$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105375930328547341/0/34332e3235342e32362e302f32342d3234203d3e2034383437.roa File: 34332e3235342e32362e302f32342d3234203d3e2034383437.roa (raw, json) Hash identifier: leQK+grHmHX+nKo+1gHEIEc2DgIqJnwwWJjDTD+bBIk= Subject key identifier: C8:F3:8E:03:A1:5B:8B:09:D8:92:22:17:A1:74:22:9A:08:F5:27:EF Certificate issuer: /CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507 Certificate serial: 77AE1371B811FB43EFE5BBF3A5F808E7FDBE01FF Authority key identifier: 30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/34332e3235342e32362e302f32342d3234203d3e2034383437.roa Signing time: Sat 09 May 2026 06:18:17 +0000 ROA not before: Sat 09 May 2026 06:13:17 +0000 ROA not after: Sat 08 May 2027 06:18:17 +0000 asID: 4847 IP address blocks: 43.254.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 06:50:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ae:13:71:b8:11:fb:43:ef:e5:bb:f3:a5:f8:08:e7:fd:be:01:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30BFDE48CAB9DDD5E275A7241FF7E4E40518F507 Validity Not Before: May 9 06:13:17 2026 GMT Not After : May 8 06:18:17 2027 GMT Subject: CN=C8F38E03A15B8B09D8922217A174229A08F527EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4d:a2:f1:12:40:af:cf:b4:f4:42:e5:9d:a0: 8f:05:e8:0c:8d:d7:42:6d:60:cb:78:1a:f5:c0:56: 51:d4:03:da:c5:e2:b9:af:32:66:27:25:a8:b9:65: 97:0b:c7:9e:f0:30:0c:4a:63:46:ba:fd:05:1e:a3: 3d:94:af:13:b5:b9:a7:33:a3:ed:a9:d8:54:64:6b: 90:9f:76:5e:0d:1c:c4:7f:2a:b3:ed:cc:04:ed:60: d0:08:9d:b9:11:5f:56:c4:be:fe:0c:9a:16:a1:e2: 84:97:0f:7c:34:02:ec:be:a3:28:19:14:c3:b3:1f: 04:ff:1f:e1:54:b1:be:ef:a8:c8:4c:a9:83:37:ab: f5:cb:da:af:00:0e:e9:5d:9d:c5:45:4f:43:15:7f: 4b:fc:3f:bc:2a:0d:f7:82:ab:b7:34:38:84:60:f1: ca:f7:e6:0e:c0:66:f5:2d:fd:61:df:4a:cb:7d:1b: 8b:99:2e:a5:b5:ad:cc:64:c5:a8:5a:bd:f1:b6:b6: 13:4b:f9:00:3d:3a:bb:d7:89:a6:e7:b1:3a:65:1b: 43:ab:2c:98:9a:82:96:d2:9d:93:e9:9e:fc:ad:b4: f8:5e:33:34:1b:0a:93:bc:24:30:4c:fa:8a:e7:b8: 4c:71:9e:a5:4c:1d:57:0c:c8:6a:66:4d:b1:17:a6: 89:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:F3:8E:03:A1:5B:8B:09:D8:92:22:17:A1:74:22:9A:08:F5:27:EF X509v3 Authority Key Identifier: keyid:30:BF:DE:48:CA:B9:DD:D5:E2:75:A7:24:1F:F7:E4:E4:05:18:F5:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/30BFDE48CAB9DDD5E275A7241FF7E4E40518F507.