$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1101394207139954693/0/34332e3235342e3230302e302f32322d3332203d3e2034383437.roa File: 34332e3235342e3230302e302f32322d3332203d3e2034383437.roa (raw, json) Hash identifier: KY3aJYKDeGsBzgGTOlvVJ22xjx/heHcMqOk4nQkLF70= Subject key identifier: 7A:C3:C5:35:CD:ED:BB:AA:42:1B:B8:BB:53:C7:7A:E6:CA:2A:8F:95 Certificate issuer: /CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Certificate serial: 1474A86373E6587FE668B0D115C5ABE2E71873CB Authority key identifier: 33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/34332e3235342e3230302e302f32322d3332203d3e2034383437.roa Signing time: Tue 28 Apr 2026 06:36:45 +0000 ROA not before: Tue 28 Apr 2026 06:31:45 +0000 ROA not after: Tue 27 Apr 2027 06:36:45 +0000 asID: 4847 IP address blocks: 43.254.200.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 04:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:74:a8:63:73:e6:58:7f:e6:68:b0:d1:15:c5:ab:e2:e7:18:73:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=334B93F76F5BCAAA2030E5BDD8CEF220A61CE061 Validity Not Before: Apr 28 06:31:45 2026 GMT Not After : Apr 27 06:36:45 2027 GMT Subject: CN=7AC3C535CDEDBBAA421BB8BB53C77AE6CA2A8F95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:19:af:0d:0c:40:05:68:32:28:b1:64:03:27: d8:24:42:34:03:93:c7:6f:e7:fa:9f:cd:ac:d9:3d: f6:f6:af:d1:94:00:eb:da:c5:76:4b:be:40:11:d2: 6e:8c:a8:b5:26:e4:f3:4e:0c:45:f6:ac:54:ca:d3: 9a:a2:de:7b:bd:51:d9:16:1a:79:11:d6:0f:46:7b: 4f:a7:e4:2b:47:e3:6a:9e:20:5c:fb:0a:7a:da:1d: 83:71:8e:cb:c4:3a:f9:02:34:de:1d:ca:f8:1d:27: 30:07:92:74:93:ec:02:59:0f:79:e1:6d:fd:79:64: 82:e7:2a:c4:e2:15:d4:c2:fe:93:3f:33:b8:d9:1c: 07:2b:7d:98:10:d6:bf:5e:bf:36:24:fa:1b:f8:d1: 73:5a:18:b2:6f:cc:36:48:6a:82:5c:6b:26:72:ac: 43:d9:d2:0c:41:aa:cf:f1:f6:44:1f:28:7f:6a:05: b1:7e:b3:98:11:77:f4:8b:c2:9c:44:43:b0:e0:3f: 6e:11:74:4a:e8:e8:dc:6e:77:26:70:c3:66:27:33: fc:28:e6:19:bf:01:61:bf:0d:63:38:9e:15:0a:12: a2:3b:74:cd:26:1a:5f:4e:7e:02:a1:19:b7:3c:b4: 9e:fe:f3:76:6b:a1:79:20:f7:0c:87:1f:cf:a2:bd: 50:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C3:C5:35:CD:ED:BB:AA:42:1B:B8:BB:53:C7:7A:E6:CA:2A:8F:95 X509v3 Authority Key Identifier: keyid:33:4B:93:F7:6F:5B:CA:AA:20:30:E5:BD:D8:CE:F2:20:A6:1C:E0:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/334B93F76F5BCAAA2030E5BDD8CEF220A61CE061.