$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096250886386089987/0/34332e3234302e3230332e302f32342d3234203d3e2030.roa File: 34332e3234302e3230332e302f32342d3234203d3e2030.roa (raw, json) Hash identifier: B9336hSEDKsLNxqt5DYV9dkzCNCfuJLc50T2hGH9s08= Subject key identifier: 0E:83:30:EE:CB:F5:75:30:D7:6B:02:74:BF:6C:1C:31:C8:B3:79:98 Certificate issuer: /CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Certificate serial: 152DBD1A55C0E0E3873EF36568E8C877E3833693 Authority key identifier: AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/34332e3234302e3230332e302f32342d3234203d3e2030.roa Signing time: Tue 12 May 2026 01:55:19 +0000 ROA not before: Tue 12 May 2026 01:50:19 +0000 ROA not after: Tue 11 May 2027 01:55:19 +0000 asID: 0 IP address blocks: 43.240.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 23:51:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2d:bd:1a:55:c0:e0:e3:87:3e:f3:65:68:e8:c8:77:e3:83:36:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AE09DD056B3B5EA4C48722C67F63F0A12CAAF727 Validity Not Before: May 12 01:50:19 2026 GMT Not After : May 11 01:55:19 2027 GMT Subject: CN=0E8330EECBF57530D76B0274BF6C1C31C8B37998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b7:5f:09:c5:28:30:24:77:0d:79:2d:fc:af: 6c:4a:0d:d3:a6:13:7c:ab:e3:97:95:90:80:33:36: 7a:93:9a:f7:55:9e:a2:f1:62:97:5e:21:fe:f3:de: 07:8d:ab:50:f6:d3:6d:ca:60:42:22:b4:bc:f5:a6: ce:e3:a5:02:74:3f:ec:64:f8:eb:af:ac:70:31:5e: 07:4b:85:10:ae:c3:ae:99:4b:61:63:36:7a:68:9e: 55:5f:2d:6f:b3:39:16:07:55:e6:40:17:58:b0:e8: ed:76:0a:75:fc:21:bb:c3:e8:90:ec:18:5b:38:45: e2:b5:c1:df:62:19:2c:44:c9:dc:1d:e1:10:84:2f: 94:7d:c1:06:c4:13:56:cf:d4:b8:bf:f4:3d:06:a3: 2a:8f:ce:29:76:71:30:96:c8:70:70:f3:62:db:bc: c7:ff:a2:21:f2:bd:fe:b6:2a:80:4b:43:85:d9:41: c0:34:7a:77:49:a3:23:ad:c8:f4:fa:bc:5f:c6:21: e6:64:9b:ef:ff:54:39:d0:c5:51:5d:2d:91:b2:e1: f0:63:18:c2:0b:25:1c:f8:29:02:81:8b:c9:4f:c9: 5f:91:90:2e:af:8a:c6:0f:ad:f1:bc:97:5b:d1:49: 9f:c7:68:c9:13:20:34:f0:e5:6c:34:fb:20:b8:87: 68:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:83:30:EE:CB:F5:75:30:D7:6B:02:74:BF:6C:1C:31:C8:B3:79:98 X509v3 Authority Key Identifier: keyid:AE:09:DD:05:6B:3B:5E:A4:C4:87:22:C6:7F:63:F0:A1:2C:AA:F7:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AE09DD056B3B5EA4C48722C67F63F0A12CAAF727.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096250886386089987/0/34332e3234302e3230332e302f32342d3234203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.203.