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105375930328547341/0/34332e3235342e32362e302f32342d3234203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.26.0/24 Signature Algorithm: sha256WithRSAEncryption 44:04:41:df:85:cb:8a:82:79:6f:26:65:d8:6a:7d:3e:2d:94: 06:ea:dd:71:1a:96:f8:20:11:0e:43:ea:92:b6:f3:87:38:15: 9f:d9:5d:04:14:01:39:1c:bd:3d:25:0c:46:97:33:be:e0:d5: a9:a9:0b:0a:2a:42:91:e0:e8:f7:7f:c7:5c:be:27:37:15:af: 4a:15:d9:7e:65:20:03:db:0e:e3:c4:ad:aa:cb:6a:56:82:f9: b9:08:7b:5f:98:5f:82:f0:1e:df:5e:0a:b1:92:3d:8e:4a:8c: a2:c2:b9:5d:98:1d:ef:4f:bc:c8:1e:54:18:00:23:dd:2b:0d: 39:4b:b1:ac:de:6f:45:dd:63:9e:54:74:4d:c9:cc:72:5c:49: 70:81:86:d5:72:bf:9e:7d:c5:4b:bc:31:98:33:28:24:0a:e4: 3c:56:27:5f:61:53:d8:70:a3:7e:b5:f3:d0:6b:0e:e3:db:fe: 53:78:5b:58:7f:87:87:09:de:64:8c:83:8d:db:83:0b:66:19: 0f:e7:e8:e9:8f:64:42:fd:71:46:0d:c4:5c:94:80:a5:ea:f6: 84:53:12:1f:b0:8b:f0:d5:d1:84:3e:fc:ab:60:42:f1:3b:57: bf:d8:f2:3f:17:fe:c7:d6:9f:13:61:2b:ac:3f:19:c5:38:46: 94:11:7a:a1 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUd64TcbgR+0Pv5bvzpfgI5/2+Af8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQw NTE4RjUwNzAeFw0yNjA1MDkwNjEzMTdaFw0yNzA1MDgwNjE4MTdaMDMxMTAvBgNV BAMTKEM4RjM4RTAzQTE1QjhCMDlEODkyMjIxN0ExNzQyMjlBMDhGNTI3RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcTaLxEkCvz7T0QuWdoI8F6AyN 10JtYMt4GvXAVlHUA9rF4rmvMmYnJai5ZZcLx57wMAxKY0a6/QUeoz2UrxO1uacz o+2p2FRka5Cfdl4NHMR/KrPtzATtYNAInbkRX1bEvv4Mmhah4oSXD3w0Auy+oygZ FMOzHwT/H+FUsb7vqMhMqYM3q/XL2q8ADuldncVFT0MVf0v8P7wqDfeCq7c0OIRg 8cr35g7AZvUt/WHfSst9G4uZLqW1rcxkxahavfG2thNL+QA9OrvXiabnsTplG0Or LJiagpbSnZPpnvyttPheMzQbCpO8JDBM+ornuExxnqVMHVcMyGpmTbEXpomjAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUyPOOA6FbiwnYkiIXoXQimgj1J+8wHwYDVR0j BBgwFoAUML/eSMq53dXidackH/fk5AUY9QcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM3NTkzMDMyODU0NzM0MS8wLzMwQkZERTQ4Q0FCOURERDVFMjc1QTcyNDFGRjdF NEU0MDUxOEY1MDcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMzBCRkRFNDhDQUI5RERENUUyNzVBNzI0MUZGN0U0RTQwNTE4RjUwNy5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1Mzc1OTMwMzI4NTQ3MzQxLzAvMzQzMzJlMzIzNTM0 MmUzMjM2MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzODM0Mzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAAr/howDQYJKoZIhvcNAQELBQADggEBAEQEQd+Fy4qCeW8mZdhqfT4tlAbq3XEa lvggEQ5D6pK284c4FZ/ZXQQUATkcvT0lDEaXM77g1ampCwoqQpHg6Pd/x1y+JzcV r0oV2X5lIAPbDuPErarLalaC+bkIe1+YX4LwHt9eCrGSPY5KjKLCuV2YHe9PvMge VBgAI90rDTlLsazeb0XdY55UdE3JzHJcSXCBhtVyv559xUu8MZgzKCQK5DxWJ19h U9hwo36189BrDuPb/lN4W1h/h4cJ3mSMg43bgwtmGQ/n6OmPZEL9cUYNxFyUgKXq 9oRTEh+wi/DV0YQ+/KtgQvE7V7/Y8j8X/sfWnxNhK6w/GcU4RpQReqE= -----END CERTIFICATE-----Generated at Wed May 13 12:51:14 2026 by rpki-client