$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/34332e3235342e3230302e302f32322d3332203d3e2034383038.roa File: 34332e3235342e3230302e302f32322d3332203d3e2034383038.roa (raw, json) Hash identifier: hSyc7mnu0tQaVUWdzazH8xEGacFtjdolzbGFWTsPURw= Subject key identifier: 04:1F:63:A5:4E:EB:D7:4B:1C:D7:3A:A7:2B:D8:4B:DA:65:F3:9C:6A Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Certificate serial: 2F3E9280772A534A63EC575961CD785B99283754 Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/34332e3235342e3230302e302f32322d3332203d3e2034383038.roa Signing time: Tue 28 Apr 2026 06:36:45 +0000 ROA not before: Tue 28 Apr 2026 06:31:45 +0000 ROA not after: Tue 27 Apr 2027 06:36:45 +0000 asID: 4808 IP address blocks: 43.254.200.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:3e:92:80:77:2a:53:4a:63:ec:57:59:61:cd:78:5b:99:28:37:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Validity Not Before: Apr 28 06:31:45 2026 GMT Not After : Apr 27 06:36:45 2027 GMT Subject: CN=041F63A54EEBD74B1CD73AA72BD84BDA65F39C6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:53:33:00:80:7a:bc:e7:1b:5e:a4:8c:70:dc: 5b:20:2a:18:74:87:c3:10:95:c2:bd:21:3f:ec:bb: 4f:c7:46:eb:a6:ef:ff:d3:6a:db:e6:0d:68:82:f7: 02:01:0f:a8:a0:4b:63:c3:43:71:ff:8d:66:38:4d: dc:8c:a4:e9:58:64:85:2b:9f:c7:37:ed:0b:44:e4: 5b:0c:02:04:b6:bb:a4:10:b0:2e:51:49:21:bd:15: 3f:13:b2:1b:43:2e:58:41:be:fb:79:e4:42:38:19: 18:62:2f:4d:f3:78:79:9b:4f:d2:54:47:dc:58:4a: 1a:c9:a8:cc:ba:19:33:13:26:5d:98:27:d4:9f:1e: 10:87:d2:dd:10:63:5c:1a:db:4c:10:f0:98:74:06: 3d:8a:bf:37:b0:01:d9:aa:e0:be:d1:20:93:f9:c3: 1b:c3:ab:39:0e:64:99:49:29:80:eb:2f:65:66:3a: 59:06:e6:df:8c:7a:9b:af:61:89:21:90:b5:07:f7: 3e:ae:f0:d2:52:80:c6:9f:a9:be:76:04:91:a4:0b: cc:dd:d4:15:85:e7:6b:cf:76:0c:78:fb:c6:26:26: d5:f9:a6:f1:b9:06:00:f9:67:fb:e1:a0:56:5e:7c: be:f0:b5:1d:fc:dc:a1:68:2b:8d:54:a1:74:d7:75: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1F:63:A5:4E:EB:D7:4B:1C:D7:3A:A7:2B:D8:4B:DA:65:F3:9C:6A X509v3 Authority Key Identifier: keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/34332e3235342e3230302e302f32322d3332203d3e2034383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.200.0/22 Signature Algorithm: sha256WithRSAEncryption 97:72:cf:41:e6:7b:ce:53:b4:9a:6a:45:63:97:d0:3a:02:1f: 8a:13:99:13:50:ea:9d:ed:32:0e:06:24:bb:27:1a:06:4f:5c: aa:8f:ca:96:d8:f0:a2:ce:df:ba:ca:98:d1:0f:6a:15:84:39: c3:25:63:d3:c2:21:30:50:cd:0d:e2:ef:ab:8e:a4:56:57:72: d4:4d:2b:c0:10:cc:dc:df:8a:63:6f:26:b4:6e:fb:56:d8:c8: 08:ac:4e:bd:3c:9b:9f:e3:2d:56:97:09:26:de:f7:44:ab:a5: e3:5b:c9:59:e5:cd:50:77:38:a2:a0:5f:d4:52:5a:7c:ff:aa: 94:d1:63:3c:2b:78:7c:89:0e:45:23:66:92:59:b2:9b:3f:2c: e3:d2:be:ed:0c:f2:30:e2:98:10:f7:b5:56:11:db:03:76:43: 18:71:64:51:50:eb:c1:8d:e7:b1:35:c0:0a:f9:dc:bf:34:87: ea:f8:72:e2:f3:5f:bd:14:fa:34:a2:5e:a3:db:95:79:88:b3: a8:e1:fb:1b:3c:51:86:05:39:59:c4:5e:2e:e9:04:f4:d0:b9: 5d:0c:6e:f4:f9:1a:1e:1f:76:e0:fa:4d:51:c9:e0:a7:2c:ce: 6c:52:f4:73:95:b3:61:51:62:ce:5f:8a:34:c5:45:53:4a:d3: 23:db:e2:6a -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIULz6SgHcqU0pj7FdZYc14W5koN1QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBB NjFDRTA2MTAeFw0yNjA0MjgwNjMxNDVaFw0yNzA0MjcwNjM2NDVaMDMxMTAvBgNV BAMTKDA0MUY2M0E1NEVFQkQ3NEIxQ0Q3M0FBNzJCRDg0QkRBNjVGMzlDNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWUzMAgHq85xtepIxw3FsgKhh0 h8MQlcK9IT/su0/HRuum7//TatvmDWiC9wIBD6igS2PDQ3H/jWY4TdyMpOlYZIUr n8c37QtE5FsMAgS2u6QQsC5RSSG9FT8TshtDLlhBvvt55EI4GRhiL03zeHmbT9JU R9xYShrJqMy6GTMTJl2YJ9SfHhCH0t0QY1wa20wQ8Jh0Bj2KvzewAdmq4L7RIJP5 wxvDqzkOZJlJKYDrL2VmOlkG5t+MepuvYYkhkLUH9z6u8NJSgMafqb52BJGkC8zd 1BWF52vPdgx4+8YmJtX5pvG5BgD5Z/vhoFZefL7wtR383KFoK41UoXTXdQjtAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUBB9jpU7r10sc1zqnK9hL2mXznGowHwYDVR0j BBgwFoAUM0uT929byqogMOW92M7yIKYc4GEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTM5NDIwNzEzOTk1NDY5My8wLzMzNEI5M0Y3NkY1QkNBQUEyMDMwRTVCREQ4Q0VG MjIwQTYxQ0UwNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAxMzk0MjA3MTM5OTU0NjkzLzAvMzQzMzJlMzIzNTM0 MmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzAzOC5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv+yDANBgkqhkiG9w0BAQsFAAOCAQEAl3LPQeZ7zlO0mmpFY5fQOgIfihOZ E1Dqne0yDgYkuycaBk9cqo/Kltjwos7fusqY0Q9qFYQ5wyVj08IhMFDNDeLvq46k Vldy1E0rwBDM3N+KY28mtG77VtjICKxOvTybn+MtVpcJJt73RKul41vJWeXNUHc4 oqBf1FJafP+qlNFjPCt4fIkORSNmklmymz8s49K+7QzyMOKYEPe1VhHbA3ZDGHFk UVDrwY3nsTXACvncvzSH6vhy4vNfvRT6NKJeo9uVeYizqOH7GzxRhgU5WcReLukE 9NC5XQxu9PkaHh924PpNUcngpyzObFL0c5WzYVFizl+KNMVFU0rTI9viag== -----END CERTIFICATE-----Generated at Wed May 13 15:24:48 2026 by rpki-client