$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e203233373234.roa File: 34322e36322e302e302f32312d3231203d3e203233373234.roa (raw, json) Hash identifier: lBGsBAewsxptaODp2y7ZM47gOj5BjTjZx+tz5uMV0yY= Subject key identifier: 05:F4:98:55:D9:1E:B4:04:8A:39:AF:2D:B6:E6:E0:6A:75:EE:1C:61 Certificate issuer: /CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF Certificate serial: 130A472CDE886E579B7A1A71066683D02A0C64F1 Authority key identifier: 6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e203233373234.roa Signing time: Wed 13 May 2026 01:32:31 +0000 ROA not before: Wed 13 May 2026 01:27:31 +0000 ROA not after: Wed 12 May 2027 01:32:31 +0000 asID: 23724 IP address blocks: 42.62.0.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:0a:47:2c:de:88:6e:57:9b:7a:1a:71:06:66:83:d0:2a:0c:64:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6D1AB58561FCA85349B344B3CCABAF9318D49FAF Validity Not Before: May 13 01:27:31 2026 GMT Not After : May 12 01:32:31 2027 GMT Subject: CN=05F49855D91EB4048A39AF2DB6E6E06A75EE1C61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:5d:07:a1:af:15:5e:9c:84:d9:4f:7a:98:da: c8:b7:01:c6:aa:f2:bc:c3:9a:bd:a4:d7:a4:3c:d2: 26:64:48:a2:1c:6c:40:93:f3:c5:3e:21:91:7b:e5: dc:14:b3:ac:e0:8c:57:62:ed:fb:83:e1:e9:09:33: 30:f0:94:b3:cf:84:f1:65:ad:75:58:25:1b:50:f6: f1:92:6f:f2:94:4e:df:1c:3b:62:89:50:92:b5:32: 41:ea:68:b1:89:55:32:76:b1:d3:8f:ec:3c:4a:f3: db:d4:79:37:c7:e6:f7:5f:7e:1a:0e:39:08:5c:d6: 9b:a7:79:66:45:d4:c8:4e:e7:89:45:8d:f2:4c:ea: 72:a0:e1:6b:2e:bd:66:ca:c5:4e:43:16:62:e3:9b: 78:dd:da:11:47:9f:a0:dd:68:ce:f8:6d:87:e0:99: 11:6d:89:33:7a:32:d2:17:6c:1e:0f:fa:6a:15:c5: b2:75:30:e9:e2:f3:59:b7:ab:fb:a3:6a:f9:4c:6e: 06:81:f4:79:1b:d4:ff:57:cb:7d:e4:18:14:f9:32: 5e:9f:bc:6c:ba:05:65:21:c0:88:fd:15:98:c8:8c: 44:65:c5:f0:c1:9a:08:81:e5:50:11:08:87:6c:e6: 52:bf:06:64:76:f7:7c:bf:21:e7:41:e6:77:1c:32: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:F4:98:55:D9:1E:B4:04:8A:39:AF:2D:B6:E6:E0:6A:75:EE:1C:61 X509v3 Authority Key Identifier: keyid:6D:1A:B5:85:61:FC:A8:53:49:B3:44:B3:CC:AB:AF:93:18:D4:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/6D1AB58561FCA85349B344B3CCABAF9318D49FAF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098494210874540035/0/34322e36322e302e302f32312d3231203d3e203233373234.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.62.0.