$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e302e302f32322d3232203d3e20313436383137.roa File: 34332e3234382e302e302f32322d3232203d3e20313436383137.roa (raw, json) Hash identifier: c3rc/e2D+HnybgNrJfmqMUiY7tZznY5pxGwp3d8gimk= Subject key identifier: 6F:DB:89:F7:C6:56:27:07:94:80:44:7E:44:4E:8E:7E:2B:A9:00:67 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 7B3EECF9F1AC108857099222502941719E5BFCAC Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e302e302f32322d3232203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:34:30 +0000 ROA not before: Fri 08 May 2026 09:29:30 +0000 ROA not after: Fri 07 May 2027 09:34:30 +0000 asID: 146817 IP address blocks: 43.248.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3e:ec:f9:f1:ac:10:88:57:09:92:22:50:29:41:71:9e:5b:fc:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:29:30 2026 GMT Not After : May 7 09:34:30 2027 GMT Subject: CN=6FDB89F7C65627079480447E444E8E7E2BA90067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:02:3a:b6:ec:25:53:f2:0b:a0:f9:2b:bc:1a: b0:c6:69:a7:b3:62:9a:bc:ad:b8:61:d3:67:3b:1f: e5:1a:67:1c:39:c4:5d:53:83:1e:fc:42:13:15:4f: 16:71:60:cb:a5:ca:1e:c3:f3:0e:6d:54:74:88:88: 07:c9:e9:40:39:d5:07:5c:4c:fc:0d:92:ad:ed:af: 24:cf:04:a0:1f:3d:ab:60:42:cb:5f:a8:e8:4f:8a: 57:1d:63:24:dd:3e:60:37:08:db:00:dc:53:3a:d5: 5c:15:96:78:ed:cb:cb:16:2b:7a:81:93:5d:f2:7a: 6e:79:9a:3b:08:2c:fa:8c:16:e2:18:09:af:6a:ac: 81:9d:d6:b6:aa:cf:bf:97:c5:10:34:7f:74:05:04: 20:6a:56:69:16:07:fc:5d:cd:b7:ff:dd:b6:8d:3b: 80:3b:b2:ba:5f:39:5c:67:67:e5:d9:a3:de:e2:ab: da:b7:a5:2d:3c:60:1f:74:ce:ea:f2:38:6b:d8:f2: b1:56:18:c3:46:b8:ee:8a:6d:e1:23:c3:1b:84:91: 87:0d:63:df:eb:2b:90:e2:c7:ce:f5:da:10:99:5c: c7:72:07:a8:4e:25:fd:80:7a:1f:73:04:6c:96:83: 25:e6:ee:48:fe:48:70:cc:e4:e0:7a:37:79:36:03: 2e:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:DB:89:F7:C6:56:27:07:94:80:44:7E:44:4E:8E:7E:2B:A9:00:67 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e302e302f32322d3232203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.0.0/22 Signature Algorithm: sha256WithRSAEncryption 9a:78:fb:e1:08:78:19:d8:6c:8c:59:8c:e1:2f:b5:4e:71:ff: 97:57:98:29:01:b6:2a:cc:22:f4:b3:73:3d:6f:fc:97:00:be: 91:90:56:61:30:ae:05:f8:93:f2:8d:77:cc:25:83:34:a0:d7: 4c:f8:e6:23:2d:80:83:d1:99:08:b2:d0:b9:72:fd:e8:e4:49: 39:cd:a6:ab:d6:1f:d8:7e:c9:35:fa:dd:26:69:59:8f:18:26: 6f:75:75:b2:9a:23:fe:55:0b:4f:65:7a:7f:23:01:f7:74:7e: fd:14:68:45:78:77:f4:2a:67:58:d9:ec:a0:95:f5:4b:9c:b0: 85:47:82:c5:4b:f9:8e:c8:ad:6a:83:ea:a8:dc:e8:b1:13:26: 2d:60:20:b3:79:14:e4:59:43:ff:fa:de:3e:6c:cc:d2:f8:e5: 8d:b1:95:48:6e:42:43:3e:22:ef:5d:04:03:4d:6b:93:b4:3c: f6:83:eb:57:e3:08:da:ac:bb:01:21:f5:5b:1b:36:d0:81:17: 4c:17:f0:b1:d9:6e:ca:2c:4c:23:0a:8f:dc:be:85:3e:b4:1f: d0:62:e5:24:ad:49:6c:bb:23:ce:61:6c:a8:c8:51:05:7a:6d: 3f:24:8d:ad:c3:db:ad:49:03:82:01:b3:ec:ba:a5:31:78:ba: e1:7e:e4:ea -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUez7s+fGsEIhXCZIiUClBcZ5b/KwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTI5MzBaFw0yNzA1MDcwOTM0MzBaMDMxMTAvBgNV BAMTKDZGREI4OUY3QzY1NjI3MDc5NDgwNDQ3RTQ0NEU4RTdFMkJBOTAwNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Ajq27CVT8gug+Su8GrDGaaez Ypq8rbhh02c7H+UaZxw5xF1Tgx78QhMVTxZxYMulyh7D8w5tVHSIiAfJ6UA51Qdc TPwNkq3tryTPBKAfPatgQstfqOhPilcdYyTdPmA3CNsA3FM61VwVlnjty8sWK3qB k13yem55mjsILPqMFuIYCa9qrIGd1raqz7+XxRA0f3QFBCBqVmkWB/xdzbf/3baN O4A7srpfOVxnZ+XZo97iq9q3pS08YB90zuryOGvY8rFWGMNGuO6KbeEjwxuEkYcN Y9/rK5Dix8712hCZXMdyB6hOJf2Aeh9zBGyWgyXm7kj+SHDM5OB6N3k2Ay4vAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUb9uJ98ZWJweUgER+RE6OfiupAGcwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzQzMzJlMzIzNDM4 MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzQzNjM4MzEzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv4ADANBgkqhkiG9w0BAQsFAAOCAQEAmnj74Qh4GdhsjFmM4S+1TnH/l1eY KQG2Kswi9LNzPW/8lwC+kZBWYTCuBfiT8o13zCWDNKDXTPjmIy2Ag9GZCLLQuXL9 6ORJOc2mq9Yf2H7JNfrdJmlZjxgmb3V1spoj/lULT2V6fyMB93R+/RRoRXh39Cpn WNnsoJX1S5ywhUeCxUv5jsitaoPqqNzosRMmLWAgs3kU5FlD//rePmzM0vjljbGV SG5CQz4i710EA01rk7Q89oPrV+MI2qy7ASH1Wxs20IEXTBfwsdluyixMIwqP3L6F PrQf0GLlJK1JbLsjzmFsqMhRBXptPySNrcPbrUkDggGz7LqlMXi64X7k6g== -----END CERTIFICATE-----Generated at Wed May 13 20:55:25 2026 by rpki-client