b:58:df:0e: 99:72:18:56:7b:8c:1b:b8:80:4f:7e:fc:e5:29:6d: c0:f8:78:5c:7d:a9:8a:a9:2d:04:49:7e:5b:79:56: 73:53:d4:bd:bb:42:f9:ce:43:4e:9d:af:f3:a5:0c: d0:03:4e:eb:99:ad:df:0b:78:04:22:82:46:d4:5b: c7:bd:c6:a2:e8:c3:a8:1c:74:ad:a7:d3:a6:a0:d9: 52:e7:c8:75:70:3a:5c:56:86:7c:39:c8:b2:59:ba: 91:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D8:46:7E:26:D1:F4:6B:93:38:37:BB:B4:39:0E:0D:C6:8C:95:AD X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/34332e3234302e3230322e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.202.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:7d:2f:43:e7:26:2e:aa:53:58:44:c2:fb:8d:27:bc:ea:f7: d9:44:96:67:7a:9f:83:05:55:08:87:f8:65:0f:9b:e5:aa:ba: 61:5b:ee:6d:8b:41:74:67:c7:52:57:58:f8:6d:b4:b0:a1:8b: 84:e5:96:54:2b:57:6d:45:cf:d0:32:6f:77:7f:b3:b0:2a:9b: 59:80:98:dd:a4:e6:72:6a:e7:08:45:9a:9b:fc:cd:5c:1d:54: c3:a0:28:b8:01:c9:33:10:05:b3:7c:5e:0d:10:d1:a2:5b:28: ca:2d:57:fa:bd:de:6c:c0:db:52:0f:ca:00:e0:9e:1f:83:a8: 92:75:cc:6a:20:45:20:28:2e:71:e9:4e:63:04:54:01:80:bb: 2e:e2:ee:19:13:5f:36:91:34:85:fb:88:96:95:43:ab:75:6d: b6:4d:de:52:2e:3c:b4:e0:1c:b2:5d:f5:f1:bd:bf:ef:fb:3b: f7:87:56:bd:43:98:4d:3e:dc:cf:44:56:3d:e0:39:ac:82:ad: 63:ad:a3:71:64:10:87:9f:17:47:6a:1d:92:87:09:90:c0:c2: c7:00:5d:d7:cb:c1:36:20:07:4d:70:af:22:d3:85:17:74:a5: cb:23:0b:da:29:f5:48:ea:09:9a:a1:d8:e1:c6:27:fb:e9:bc: 4e:51:cc:05 -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUHxhnGnh6OwYM/fKiYoWP+wHTwp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA1MTIwMTUwMjBaFw0yNzA1MTEwMTU1MjBaMDMxMTAvBgNV BAMTKEY5RDg0NjdFMjZEMUY0NkI5MzM4MzdCQkI0MzkwRTBEQzY4Qzk1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU2Fyyf6QWlW9Y8huSD4gITJZ+ Xyr9W4Em4KJTvNgMVTw0Nz67ALGp+fLzDO4lsZATQCoGdehtnoAJHz8Nr/ifFiqP c+XDIRUP8ba3qmLobUO63vBmLLXdMNCcGHdZUcZ2cAEXw47qwTUnpQypo4uhcUZB ozc8p1wNI7/tXf54P+kfnRACJg0bbJwlU2b5ohyIhxUmJEpIDZDfqBwkMCWDa1jf DplyGFZ7jBu4gE9+/OUpbcD4eFx9qYqpLQRJflt5VnNT1L27QvnOQ06dr/OlDNAD TuuZrd8LeAQigkbUW8e9xqLow6gcdK2n06ag2VLnyHVwOlxWhnw5yLJZupEnAgMB AAGjggILMIICBzAdBgNVHQ4EFgQU+dhGfibR9GuTODe7tDkODcaMla0wHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MjUwODg2Mzg2MDg5OTg3LzAvMzQzMzJlMzIzNDMw MmUzMjMwMzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw yjANBgkqhkiG9w0BAQsFAAOCAQEATX0vQ+cmLqpTWETC+40nvOr32USWZ3qfgwVV CIf4ZQ+b5aq6YVvubYtBdGfHUldY+G20sKGLhOWWVCtXbUXP0DJvd3+zsCqbWYCY 3aTmcmrnCEWam/zNXB1Uw6AouAHJMxAFs3xeDRDRolsoyi1X+r3ebMDbUg/KAOCe H4OoknXMaiBFICgucelOYwRUAYC7LuLuGRNfNpE0hfuIlpVDq3Vttk3eUi48tOAc sl318b2/7/s794dWvUOYTT7cz0RWPeA5rIKtY62jcWQQh58XR2odkocJkMDCxwBd 18vBNiAHTXCvItOFF3SlyyML2in1SOoJmqHY4cYn++m8TlHMBQ== -----END CERTIFICATE-----Generated at Wed May 13 11:58:37 2026 by rpki-client