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:4c:ba:c0:59:0c:fb:8f:ff:f9:24:4e:cf:8b:8e:c5:4c:45: a9:50:07:15:fe:ea:a8:c9:28:f7:46:f5:62:14:f3:3b:29:c5: 38:d4:a6:11:52:6e:0f:74:6b:ef:01:f5:66:74:8f:45:30:c9: 84:10:14:ac:c0:6e:c3:75:0f:33:04:ad:c6:83:5d:4d:2d:9c: e0:74:2d:16:e9:e0:e1:47:99:2f:cd:f4:76:9e:64:81:77:c8: d2:54:5f:26:c6:79:fb:bd:d6:7c:6f:3a:01:8b:a0:07:b4:33: 00:49:ca:f8:5c:a2:1e:92:73:39:5e:5b:30:6e:a0:0c:6a:62: dc:ad:3e:f8:53:a4:81:d3:b4:48:bb:e6:3e:3b:b1:1e:dd:45: 02:93:fe:08:17:95:ef:ab:5c:98:66:00:10:47:4e:72:6e:63: 6d:57:06:92:84:5e:9e:24:c5:c4:32:70:91:a6:ac:a9:98:40: 62:9e:7e:40:ff:86:28:9c:5b:6d:e7:d0:f9:07:a4:41:f7:2b: bc:b1:5b:a6:44:09:63:a4:79:51:4f:0e:0c:b2:f9:34:3c:41: 64:76:82:c9:4c:15:4b:1b:75:ad:21:52:54:92:f5:4b:8d:b4: 25:ce:33:f0:22:5e:69:b1:39:bc:c8:e0:c3:3c:d7:f3:e1:8f: 66:c7:59:74 -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgIUEwpHLN6IblebehpxBmaD0CoMZPEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMx OEQ0OUZBRjAeFw0yNjA1MTMwMTI3MzFaFw0yNzA1MTIwMTMyMzFaMDMxMTAvBgNV BAMTKDA1RjQ5ODU1RDkxRUI0MDQ4QTM5QUYyREI2RTZFMDZBNzVFRTFDNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLXQehrxVenITZT3qY2si3Acaq 8rzDmr2k16Q80iZkSKIcbECT88U+IZF75dwUs6zgjFdi7fuD4ekJMzDwlLPPhPFl rXVYJRtQ9vGSb/KUTt8cO2KJUJK1MkHqaLGJVTJ2sdOP7DxK89vUeTfH5vdffhoO OQhc1puneWZF1MhO54lFjfJM6nKg4WsuvWbKxU5DFmLjm3jd2hFHn6DdaM74bYfg mRFtiTN6MtIXbB4P+moVxbJ1MOni81m3q/ujavlMbgaB9Hkb1P9Xy33kGBT5Ml6f vGy6BWUhwIj9FZjIjERlxfDBmgiB5VARCIds5lK/BmR293y/IedB5nccMjevAgMB AAGjggINMIICCTAdBgNVHQ4EFgQUBfSYVdketASKOa8ttubganXuHGEwHwYDVR0j BBgwFoAUbRq1hWH8qFNJs0SzzKuvkxjUn68wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODQ5NDIxMDg3NDU0MDAzNS8wLzZEMUFCNTg1NjFGQ0E4NTM0OUIzNDRCM0NDQUJB RjkzMThENDlGQUYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNkQxQUI1ODU2MUZDQTg1MzQ5QjM0NEIzQ0NBQkFGOTMxOEQ0OUZBRi5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk4NDk0MjEwODc0NTQwMDM1LzAvMzQzMjJlMzYzMjJl MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMzMzczMjM0LnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD Kj4AMA0GCSqGSIb3DQEBCwUAA4IBAQBrTLrAWQz7j//5JE7Pi47FTEWpUAcV/uqo ySj3RvViFPM7KcU41KYRUm4PdGvvAfVmdI9FMMmEEBSswG7DdQ8zBK3Gg11NLZzg dC0W6eDhR5kvzfR2nmSBd8jSVF8mxnn7vdZ8bzoBi6AHtDMAScr4XKIeknM5Xlsw bqAMamLcrT74U6SB07RIu+Y+O7Ee3UUCk/4IF5Xvq1yYZgAQR05ybmNtVwaShF6e JMXEMnCRpqypmEBinn5A/4YonFtt59D5B6RB9yu8sVumRAljpHlRTw4Msvk0PEFk doLJTBVLG3WtIVJUkvVLjbQlzjPwIl5psTm8yODDPNfz4Y9mx1l0 -----END CERTIFICATE-----Generated at Wed May 13 10:32:36 2026 by rpki-client