$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/34332e3235342e32352e302f32342d3234203d3e2034383437.roa File: 34332e3235342e32352e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: Ovzt74NkNXMJ6/m3biB7d43E0CMu7+X75tSS41U+dss= Subject key identifier: F4:49:D6:1B:6E:7C:E1:B0:AC:30:CF:2A:D5:76:94:02:73:86:78:77 Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507 Certificate serial: 48424167F600847C087604D2226C077FF79411F5 Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/34332e3235342e32352e302f32342d3234203d3e2034383437.roa Signing time: Sat 09 May 2026 06:18:17 +0000 ROA not before: Sat 09 May 2026 06:13:17 +0000 ROA not after: Sat 08 May 2027 06:18:17 +0000 asID: 4847 IP address blocks: 43.254.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:42:41:67:f6:00:84:7c:08:76:04:d2:22:6c:07:7f:f7:94:11:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507 Validity Not Before: May 9 06:13:17 2026 GMT Not After : May 8 06:18:17 2027 GMT Subject: CN=F449D61B6E7CE1B0AC30CF2AD576940273867877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:12:10:d8:8f:c3:cc:14:17:8c:18:44:e0:25: cd:b3:fa:1d:cd:b6:c1:85:84:c7:cc:55:bf:d3:a7: bf:25:a5:76:08:26:2f:38:e7:6e:0b:38:0b:a8:46: 2a:4f:44:cd:d5:b8:0f:70:9c:c1:b5:23:6a:4d:d9: 4f:5a:85:f9:1d:94:03:09:9c:02:2f:05:bf:2a:a0: 07:54:5b:b5:42:92:ce:54:de:35:f3:af:ff:b3:62: cf:97:63:21:39:45:19:6e:35:ec:12:23:9f:94:a6: b8:e7:3d:2d:a3:2e:4a:44:f3:19:b4:9e:86:e5:65: c5:37:a4:1d:e2:ce:e3:9e:7d:60:73:8b:52:f1:f4: 20:0f:8d:e4:07:3d:59:4d:0d:b0:70:4e:81:ed:20: 96:8c:c0:c7:81:86:d4:16:18:d1:91:0a:13:10:7e: 42:eb:4a:39:34:e7:be:ff:03:d1:28:bc:ce:3e:2d: ec:95:d9:2c:cc:38:01:9d:aa:c1:09:ea:4d:12:08: 31:34:8a:b8:3a:b2:82:28:14:b8:7f:fa:f1:11:c7: 32:c8:17:2b:d7:5c:e3:b5:19:7e:24:98:af:f1:d0: e8:01:15:f5:67:64:ff:d1:dc:0f:56:b3:30:be:25: 08:41:28:dc:6b:48:af:46:22:7c:72:4b:e8:bb:a5: 1b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:49:D6:1B:6E:7C:E1:B0:AC:30:CF:2A:D5:76:94:02:73:86:78:77 X509v3 Authority Key Identifier: keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/34332e3235342e32352e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.25.0/24 Signature Algorithm: sha256WithRSAEncryption 44:e1:12:59:b0:d3:af:3c:ef:b5:f1:ef:cf:dd:91:0c:4b:73: 87:7c:d6:42:76:05:cf:c9:dc:9a:24:6f:bd:60:6a:a5:8e:6b: 1b:c3:98:0f:0c:a0:ca:77:e4:93:fc:6b:f1:09:22:df:d1:55: eb:90:29:3b:8d:14:c2:0a:7f:51:59:b8:8f:d1:f1:37:f5:c6: 58:04:0b:d1:1a:b3:0a:bf:70:8e:fb:62:14:59:e4:c0:fa:27: 1d:b5:6c:f6:85:88:b8:d8:20:7c:b5:5e:fd:b2:d3:04:f2:8c: 19:20:d2:7a:c0:9f:34:5f:b6:33:5d:b7:f7:b6:3b:7b:b7:b0: 5a:64:18:d2:5e:50:e1:a0:75:52:39:15:63:93:79:33:1c:bc: 05:e2:cd:26:06:8d:2a:58:5c:39:54:63:3b:e5:06:bd:4c:e1: 65:32:c2:3f:21:44:27:f8:82:e1:dc:c9:17:4a:84:39:5c:5d: a5:12:4c:e4:5d:bd:3c:5d:25:56:3d:1a:24:eb:81:f4:93:f1: 40:21:0e:30:bb:8b:12:33:3c:ae:fd:cd:be:a2:c3:dc:3e:51: 64:47:d8:b8:54:17:cc:fd:67:d0:76:24:41:d9:9a:38:46:ad: eb:d4:8b:4e:aa:14:86:df:ad:2d:16:cb:bd:78:b7:4b:f5:81: 34:46:e0:3b -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUSEJBZ/YAhHwIdgTSImwHf/eUEfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw NTE4RjUwNzAeFw0yNjA1MDkwNjEzMTdaFw0yNzA1MDgwNjE4MTdaMDMxMTAvBgNV BAMTKEY0NDlENjFCNkU3Q0UxQjBBQzMwQ0YyQUQ1NzY5NDAyNzM4Njc4NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzEhDYj8PMFBeMGETgJc2z+h3N tsGFhMfMVb/Tp78lpXYIJi84524LOAuoRipPRM3VuA9wnMG1I2pN2U9ahfkdlAMJ nAIvBb8qoAdUW7VCks5U3jXzr/+zYs+XYyE5RRluNewSI5+UprjnPS2jLkpE8xm0 noblZcU3pB3izuOefWBzi1Lx9CAPjeQHPVlNDbBwToHtIJaMwMeBhtQWGNGRChMQ fkLrSjk0577/A9EovM4+LeyV2SzMOAGdqsEJ6k0SCDE0irg6soIoFLh/+vERxzLI FyvXXOO1GX4kmK/x0OgBFfVnZP/R3A9WszC+JQhBKNxrSK9GInxyS+i7pRvzAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQU9EnWG2584bCsMM8q1XaUAnOGeHcwHwYDVR0j BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1Mzc1OTMwMzI4NTQ3MzQxLzAvMzQzMzJlMzIzNTM0 MmUzMjM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr/hkwDQYJKoZIhvcNAQELBQADggEBAEThElmw068877Xx78/dkQxLc4d81kJ2 Bc/J3Jokb71gaqWOaxvDmA8MoMp35JP8a/EJIt/RVeuQKTuNFMIKf1FZuI/R8Tf1 xlgEC9Easwq/cI77YhRZ5MD6Jx21bPaFiLjYIHy1Xv2y0wTyjBkg0nrAnzRftjNd t/e2O3u3sFpkGNJeUOGgdVI5FWOTeTMcvAXizSYGjSpYXDlUYzvlBr1M4WUywj8h RCf4guHcyRdKhDlcXaUSTORdvTxdJVY9GiTrgfST8UAhDjC7ixIzPK79zb6iw9w+ UWRH2LhUF8z9Z9B2JEHZmjhGrevUi06qFIbfrS0Wy714t0v1gTRG4Ds= -----END CERTIFICATE-----Generated at Wed May 13 13:05:36 2026 by rpki-client