$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1105386480877961231/0/34332e3235342e37322e302f32322d3232203d3e2030.roa File: 34332e3235342e37322e302f32322d3232203d3e2030.roa (raw, json) Hash identifier: cep0HVK9o9xoJvoKawVGqM636X04cBC5ijqfkFDqawk= Subject key identifier: 74:1D:07:01:84:08:C4:52:DB:01:0F:D8:3C:EF:EA:69:32:CC:9A:91 Certificate issuer: /CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Certificate serial: 07CDDFD28A584C4B88ED1AB268F8A8D96AEC546D Authority key identifier: 44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/34332e3235342e37322e302f32322d3232203d3e2030.roa Signing time: Sat 09 May 2026 06:52:18 +0000 ROA not before: Sat 09 May 2026 06:47:18 +0000 ROA not after: Sat 08 May 2027 06:52:18 +0000 asID: 0 IP address blocks: 43.254.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:cd:df:d2:8a:58:4c:4b:88:ed:1a:b2:68:f8:a8:d9:6a:ec:54:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4405894DDA31D4181DB39F5C413EAD20B4EADE08 Validity Not Before: May 9 06:47:18 2026 GMT Not After : May 8 06:52:18 2027 GMT Subject: CN=741D07018408C452DB010FD83CEFEA6932CC9A91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:9a:cd:d6:04:6d:76:77:0b:83:5f:79:18:05: 8a:8b:94:60:29:d7:d0:0e:b6:4a:30:e3:b2:cf:47: 47:13:1b:54:7c:55:83:3f:41:8c:2f:c5:77:ae:88: 57:4c:16:15:01:92:6c:87:03:03:80:3e:cb:c4:82: 24:95:1f:38:0e:e8:36:f1:79:cf:b3:49:18:ee:f3: f8:47:11:16:9c:57:cc:c4:f2:16:32:0d:b0:57:08: 85:92:45:d8:df:80:f1:c3:41:76:a2:73:eb:29:b5: 8b:47:10:2b:2e:37:c3:e5:33:99:6a:1e:d0:da:a9: 73:3e:3e:f0:ed:60:76:93:d7:c5:49:98:d3:9c:ad: 84:a6:03:f6:40:3b:2f:59:74:94:73:fc:ef:20:db: 04:ad:2b:5a:d0:09:c4:1e:94:1d:01:cf:01:01:84: 5a:1a:5b:ad:e3:10:d8:6c:29:0e:2e:ea:84:8d:dd: e0:db:7c:22:f7:42:a9:68:75:09:e2:3c:c7:a5:28: 71:a3:aa:ef:2b:cc:2a:29:94:67:7f:ef:7e:dd:7a: af:0b:cc:bf:51:ee:2a:6b:c2:10:18:d7:65:19:88: 03:45:b7:e3:64:31:62:85:73:d3:d0:c1:fa:2b:29: d2:62:30:81:17:cd:dd:a1:b0:9e:47:b3:19:06:48: 77:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1D:07:01:84:08:C4:52:DB:01:0F:D8:3C:EF:EA:69:32:CC:9A:91 X509v3 Authority Key Identifier: keyid:44:05:89:4D:DA:31:D4:18:1D:B3:9F:5C:41:3E:AD:20:B4:EA:DE:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/4405894DDA31D4181DB39F5C413EAD20B4EADE08.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/4405894DDA31D4181DB39F5C413EAD20B4EADE08.