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f0:1d:3e:d6:df:98:f7:16:84:78:c5:f9:f7:9a:b2:f9:a1: e4:84:77:cc:35:8b:da:45:fe:3f:ad:fc:45:1d:5a:df:79:ec: 03:00:e0:c3:b6:da:42:ea:39:a8:6f:e4:3e:44:af:27:11:dd: 2b:9e:44:bc:41:23:f4:92:f1:25:c3:36:d1:92:99:96:69:c3: c1:fb:31:8c:4a:65:02:fb:c3:5a:54:39:26:ea:e3:06:a6:4a: 40:aa:4d:60:37:46:f9:00:5b:76:f4:8c:27:0d:0e:5e:78:8d: 46:c0:4a:4b:b4:d7:b7:b6:75:4f:d4:e7:f9:56:5d:eb:6b:55: 3e:0f:51:ee:9d:d3:04:2e:35:46:fb:27:4b:80:87:0d:51:46: 66:6b:dc:f5:37:6c:f4:4a:18:9c:d2:3c:58:b1:d6:2c:de:3a: b7:29:42:bb:be:4c:8d:bb:4e:fd:7b:35:23:5e:a9:4c:92:26: 9e:95:6e:b9:f0:17:bb:7f:7f:13:c5:05:ba:2b:34:f9:d9:e3: 03:46:fc:50:56:8d:71:3c:f7:c8:c0:70:01:50:88:dc:38:51: 12:27:00:bc:d2:53:5e:d6:3f:11:86:a9:d1:a3:b1:a4:77:ed: b6:9a:06:03:b0:b1:44:0f:43:c6:4d:df:0b:ea:d2:78:fe:8a: 0e:f2:0d:db -----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgIUFS29GlXA4OOHPvNlaOjId+ODNpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEy Q0FBRjcyNzAeFw0yNjA1MTIwMTUwMTlaFw0yNzA1MTEwMTU1MTlaMDMxMTAvBgNV BAMTKDBFODMzMEVFQ0JGNTc1MzBENzZCMDI3NEJGNkMxQzMxQzhCMzc5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMt18JxSgwJHcNeS38r2xKDdOm E3yr45eVkIAzNnqTmvdVnqLxYpdeIf7z3geNq1D2023KYEIitLz1ps7jpQJ0P+xk +OuvrHAxXgdLhRCuw66ZS2FjNnponlVfLW+zORYHVeZAF1iw6O12CnX8IbvD6JDs GFs4ReK1wd9iGSxEydwd4RCEL5R9wQbEE1bP1Li/9D0GoyqPzil2cTCWyHBw82Lb vMf/oiHyvf62KoBLQ4XZQcA0endJoyOtyPT6vF/GIeZkm+//VDnQxVFdLZGy4fBj GMILJRz4KQKBi8lPyV+RkC6visYPrfG8l1vRSZ/HaMkTIDTw5Ww0+yC4h2hxAgMB AAGjggILMIICBzAdBgNVHQ4EFgQUDoMw7sv1dTDXawJ0v2wcMcizeZgwHwYDVR0j BBgwFoAUrgndBWs7XqTEhyLGf2PwoSyq9ycwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MDg4NjM4NjA4OTk4Ny8wL0FFMDlERDA1NkIzQjVFQTRDNDg3MjJDNjdGNjNG MEExMkNBQUY3MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUUwOUREMDU2QjNCNUVBNEM0ODcyMkM2N0Y2M0YwQTEyQ0FBRjcyNy5jZXIw gYQGCCsGAQUFBwELBHgwdjB0BggrBgEFBQcwC4ZocnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MjUwODg2Mzg2MDg5OTg3LzAvMzQzMzJlMzIzNDMw MmUzMjMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw yzANBgkqhkiG9w0BAQsFAAOCAQEAIvAdPtbfmPcWhHjF+feasvmh5IR3zDWL2kX+ P638RR1a33nsAwDgw7baQuo5qG/kPkSvJxHdK55EvEEj9JLxJcM20ZKZlmnDwfsx jEplAvvDWlQ5JurjBqZKQKpNYDdG+QBbdvSMJw0OXniNRsBKS7TXt7Z1T9Tn+VZd 62tVPg9R7p3TBC41RvsnS4CHDVFGZmvc9Tds9EoYnNI8WLHWLN46tylCu75MjbtO /Xs1I16pTJImnpVuufAXu39/E8UFuis0+dnjA0b8UFaNcTz3yMBwAVCI3DhREicA vNJTXtY/EYap0aOxpHfttpoGA7CxRA9Dxk3fC+rSeP6KDvIN2w== -----END CERTIFICATE-----Generated at Wed May 13 08:23:54 2026 by rpki-client