$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234312e31382e302f32332d3233203d3e20313334373731.roa File: 34332e3234312e31382e302f32332d3233203d3e20313334373731.roa (raw, json) Hash identifier: 1K798ucF+bdQ/QsgppkbYcgqjEV7ynXCRD0z+USCQUA= Subject key identifier: 65:92:05:72:BD:3E:F5:88:1F:4B:A8:B3:84:A2:AC:1C:6D:8C:21:8C Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 55423210FF94EC1061684CEB5A4A4AD33D5D6F62 Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234312e31382e302f32332d3233203d3e20313334373731.roa Signing time: Wed 29 Apr 2026 08:01:37 +0000 ROA not before: Wed 29 Apr 2026 07:56:37 +0000 ROA not after: Wed 28 Apr 2027 08:01:37 +0000 asID: 134771 IP address blocks: 43.241.18.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 09:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:42:32:10:ff:94:ec:10:61:68:4c:eb:5a:4a:4a:d3:3d:5d:6f:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: Apr 29 07:56:37 2026 GMT Not After : Apr 28 08:01:37 2027 GMT Subject: CN=65920572BD3EF5881F4BA8B384A2AC1C6D8C218C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:32:f4:9b:c0:43:79:fa:4b:e0:64:d7:1e:1d: 5a:de:62:ec:52:49:61:b6:5d:dc:cd:23:3e:71:20: f6:7a:d2:79:4e:32:44:f7:da:15:04:d7:86:b6:98: 5a:73:21:75:57:35:b5:48:21:61:78:ca:c6:a9:02: 50:d7:06:d0:b5:e0:aa:bf:c9:ca:a1:08:05:fb:e9: d5:85:0d:e6:d7:a6:af:db:70:1d:91:ce:e2:94:db: d0:b9:3d:3e:aa:21:45:10:5b:57:29:7b:1d:ba:11: 40:8b:a4:d2:16:2e:b2:90:b9:37:f6:42:68:bb:cb: b9:1a:0a:e7:d9:fa:f0:3e:f7:86:ba:51:63:c5:ec: 57:74:ae:c1:2e:98:85:4f:7f:b2:e2:73:d5:29:61: ae:23:34:a2:1b:b1:ca:36:9c:89:7a:16:87:db:f3: b7:e6:81:7a:76:48:c0:59:8c:d8:c2:f3:b8:42:35: c8:6d:75:e3:15:6f:78:5d:b8:62:71:9e:b3:e4:66: c0:3b:db:00:3b:e2:87:a7:11:32:77:41:f3:f5:ce: 61:71:91:ad:b6:46:71:5e:c5:1b:28:53:ab:3c:e8: d6:27:2d:7d:e8:b6:bb:94:65:81:9a:51:e4:0e:72: 69:1d:a7:ba:b2:d4:58:7f:8b:21:0a:b3:8d:46:54: f4:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:92:05:72:BD:3E:F5:88:1F:4B:A8:B3:84:A2:AC:1C:6D:8C:21:8C X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234312e31382e302f32332d3233203d3e20313334373731.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.241.18.0/23 Signature Algorithm: sha256WithRSAEncryption b2:6e:af:1f:72:37:cc:b1:cb:ef:47:48:91:22:b6:24:59:ae: df:ce:27:63:b4:ae:4b:9a:af:4a:25:df:f1:bf:a5:a3:a6:a4: 9e:e6:0b:ea:4b:15:0e:7f:99:d2:67:d1:57:55:10:63:24:98: a9:a6:b2:fb:69:50:ea:3c:d2:96:ff:7b:72:d1:19:e9:8b:73: 40:f3:6e:44:7e:28:d2:69:97:5d:3a:c5:6d:a8:ab:d9:87:d5: 1b:26:ba:84:84:f8:32:8c:78:0c:8a:22:a1:8d:9b:17:f2:76: d7:b0:f1:87:db:52:47:22:a7:77:54:8b:4f:3d:80:2d:e4:4d: 45:8b:41:e0:e0:b1:81:9b:72:77:73:00:bd:71:f5:4b:54:2b: 0b:3d:9b:d3:22:91:02:96:13:48:69:e1:71:23:dc:32:64:26: 7c:24:73:59:b5:52:01:fb:7b:35:61:69:7a:3e:07:ec:8f:09: 4c:25:ad:55:b1:e7:6c:91:bc:dd:5e:01:54:92:6b:c0:3e:d4: 2d:6d:d2:64:e3:7f:20:76:40:c0:32:f1:b7:bf:7d:ba:76:12: 8d:c3:62:a5:60:b6:6c:8b:d5:89:68:d5:ae:dc:c9:dc:93:03: ca:c1:1e:5e:17:cf:c0:02:a7:dc:1c:b7:3e:28:4c:25:60:c0: 1f:46:8a:0e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVUIyEP+U7BBhaEzrWkpK0z1db2IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA0MjkwNzU2MzdaFw0yNzA0MjgwODAxMzdaMDMxMTAvBgNV BAMTKDY1OTIwNTcyQkQzRUY1ODgxRjRCQThCMzg0QTJBQzFDNkQ4QzIxOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMvSbwEN5+kvgZNceHVreYuxS SWG2XdzNIz5xIPZ60nlOMkT32hUE14a2mFpzIXVXNbVIIWF4ysapAlDXBtC14Kq/ ycqhCAX76dWFDebXpq/bcB2RzuKU29C5PT6qIUUQW1cpex26EUCLpNIWLrKQuTf2 Qmi7y7kaCufZ+vA+94a6UWPF7Fd0rsEumIVPf7Lic9UpYa4jNKIbsco2nIl6Fofb 87fmgXp2SMBZjNjC87hCNchtdeMVb3hduGJxnrPkZsA72wA74oenETJ3QfP1zmFx ka22RnFexRsoU6s86NYnLX3otruUZYGaUeQOcmkdp7qy1Fh/iyEKs41GVPRlAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUZZIFcr0+9YgfS6izhKKsHG2MIYwwHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY4NjczMDgyNTc2MDc3MS8wLzM0MzMyZTMyMzQz MTJlMzEzODJlMzAyZjMyMzMyZDMyMzMyMDNkM2UyMDMxMzMzNDM3MzczMS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEASvxEjANBgkqhkiG9w0BAQsFAAOCAQEAsm6vH3I3zLHL70dIkSK2JFmu 384nY7SuS5qvSiXf8b+lo6aknuYL6ksVDn+Z0mfRV1UQYySYqaay+2lQ6jzSlv97 ctEZ6YtzQPNuRH4o0mmXXTrFbair2YfVGya6hIT4Mox4DIoioY2bF/J217Dxh9tS RyKnd1SLTz2ALeRNRYtB4OCxgZtyd3MAvXH1S1QrCz2b0yKRApYTSGnhcSPcMmQm fCRzWbVSAft7NWFpej4H7I8JTCWtVbHnbJG83V4BVJJrwD7ULW3SZON/IHZAwDLx t799unYSjcNipWC2bIvViWjVrtzJ3JMDysEeXhfPwAKn3By3PihMJWDAH0aKDg== -----END CERTIFICATE-----Generated at Wed May 13 20:55:00 2026 by rpki-client