$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096693899595874305/0/34332e3234302e3138382e302f32322d3234203d3e203535393939.roa File: 34332e3234302e3138382e302f32322d3234203d3e203535393939.roa (raw, json) Hash identifier: 4FP9rm3jQvabKWgTZtIEXK2vYYzk4TblYNjZ7mIhX1w= Subject key identifier: 13:64:0F:8A:90:86:BB:33:C5:31:53:A0:F6:BE:F6:46:6A:F9:6D:02 Certificate issuer: /CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Certificate serial: 21E5B1280A35C7EA32D033901D96886E5CB2ACAC Authority key identifier: 28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/34332e3234302e3138382e302f32322d3234203d3e203535393939.roa Signing time: Fri 08 May 2026 15:29:42 +0000 ROA not before: Fri 08 May 2026 15:24:42 +0000 ROA not after: Fri 07 May 2027 15:29:42 +0000 asID: 55999 IP address blocks: 43.240.188.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 10:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:e5:b1:28:0a:35:c7:ea:32:d0:33:90:1d:96:88:6e:5c:b2:ac:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=289BA9CBEB71D9603BED963E3B60B1790E8F78A2 Validity Not Before: May 8 15:24:42 2026 GMT Not After : May 7 15:29:42 2027 GMT Subject: CN=13640F8A9086BB33C53153A0F6BEF6466AF96D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:91:8f:bc:54:37:94:c0:6f:9b:df:64:3b: 73:61:ec:50:65:87:9f:81:18:4e:08:53:c8:3b:c0: ff:02:dd:9a:b7:3f:a3:9a:7f:75:a3:a7:8e:1d:6a: d6:a4:64:7e:7a:f1:cf:8b:27:84:09:83:ea:60:4f: 9a:61:5b:7c:12:f0:63:73:5d:0c:5c:30:0e:42:f2: 1c:b9:58:cf:66:2b:88:cf:d5:1d:d2:99:20:90:98: cc:6b:c9:46:9c:0b:54:5a:eb:03:df:7a:1e:d2:d8: ad:86:8b:cb:f7:72:da:26:95:22:f3:e0:b4:7a:64: c9:49:d9:28:34:10:2c:e1:89:24:90:0a:c8:45:43: d2:1a:12:89:63:76:b2:a1:39:c6:9a:ae:b6:65:e2: e1:73:66:40:19:c3:94:db:b1:7d:67:d5:ad:cc:a5: af:01:30:e2:61:e7:6b:a3:ec:f6:d8:f8:4a:8a:9c: c8:da:e2:28:f5:3e:00:5b:c4:5f:c5:02:da:61:0e: 7a:43:67:2f:43:80:4e:4a:87:06:33:e6:b5:af:69: 05:33:9a:aa:df:07:f2:ee:b3:86:48:69:72:63:f2: a9:f5:06:20:13:9f:bd:a5:4d:e7:00:0a:92:c9:7b: 21:64:29:e7:2f:f9:00:dc:62:1b:02:e5:03:67:92: c2:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:64:0F:8A:90:86:BB:33:C5:31:53:A0:F6:BE:F6:46:6A:F9:6D:02 X509v3 Authority Key Identifier: keyid:28:9B:A9:CB:EB:71:D9:60:3B:ED:96:3E:3B:60:B1:79:0E:8F:78:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/289BA9CBEB71D9603BED963E3B60B1790E8F78A2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096693899595874305/0/34332e3234302e3138382e302f32322d3234203d3e203535393939.