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1101394207139954693/0/34332e3235342e3230302e302f32322d3332203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.200.0/22 Signature Algorithm: sha256WithRSAEncryption a2:ae:c9:38:06:86:62:df:e9:fc:f1:97:90:1d:ff:0a:8b:54: a5:e2:1d:6a:51:ae:4d:a0:ea:a9:1b:01:93:8b:f4:c2:d4:70: fd:26:49:8e:eb:bc:da:b4:73:51:2d:6a:48:17:c7:4c:fd:83: cb:c0:4a:20:9f:dc:77:e2:f9:5c:4f:7a:f3:be:80:d6:f9:da: c4:c9:72:3c:bc:b8:7c:a4:50:d2:8f:32:09:d8:10:e4:4a:98: fe:32:74:4b:38:03:fa:db:fa:86:6f:84:73:9b:c0:54:64:d2: ef:18:69:25:b3:fe:f7:24:e5:25:bc:76:8f:be:98:3f:f2:e0: f9:df:e3:bb:9e:81:1e:d2:a6:a8:64:59:bc:4e:21:69:b0:23: 9c:ff:6c:a0:44:40:e7:ea:80:73:5a:d5:06:7e:6c:ae:5d:49: 2b:da:b9:dc:1f:fd:72:65:28:93:81:52:3d:3a:2e:bd:71:d3: 32:dd:48:1b:c1:7f:84:38:73:ce:b4:d7:03:f2:35:5e:b4:51: 54:40:b2:37:8c:9b:7d:eb:90:c1:da:ec:39:8f:16:a1:47:cc: 48:7c:52:df:9a:99:07:a5:39:80:31:98:e6:f5:63:62:1d:e6: e6:53:62:f4:5f:cb:94:58:bd:bb:a9:42:a1:70:cb:e7:6d:0a: 15:3b:00:6f -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUFHSoY3PmWH/maLDRFcWr4ucYc8swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBB NjFDRTA2MTAeFw0yNjA0MjgwNjMxNDVaFw0yNzA0MjcwNjM2NDVaMDMxMTAvBgNV BAMTKDdBQzNDNTM1Q0RFREJCQUE0MjFCQjhCQjUzQzc3QUU2Q0EyQThGOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Ga8NDEAFaDIosWQDJ9gkQjQD k8dv5/qfzazZPfb2r9GUAOvaxXZLvkAR0m6MqLUm5PNODEX2rFTK05qi3nu9UdkW GnkR1g9Ge0+n5CtH42qeIFz7CnraHYNxjsvEOvkCNN4dyvgdJzAHknST7AJZD3nh bf15ZILnKsTiFdTC/pM/M7jZHAcrfZgQ1r9evzYk+hv40XNaGLJvzDZIaoJcayZy rEPZ0gxBqs/x9kQfKH9qBbF+s5gRd/SLwpxEQ7DgP24RdEro6NxudyZww2YnM/wo 5hm/AWG/DWM4nhUKEqI7dM0mGl9OfgKhGbc8tJ7+83ZroXkg9wyHH8+ivVDvAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUesPFNc3tu6pCG7i7U8d65soqj5UwHwYDVR0j BBgwFoAUM0uT929byqogMOW92M7yIKYc4GEwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw MTM5NDIwNzEzOTk1NDY5My8wLzMzNEI5M0Y3NkY1QkNBQUEyMDMwRTVCREQ4Q0VG MjIwQTYxQ0UwNjEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzM0QjkzRjc2RjVCQ0FBQTIwMzBFNUJERDhDRUYyMjBBNjFDRTA2MS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTAxMzk0MjA3MTM5OTU0NjkzLzAvMzQzMzJlMzIzNTM0 MmUzMjMwMzAyZTMwMmYzMjMyMmQzMzMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv+yDANBgkqhkiG9w0BAQsFAAOCAQEAoq7JOAaGYt/p/PGXkB3/CotUpeId alGuTaDqqRsBk4v0wtRw/SZJjuu82rRzUS1qSBfHTP2Dy8BKIJ/cd+L5XE96876A 1vnaxMlyPLy4fKRQ0o8yCdgQ5EqY/jJ0SzgD+tv6hm+Ec5vAVGTS7xhpJbP+9yTl Jbx2j76YP/Lg+d/ju56BHtKmqGRZvE4habAjnP9soERA5+qAc1rVBn5srl1JK9q5 3B/9cmUok4FSPTouvXHTMt1IG8F/hDhzzrTXA/I1XrRRVECyN4ybfeuQwdrsOY8W oUfMSHxS35qZB6U5gDGY5vVjYh3m5lNi9F/LlFi9u6lCoXDL520KFTsAbw== -----END CERTIFICATE-----Generated at Wed May 13 15:24:03 2026 by rpki-client