$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313531333030.roa File: 34332e3234382e37362e302f32322d3234203d3e20313531333030.roa (raw, json) Hash identifier: QlEa5gSH/Wh5fhVrLoUaArIljcV76wVr//MZRkxeMok= Subject key identifier: 26:57:DE:38:63:73:78:F4:7D:8F:F4:68:B4:BF:F0:91:C8:27:58:2C Certificate issuer: /CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Certificate serial: 6DF53539C06E74330D90A81BA4492088190AE0 Authority key identifier: 96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313531333030.roa Signing time: Wed 22 Jul 2026 06:15:44 +0000 ROA not before: Wed 22 Jul 2026 06:10:44 +0000 ROA not after: Wed 21 Jul 2027 06:15:44 +0000 asID: 151300 IP address blocks: 43.248.76.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:12:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:f5:35:39:c0:6e:74:33:0d:90:a8:1b:a4:49:20:88:19:0a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=96E9344F9168341F216708A437FB9801FEBBBBB6 Validity Not Before: Jul 22 06:10:44 2026 GMT Not After : Jul 21 06:15:44 2027 GMT Subject: CN=2657DE38637378F47D8FF468B4BFF091C827582C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:07:29:15:d8:e3:68:b4:54:5b:b3:8e:cb:f3: ec:5f:90:55:1c:b2:82:a0:37:05:46:82:ea:08:9d: 64:e7:e5:d9:dd:b8:ba:f1:ac:f0:9f:e4:ad:9c:1e: 90:5b:46:6b:c8:29:ee:a0:6a:da:db:4f:68:58:3c: b1:a1:c5:6a:a0:90:f3:83:be:df:2a:0e:10:88:a9: 27:da:52:ce:39:d2:2d:90:1d:6a:14:cd:96:44:11: bb:f7:6c:57:cc:8b:71:a4:79:44:2c:97:59:98:a7: c7:a2:3b:84:40:33:41:1a:28:80:c8:30:41:46:f9: 6b:65:c7:9e:d5:61:6c:23:9b:ce:08:ab:19:8d:ec: f0:08:54:19:f5:c2:64:e5:22:d1:84:af:92:45:aa: 42:6e:d8:af:0e:67:51:6f:7d:88:91:22:62:b5:0e: 6b:ab:e8:d0:c1:5a:74:71:60:05:43:a6:28:2b:e5: bf:32:b5:cb:9f:e8:3a:42:49:e5:23:e0:38:72:ab: 49:ee:ff:e0:89:7f:6e:4f:b0:9a:62:d4:ed:58:2d: d7:83:93:d3:6e:de:d5:43:ce:d5:38:d4:94:8f:04: 95:6a:32:1d:25:47:f9:8c:b9:c8:13:72:61:7e:0d: 4e:1c:7f:88:5a:ed:cb:8e:92:06:d8:b6:27:8a:e6: 06:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:57:DE:38:63:73:78:F4:7D:8F:F4:68:B4:BF:F0:91:C8:27:58:2C X509v3 Authority Key Identifier: keyid:96:E9:34:4F:91:68:34:1F:21:67:08:A4:37:FB:98:01:FE:BB:BB:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/96E9344F9168341F216708A437FB9801FEBBBBB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/96E9344F9168341F216708A437FB9801FEBBBBB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097433789786750977/0/34332e3234382e37362e302f32322d3234203d3e20313531333030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.76.