$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e302e302f32342d3234203d3e20313436383137.roa File: 34332e3234382e302e302f32342d3234203d3e20313436383137.roa (raw, json) Hash identifier: +Ace0yETshwgN7B61M+VHj3B2sj6EdTMHCwhuJDrV4A= Subject key identifier: 25:26:DA:2F:C7:F8:27:81:B3:63:00:FF:FA:32:79:62:8A:82:AC:62 Certificate issuer: /CN=825E5C73B7552363E0F92261ADC637585EBE0362 Certificate serial: 7992200FAE25B7EF8519D68032EE861A3D691093 Authority key identifier: 82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e302e302f32342d3234203d3e20313436383137.roa Signing time: Fri 08 May 2026 09:34:29 +0000 ROA not before: Fri 08 May 2026 09:29:29 +0000 ROA not after: Fri 07 May 2027 09:34:29 +0000 asID: 146817 IP address blocks: 43.248.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 11:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:92:20:0f:ae:25:b7:ef:85:19:d6:80:32:ee:86:1a:3d:69:10:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=825E5C73B7552363E0F92261ADC637585EBE0362 Validity Not Before: May 8 09:29:29 2026 GMT Not After : May 7 09:34:29 2027 GMT Subject: CN=2526DA2FC7F82781B36300FFFA3279628A82AC62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:1f:c5:43:8c:b9:a4:29:6e:b1:40:7f:33:a3: ed:92:f8:7c:b1:25:95:96:87:ab:d4:16:62:36:b0: 5e:5d:38:5b:24:04:1a:5d:85:63:79:4f:fa:a8:11: e3:5f:76:38:13:11:71:a1:9a:b9:eb:9d:25:0b:10: 2f:73:4d:e5:a4:33:d1:8d:19:a9:18:9f:0a:04:ea: fc:af:c1:26:e1:ba:fb:ae:5d:13:76:fe:bd:4f:4e: 4b:32:08:7c:65:44:f1:26:87:a5:d9:82:64:60:66: b9:8f:ee:57:74:73:cd:4b:97:8f:92:e6:60:69:d4: 21:5c:a9:99:31:03:3f:58:3d:dc:f4:d7:85:f0:09: 53:64:7d:03:8d:7b:46:89:bb:90:24:f3:cf:74:c9: 36:1d:e9:ff:59:58:2b:83:cd:96:32:d7:c2:42:e6: 63:1c:bb:8e:99:81:09:3d:08:23:05:64:a0:c5:66: 72:cb:13:2a:46:03:78:b7:48:7c:fb:e3:e0:ff:b3: 9c:10:62:42:5c:a3:5e:f5:a6:2b:03:dc:20:52:dd: 00:0c:c6:7a:80:96:6c:af:34:f8:a7:43:32:a7:87: c0:b1:ca:8c:af:7c:ef:9c:48:03:c4:f1:ae:36:a0: 57:ff:37:8d:4d:7e:a6:19:57:53:a8:ba:7d:38:4a: 59:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:26:DA:2F:C7:F8:27:81:B3:63:00:FF:FA:32:79:62:8A:82:AC:62 X509v3 Authority Key Identifier: keyid:82:5E:5C:73:B7:55:23:63:E0:F9:22:61:AD:C6:37:58:5E:BE:03:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/825E5C73B7552363E0F92261ADC637585EBE0362.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/825E5C73B7552363E0F92261ADC637585EBE0362.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105058072943919117/0/34332e3234382e302e302f32342d3234203d3e20313436383137.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.248.0.