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.188.0/22 Signature Algorithm: sha256WithRSAEncryption 25:46:19:b9:88:4e:11:9c:27:cb:cf:a2:73:d9:b0:38:f9:7c: 6e:a1:cc:07:fd:f9:ee:7b:8f:36:5e:00:25:c9:cb:5f:17:59: 89:be:0c:a4:e9:55:a6:91:e4:04:e3:35:7d:3e:54:09:e7:94: e4:5b:91:77:89:cf:8f:93:5c:6f:5d:29:a4:b5:a7:c9:6b:f6: da:f9:d0:58:67:c3:e7:b0:bb:af:35:b9:77:0e:e7:4e:8d:b7: f8:5d:f3:cf:c1:64:39:10:89:7e:de:c1:e4:5d:b6:13:68:82: 91:d7:b4:3e:82:ed:7d:38:f0:1b:29:fe:2e:bc:38:87:1b:33: b9:53:b2:ae:6b:b6:7a:02:4f:8c:9a:24:de:ea:2a:ca:ee:1f: 69:01:d9:7c:c7:8f:56:23:4f:0f:d2:0d:1d:5f:5c:bd:e5:21: 31:c5:e8:48:ee:88:e3:48:6d:16:9c:d5:07:91:c3:20:1f:4b: 0b:f9:9e:32:f9:5b:d7:96:04:27:d1:5e:d3:69:c1:9f:39:31: 21:f0:f8:c3:0c:0f:32:33:ce:e0:7b:d3:7a:f4:cd:98:f9:3b: a6:60:5d:10:09:74:10:8e:e4:40:21:45:a7:97:a3:1f:3d:7b: a3:e5:49:15:16:ce:86:04:26:2a:e6:3f:79:cb:d5:b2:e1:0a: fe:97:ab:ae -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUIeWxKAo1x+oy0DOQHZaIblyyrKwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkw RThGNzhBMjAeFw0yNjA1MDgxNTI0NDJaFw0yNzA1MDcxNTI5NDJaMDMxMTAvBgNV BAMTKDEzNjQwRjhBOTA4NkJCMzNDNTMxNTNBMEY2QkVGNjQ2NkFGOTZEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUJGPvFQ3lMBvm99kO3Nh7FBl h5+BGE4IU8g7wP8C3Zq3P6Oaf3Wjp44datakZH568c+LJ4QJg+pgT5phW3wS8GNz XQxcMA5C8hy5WM9mK4jP1R3SmSCQmMxryUacC1Ra6wPfeh7S2K2Gi8v3ctomlSLz 4LR6ZMlJ2Sg0ECzhiSSQCshFQ9IaEoljdrKhOcaarrZl4uFzZkAZw5TbsX1n1a3M pa8BMOJh52uj7PbY+EqKnMja4ij1PgBbxF/FAtphDnpDZy9DgE5KhwYz5rWvaQUz mqrfB/Lus4ZIaXJj8qn1BiATn72lTecACpLJeyFkKecv+QDcYhsC5QNnksJLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUE2QPipCGuzPFMVOg9r72Rmr5bQIwHwYDVR0j BBgwFoAUKJupy+tx2WA77ZY+O2CxeQ6PeKIwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY5Mzg5OTU5NTg3NDMwNS8wLzI4OUJBOUNCRUI3MUQ5NjAzQkVEOTYzRTNCNjBC MTc5MEU4Rjc4QTIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMjg5QkE5Q0JFQjcxRDk2MDNCRUQ5NjNFM0I2MEIxNzkwRThGNzhBMi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjY5Mzg5OTU5NTg3NDMwNS8wLzM0MzMyZTMyMzQz MDJlMzEzODM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzUzNTM5MzkzOS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivwvDANBgkqhkiG9w0BAQsFAAOCAQEAJUYZuYhOEZwny8+ic9mwOPl8 bqHMB/357nuPNl4AJcnLXxdZib4MpOlVppHkBOM1fT5UCeeU5FuRd4nPj5Ncb10p pLWnyWv22vnQWGfD57C7rzW5dw7nTo23+F3zz8FkORCJft7B5F22E2iCkde0PoLt fTjwGyn+Lrw4hxszuVOyrmu2egJPjJok3uoqyu4faQHZfMePViNPD9INHV9cveUh McXoSO6I40htFpzVB5HDIB9LC/meMvlb15YEJ9Fe02nBnzkxIfD4wwwPMjPO4HvT evTNmPk7pmBdEAl0EI7kQCFFp5ejHz17o+VJFRbOhgQmKuY/ecvVsuEK/perrg== -----END CERTIFICATE-----Generated at Wed May 13 21:32:17 2026 by rpki-client