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:81:da:6e:53:fb:bc:cd:3e:90:ab:e1:12:4f:06:c9:1b:ec: 0e:2d:8c:c3:e0:45:bc:1f:1d:a1:67:d3:86:d8:fa:9d:24:17: 40:7f:33:d8:54:a0:f9:59:d9:ad:ae:1b:25:26:38:e8:71:7a: 99:f5:2e:e8:d6:9f:fd:71:d1:7c:5f:0b:dc:33:b2:3e:07:9c: 2b:2d:de:e3:ed:82:bd:26:01:2a:9d:54:84:49:b6:7a:6a:11: d8:e1:aa:2a:2e:2b:03:f1:2c:26:00:90:82:ed:3a:c7:7e:78: 5d:fd:2a:fc:14:00:a6:fb:8a:fd:69:f8:da:68:97:e8:2a:06: ff:3d:a3:98:69:62:f2:12:a5:fb:b3:b9:c1:52:d8:6b:99:24: 89:9e:b7:87:c3:4d:f6:56:99:c0:3e:61:b6:11:dc:ff:a4:35: 30:ea:31:2e:69:d6:f6:6c:ac:c3:67:da:42:da:08:5b:94:57: cd:8c:fd:95:26:82:3a:da:e6:5d:b6:67:7e:67:ec:eb:b7:97: fe:be:ac:15:a1:cc:3c:a0:fd:8f:9e:e5:3e:9a:5a:59:2b:14: 60:f9:ad:bc:96:40:6a:a4:1a:4b:31:fa:f1:d9:30:e5:70:8f: d9:bb:bc:48:8e:5e:19:e8:5a:92:d8:d3:8e:43:85:a3:a6:7f: 9a:3d:c4:2f -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgITbfU1OcBudDMNkKgbpEkgiBkK4DANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg5NkU5MzQ0RjkxNjgzNDFGMjE2NzA4QTQzN0ZCOTgwMUZF QkJCQkI2MB4XDTI2MDcyMjA2MTA0NFoXDTI3MDcyMTA2MTU0NFowMzExMC8GA1UE AxMoMjY1N0RFMzg2MzczNzhGNDdEOEZGNDY4QjRCRkYwOTFDODI3NTgyQzCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAN4HKRXY42i0VFuzjsvz7F+QVRyy gqA3BUaC6gidZOfl2d24uvGs8J/krZwekFtGa8gp7qBq2ttPaFg8saHFaqCQ84O+ 3yoOEIipJ9pSzjnSLZAdahTNlkQRu/dsV8yLcaR5RCyXWZinx6I7hEAzQRoogMgw QUb5a2XHntVhbCObzgirGY3s8AhUGfXCZOUi0YSvkkWqQm7Yrw5nUW99iJEiYrUO a6vo0MFadHFgBUOmKCvlvzK1y5/oOkJJ5SPgOHKrSe7/4Il/bk+wmmLU7Vgt14OT 027e1UPO1TjUlI8ElWoyHSVH+Yy5yBNyYX4NThx/iFrty46SBti2J4rmBj0CAwEA AaOCAhQwggIQMB0GA1UdDgQWBBQmV944Y3N49H2P9Gi0v/CRyCdYLDAfBgNVHSME GDAWgBSW6TRPkWg0HyFnCKQ3+5gB/ru7tjAOBgNVHQ8BAf8EBAMCB4AwcwYDVR0f BGwwajBooGagZIZicnN5bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDk3 NDMzNzg5Nzg2NzUwOTc3LzAvOTZFOTM0NEY5MTY4MzQxRjIxNjcwOEE0MzdGQjk4 MDFGRUJCQkJCNi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3lu YzovL3Jwa2ktcnBzLmNubmljLmNuL3JlcG8vQTEwNTUzOTA3NzUwOTA2NzU3MTUv MS85NkU5MzQ0RjkxNjgzNDFGMjE2NzA4QTQzN0ZCOTgwMUZFQkJCQkI2LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk3NDMzNzg5Nzg2NzUwOTc3LzAvMzQzMzJlMzIzNDM4 MmUzNzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzEzNTMxMzMzMDMwLnJvYTAY BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA ATAGAwQCK/hMMA0GCSqGSIb3DQEBCwUAA4IBAQA+gdpuU/u8zT6Qq+ESTwbJG+wO LYzD4EW8Hx2hZ9OG2PqdJBdAfzPYVKD5WdmtrhslJjjocXqZ9S7o1p/9cdF8Xwvc M7I+B5wrLd7j7YK9JgEqnVSESbZ6ahHY4aoqLisD8SwmAJCC7TrHfnhd/Sr8FACm +4r9afjaaJfoKgb/PaOYaWLyEqX7s7nBUthrmSSJnreHw032VpnAPmG2Edz/pDUw 6jEuadb2bKzDZ9pC2ghblFfNjP2VJoI62uZdtmd+Z+zrt5f+vqwVocw8oP2PnuU+ mlpZKxRg+a28lkBqpBpLMfrx2TDlcI/Zu7xIjl4Z6FqS2NOOQ4Wjpn+aPcQv -----END CERTIFICATE-----Generated at Fri Jul 24 18:06:21 2026 by rpki-client