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:f9:76:ea:26:aa:63:7c:ad:ab:19:5e:90:18:97:8f:ac:12: cc:d9:e5:ca:b3:d5:3b:13:8f:3c:9c:56:fe:70:ee:76:cf:1a: 22:4d:1b:a3:a2:11:bb:d6:8b:73:5b:f6:dc:3f:af:7a:90:69: 9e:82:f1:5d:92:cc:5e:8c:e5:53:99:a8:dd:95:c2:7d:09:27: 83:fa:61:e6:ce:b1:5b:3e:5c:23:0f:99:c5:cc:22:ee:ce:e8: 13:84:3b:42:ab:1e:94:c3:d7:e9:c1:5f:94:8e:9b:e5:75:92: ea:8e:86:33:2d:78:b6:b0:cb:68:b1:25:98:ec:ba:4c:8a:56: b8:59:a4:70:25:6d:bf:a3:63:90:79:7c:eb:d7:64:57:02:64: 6f:ef:37:cf:f7:00:e2:e2:c7:f3:7f:06:d2:c8:57:50:6f:f2: c1:e1:d2:39:14:03:02:18:70:43:46:de:31:9c:34:5f:8f:af: 9f:56:a6:2e:0f:40:d8:e7:f9:cb:00:a5:34:64:d4:fc:3a:6b: 9a:af:9e:11:a5:a1:26:c2:1b:c4:ec:0d:3c:8c:f8:12:f6:41: 6a:f0:8d:9b:f3:40:97:5f:db:61:11:68:f6:ba:9c:b3:04:ce: a7:c8:1c:f9:ec:da:04:b3:e2:2e:25:f3:40:e2:11:58:33:a7: 2a:ed:02:a2 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUeZIgD64lt++FGdaAMu6GGj1pEJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1 RUJFMDM2MjAeFw0yNjA1MDgwOTI5MjlaFw0yNzA1MDcwOTM0MjlaMDMxMTAvBgNV BAMTKDI1MjZEQTJGQzdGODI3ODFCMzYzMDBGRkZBMzI3OTYyOEE4MkFDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYH8VDjLmkKW6xQH8zo+2S+Hyx JZWWh6vUFmI2sF5dOFskBBpdhWN5T/qoEeNfdjgTEXGhmrnrnSULEC9zTeWkM9GN GakYnwoE6vyvwSbhuvuuXRN2/r1PTksyCHxlRPEmh6XZgmRgZrmP7ld0c81Ll4+S 5mBp1CFcqZkxAz9YPdz014XwCVNkfQONe0aJu5Ak8890yTYd6f9ZWCuDzZYy18JC 5mMcu46ZgQk9CCMFZKDFZnLLEypGA3i3SHz74+D/s5wQYkJco171pisD3CBS3QAM xnqAlmyvNPinQzKnh8CxyoyvfO+cSAPE8a42oFf/N41NfqYZV1Ooun04SlnbAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJSbaL8f4J4GzYwD/+jJ5YoqCrGIwHwYDVR0j BBgwFoAUgl5cc7dVI2Pg+SJhrcY3WF6+A2IwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTA1ODA3Mjk0MzkxOTExNy8wLzgyNUU1QzczQjc1NTIzNjNFMEY5MjI2MUFEQzYz NzU4NUVCRTAzNjIuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvODI1RTVDNzNCNzU1MjM2M0UwRjkyMjYxQURDNjM3NTg1RUJFMDM2Mi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1MDU4MDcyOTQzOTE5MTE3LzAvMzQzMzJlMzIzNDM4 MmUzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzQzNjM4MzEzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACv4ADANBgkqhkiG9w0BAQsFAAOCAQEAbPl26iaqY3ytqxlekBiXj6wSzNnl yrPVOxOPPJxW/nDuds8aIk0bo6IRu9aLc1v23D+vepBpnoLxXZLMXozlU5mo3ZXC fQkng/ph5s6xWz5cIw+Zxcwi7s7oE4Q7QqselMPX6cFflI6b5XWS6o6GMy14trDL aLElmOy6TIpWuFmkcCVtv6NjkHl869dkVwJkb+83z/cA4uLH838G0shXUG/yweHS ORQDAhhwQ0beMZw0X4+vn1amLg9A2Of5ywClNGTU/Dprmq+eEaWhJsIbxOwNPIz4 EvZBavCNm/NAl1/bYRFo9rqcswTOp8gc+ezaBLPiLiXzQOIRWDOnKu0Cog== -----END CERTIFICATE-----Generated at Wed May 13 20:55:24 2026 by rpki-client