$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/34332e3234302e3138342e302f32322d3234203d3e203535393939.roa File: 34332e3234302e3138342e302f32322d3234203d3e203535393939.roa (raw, json) Hash identifier: 1z9YhBL4mANr+MTfVawRwh8WOH/nnoSQGneVA1K0Ees= Subject key identifier: C2:A0:FB:00:78:81:5B:6F:0F:DA:DB:61:AD:29:11:EC:13:39:D8:CA Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 099C39E6A2495B132F1F5718DE06DE44BE89B306 Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/34332e3234302e3138342e302f32322d3234203d3e203535393939.roa Signing time: Fri 08 May 2026 15:29:42 +0000 ROA not before: Fri 08 May 2026 15:24:42 +0000 ROA not after: Fri 07 May 2027 15:29:42 +0000 asID: 55999 IP address blocks: 43.240.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9c:39:e6:a2:49:5b:13:2f:1f:57:18:de:06:de:44:be:89:b3:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: May 8 15:24:42 2026 GMT Not After : May 7 15:29:42 2027 GMT Subject: CN=C2A0FB0078815B6F0FDADB61AD2911EC1339D8CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:96:c2:0e:1f:43:2a:d7:ed:59:d7:42:5e: 18:6c:f4:2d:29:77:ed:52:2b:33:ac:d2:1d:cc:c7: 0c:64:f0:55:86:25:06:d9:78:f5:2d:70:50:ed:7c: 24:04:d0:1d:c6:ba:85:1f:18:77:36:84:52:f1:af: ac:12:1d:b7:b5:44:35:aa:15:ce:d1:5c:a5:e5:c1: b1:12:28:a9:98:51:68:9a:49:30:1b:61:13:62:75: 64:c9:0f:d1:a5:85:af:8e:74:58:3d:2c:99:a9:e9: 3b:30:39:94:0d:32:9e:c0:f5:e6:ae:39:84:9e:ca: 7d:7a:36:be:39:38:b8:da:7d:0f:78:a5:90:5b:8f: ec:46:ff:4c:92:0e:f8:82:48:6b:a2:dc:cb:c2:b1: e1:13:7a:0b:71:19:bd:4d:e2:32:16:f4:2b:45:7d: ff:f3:cb:ea:29:19:7a:25:81:98:ef:c7:75:07:15: 40:1f:a9:17:6f:a1:76:d5:34:27:ed:a7:b5:69:11: 59:1c:99:f7:98:2a:a4:d6:ef:01:08:d2:64:55:ae: af:2a:cf:1a:d7:6b:5f:47:4c:f1:6f:af:1b:2f:c3: b7:45:f6:d4:98:3e:1d:c5:d0:33:13:f8:f1:ed:fb: c8:cf:a9:70:79:16:94:2f:e2:67:98:f0:bd:97:be: 7a:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A0:FB:00:78:81:5B:6F:0F:DA:DB:61:AD:29:11:EC:13:39:D8:CA X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/34332e3234302e3138342e302f32322d3234203d3e203535393939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.184.0/22 Signature Algorithm: sha256WithRSAEncryption 27:4e:1d:bd:02:fb:36:36:4e:aa:dc:a6:8c:8d:77:1c:1a:09: db:4a:b8:78:77:6a:4c:68:49:1d:94:cf:65:88:cd:77:d9:73: 27:4d:c0:11:9a:36:bb:91:7e:80:24:cb:a5:b3:70:f8:e6:7d: 1e:d0:0d:e0:45:61:3e:0f:ce:ad:5d:8e:bc:90:b3:89:75:e0: e8:91:a9:5b:16:9f:9c:ec:2a:65:7b:61:48:d0:db:ac:89:fa: 7d:61:4f:f6:93:bf:06:fe:97:9e:8b:d5:59:5b:90:56:1c:48: 92:e8:37:f9:db:17:26:4d:af:16:ef:85:ec:09:51:ef:ed:c1: ce:79:51:84:c1:34:18:63:d9:1d:55:4d:b1:94:45:25:06:c5: ff:db:b6:e3:36:6d:af:96:1b:95:a5:c9:24:32:71:16:3d:df: 1f:1e:ae:aa:5b:4a:7f:bb:39:5a:76:24:7c:2d:ef:5b:45:f8: 64:e2:16:53:2d:5b:2d:8d:b9:86:33:b5:9f:02:c7:e9:a9:2c: ad:2c:51:c4:b9:21:3b:48:a6:10:5b:ee:73:06:65:c9:69:b4: ca:49:5c:14:32:29:33:e8:26:38:1f:1d:60:9a:85:49:d4:7a: 9a:84:ea:7d:80:3a:67:51:05:04:c9:30:44:1f:2b:8f:35:55: 4e:85:40:36 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCZw55qJJWxMvH1cY3gbeRL6JswYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA1MDgxNTI0NDJaFw0yNzA1MDcxNTI5NDJaMDMxMTAvBgNV BAMTKEMyQTBGQjAwNzg4MTVCNkYwRkRBREI2MUFEMjkxMUVDMTMzOUQ4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRpbCDh9DKtftWddCXhhs9C0p d+1SKzOs0h3Mxwxk8FWGJQbZePUtcFDtfCQE0B3GuoUfGHc2hFLxr6wSHbe1RDWq Fc7RXKXlwbESKKmYUWiaSTAbYRNidWTJD9Glha+OdFg9LJmp6TswOZQNMp7A9eau OYSeyn16Nr45OLjafQ94pZBbj+xG/0ySDviCSGui3MvCseETegtxGb1N4jIW9CtF ff/zy+opGXolgZjvx3UHFUAfqRdvoXbVNCftp7VpEVkcmfeYKqTW7wEI0mRVrq8q zxrXa19HTPFvrxsvw7dF9tSYPh3F0DMT+PHt+8jPqXB5FpQv4meY8L2XvnrbAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUwqD7AHiBW28P2tthrSkR7BM52MowHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY5Mzg5OTU5NTg3NDMwNS8wLzM0MzMyZTMyMzQz MDJlMzEzODM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivwuDANBgkqhkiG9w0BAQsFAAOCAQEAJ04dvQL7NjZOqtymjI13HBoJ 20q4eHdqTGhJHZTPZYjNd9lzJ03AEZo2u5F+gCTLpbNw+OZ9HtAN4EVhPg/OrV2O vJCziXXg6JGpWxafnOwqZXthSNDbrIn6fWFP9pO/Bv6XnovVWVuQVhxIkug3+dsX Jk2vFu+F7AlR7+3BznlRhME0GGPZHVVNsZRFJQbF/9u24zZtr5YblaXJJDJxFj3f Hx6uqltKf7s5WnYkfC3vW0X4ZOIWUy1bLY25hjO1nwLH6aksrSxRxLkhO0imEFvu cwZlyWm0yklcFDIpM+gmOB8dYJqFSdR6moTqfYA6Z1EFBMkwRB8rjzVVToVANg== -----END CERTIFICATE-----Generated at Wed May 13 21:32:19 2026 by rpki-client