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1105386480877961231/0/34332e3235342e37322e302f32322d3232203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.254.72.0/22 Signature Algorithm: sha256WithRSAEncryption be:d3:b6:f0:b9:c1:b8:b9:44:49:a7:1a:d1:6b:5a:0a:50:ef: 74:5c:6e:3b:6b:ab:ef:0b:1c:c3:bc:bf:91:2f:cd:ba:e4:8c: cd:51:79:47:16:db:0a:ac:3a:c1:40:7a:7c:c8:f8:dd:02:43: 02:39:4d:e9:d0:52:e2:8d:aa:4f:e1:ec:44:12:55:99:9e:99: 71:21:94:4f:3b:70:26:95:6f:56:eb:b6:ec:00:e5:ed:18:5c: 66:cb:aa:37:25:c4:e1:81:11:ed:c1:19:d7:5e:d8:1e:21:d1: 7e:57:98:f6:2e:e6:c7:41:3e:f8:30:80:b5:b1:d8:62:44:95: 88:db:4d:0e:b9:5b:46:29:2f:c9:f8:3c:14:db:5a:cc:cb:70: 48:8b:c8:40:80:71:18:1d:80:c3:5e:d4:15:b9:15:27:63:12: 5b:a2:d8:7a:a6:75:90:e0:76:34:d9:92:61:f5:61:ea:8c:fb: 68:29:f4:6a:d0:61:a9:f2:d4:01:ab:e1:0c:a6:14:65:23:75: 19:2c:91:ec:fe:39:69:a6:50:b2:02:13:b1:f7:d2:c1:a0:ac: 6e:60:39:84:89:7b:90:b3:95:4a:bd:d7:6a:cb:03:1e:34:db: d6:c9:8e:5c:51:38:ea:71:b4:11:a7:3f:63:7a:f5:a0:3a:fe: 84:c0:f8:30 -----BEGIN CERTIFICATE----- MIIE/zCCA+egAwIBAgIUB83f0opYTEuI7RqyaPio2WrsVG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBC NEVBREUwODAeFw0yNjA1MDkwNjQ3MThaFw0yNzA1MDgwNjUyMThaMDMxMTAvBgNV BAMTKDc0MUQwNzAxODQwOEM0NTJEQjAxMEZEODNDRUZFQTY5MzJDQzlBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkms3WBG12dwuDX3kYBYqLlGAp 19AOtkow47LPR0cTG1R8VYM/QYwvxXeuiFdMFhUBkmyHAwOAPsvEgiSVHzgO6Dbx ec+zSRju8/hHERacV8zE8hYyDbBXCIWSRdjfgPHDQXaic+sptYtHECsuN8PlM5lq HtDaqXM+PvDtYHaT18VJmNOcrYSmA/ZAOy9ZdJRz/O8g2wStK1rQCcQelB0BzwEB hFoaW63jENhsKQ4u6oSN3eDbfCL3QqlodQniPMelKHGjqu8rzCoplGd/737deq8L zL9R7iprwhAY12UZiANFt+NkMWKFc9PQwforKdJiMIEXzd2hsJ5HsxkGSHevAgMB AAGjggIJMIICBTAdBgNVHQ4EFgQUdB0HAYQIxFLbAQ/YPO/qaTLMmpEwHwYDVR0j BBgwFoAURAWJTdox1Bgds59cQT6tILTq3ggwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NTM4NjQ4MDg3Nzk2MTIzMS8wLzQ0MDU4OTREREEzMUQ0MTgxREIzOUY1QzQxM0VB RDIwQjRFQURFMDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDQwNTg5NEREQTMxRDQxODFEQjM5RjVDNDEzRUFEMjBCNEVBREUwOC5jZXIw gYIGCCsGAQUFBwELBHYwdDByBggrBgEFBQcwC4ZmcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA1Mzg2NDgwODc3OTYxMjMxLzAvMzQzMzJlMzIzNTM0 MmUzNzMyMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzAucm9hMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAIr/kgw DQYJKoZIhvcNAQELBQADggEBAL7TtvC5wbi5REmnGtFrWgpQ73Rcbjtrq+8LHMO8 v5EvzbrkjM1ReUcW2wqsOsFAenzI+N0CQwI5TenQUuKNqk/h7EQSVZmemXEhlE87 cCaVb1brtuwA5e0YXGbLqjclxOGBEe3BGdde2B4h0X5XmPYu5sdBPvgwgLWx2GJE lYjbTQ65W0YpL8n4PBTbWszLcEiLyECAcRgdgMNe1BW5FSdjElui2HqmdZDgdjTZ kmH1YeqM+2gp9GrQYany1AGr4QymFGUjdRkskez+OWmmULICE7H30sGgrG5gOYSJ e5CzlUq912rLAx4029bJjlxROOpxtBGnP2N69aA6/oTA+DA= -----END CERTIFICATE-----Generated at Wed May 13 07:01:13 2026 by rpki-client