$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106453099125407763/0/34332e3232352e37362e302f32322d3232203d3e203234313339.roa File: 34332e3232352e37362e302f32322d3232203d3e203234313339.roa (raw, json) Hash identifier: AfTewB5N2+NygTIMFLOJxv2PKqLLMf8AlOOICIxhrv0= Subject key identifier: 75:07:84:76:6A:D5:50:86:22:5B:0A:99:BD:99:F6:F3:B5:43:04:E0 Certificate issuer: /CN=AA39AE9FC417219D4A84D7759F82869F86905204 Certificate serial: 1210B5E52E8CF28729161845E3DD64E1D37FECE2 Authority key identifier: AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/34332e3232352e37362e302f32322d3232203d3e203234313339.roa Signing time: Tue 12 May 2026 07:21:55 +0000 ROA not before: Tue 12 May 2026 07:16:55 +0000 ROA not after: Tue 11 May 2027 07:21:55 +0000 asID: 24139 IP address blocks: 43.225.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:10:b5:e5:2e:8c:f2:87:29:16:18:45:e3:dd:64:e1:d3:7f:ec:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA39AE9FC417219D4A84D7759F82869F86905204 Validity Not Before: May 12 07:16:55 2026 GMT Not After : May 11 07:21:55 2027 GMT Subject: CN=750784766AD55086225B0A99BD99F6F3B54304E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ef:78:ac:39:86:d2:e8:82:27:2b:48:77:08: 1d:16:b0:73:b9:4a:69:5b:2b:92:0f:8a:86:b2:5c: 88:4c:7c:9c:a5:bc:81:11:72:c0:7e:6f:05:71:2a: b2:5e:d0:ef:49:5d:15:a3:5f:89:7d:f5:c9:6c:ec: d5:4d:94:a6:92:cb:c0:c4:b2:06:7d:d6:07:f7:36: ab:10:02:b5:8b:39:83:69:2d:30:c8:e1:bc:51:76: 4a:cd:53:a5:a1:51:b9:be:4b:ed:94:b7:91:2e:96: a9:87:49:e3:fa:96:13:d2:f2:f3:63:45:32:f8:c0: 00:82:50:67:9e:65:c8:0e:3e:59:82:82:23:ff:99: 4a:58:fd:54:c3:e1:36:e3:d0:6d:fc:67:15:e5:71: ba:b0:04:43:f2:bd:e2:78:71:f3:bf:5c:39:2a:d4: 87:d1:59:d6:9c:48:f9:c0:53:d5:a7:96:37:c3:2c: 26:a3:4c:59:e9:28:67:7c:ad:00:58:05:84:9b:12: cf:33:6a:70:69:9c:4d:bd:e8:28:fa:cd:14:10:21: 22:19:08:35:1d:39:84:5c:24:44:ca:cd:2f:e8:f0: 64:e7:9d:ca:da:e6:b6:fe:b9:bd:2e:8b:15:18:f6: 9d:58:cf:0e:f4:f8:94:fc:43:c0:65:1b:c8:f8:07: b4:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:07:84:76:6A:D5:50:86:22:5B:0A:99:BD:99:F6:F3:B5:43:04:E0 X509v3 Authority Key Identifier: keyid:AA:39:AE:9F:C4:17:21:9D:4A:84:D7:75:9F:82:86:9F:86:90:52:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/AA39AE9FC417219D4A84D7759F82869F86905204.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/AA39AE9FC417219D4A84D7759F82869F86905204.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106453099125407763/0/34332e3232352e37362e302f32322d3232203d3e203234313339.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.76.0/22 Signature Algorithm: sha256WithRSAEncryption 2d:d1:bd:33:c2:5f:8c:e7:a6:c0:eb:61:c5:30:f9:1c:9e:25: 60:12:fa:65:31:03:a2:2d:af:8f:31:fe:65:55:a8:16:37:7e: 54:fd:25:eb:13:49:50:97:e6:af:76:63:6d:04:9b:aa:03:f0: db:82:37:55:ec:c9:60:5a:4e:be:a7:ee:03:ab:5a:29:03:88: e8:ec:72:ca:a5:f7:23:de:f2:22:d0:7b:82:ea:48:09:2f:40: 81:84:13:56:62:74:be:19:bf:91:41:f1:51:67:6e:24:99:e2: 0a:df:2d:68:88:1a:65:bc:7d:c0:c0:1c:45:a9:d4:e3:d5:35: dd:0a:cd:48:5d:cf:1f:da:be:b4:4b:b7:3a:11:5c:8d:19:ec: 15:4a:9f:34:94:9b:bc:c9:e0:ac:75:55:70:18:fb:9d:19:41: d2:58:7a:79:49:18:a6:54:4d:d7:da:f6:58:55:54:2b:d1:62: 0c:0b:48:e8:db:25:14:63:66:3e:95:cd:10:7d:64:6b:2c:bf: 61:1e:14:9c:14:92:9b:34:27:ca:9e:bf:7d:fd:63:5f:50:04: b8:94:b0:4c:6c:0f:a4:ba:42:a8:a9:de:cd:1d:c2:05:23:d9: 0a:19:73:83:cb:1a:79:18:a3:a1:cc:27:51:5a:38:07:ad:f5: d9:fb:38:06 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUEhC15S6M8ocpFhhF491k4dN/7OIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4 NjkwNTIwNDAeFw0yNjA1MTIwNzE2NTVaFw0yNzA1MTEwNzIxNTVaMDMxMTAvBgNV BAMTKDc1MDc4NDc2NkFENTUwODYyMjVCMEE5OUJEOTlGNkYzQjU0MzA0RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC373isOYbS6IInK0h3CB0WsHO5 SmlbK5IPioayXIhMfJylvIERcsB+bwVxKrJe0O9JXRWjX4l99cls7NVNlKaSy8DE sgZ91gf3NqsQArWLOYNpLTDI4bxRdkrNU6WhUbm+S+2Ut5EulqmHSeP6lhPS8vNj RTL4wACCUGeeZcgOPlmCgiP/mUpY/VTD4Tbj0G38ZxXlcbqwBEPyveJ4cfO/XDkq 1IfRWdacSPnAU9WnljfDLCajTFnpKGd8rQBYBYSbEs8zanBpnE296Cj6zRQQISIZ CDUdOYRcJETKzS/o8GTnncra5rb+ub0uixUY9p1Yzw70+JT8Q8BlG8j4B7SfAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUdQeEdmrVUIYiWwqZvZn287VDBOAwHwYDVR0j BBgwFoAUqjmun8QXIZ1KhNd1n4KGn4aQUgQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjQ1MzA5OTEyNTQwNzc2My8wL0FBMzlBRTlGQzQxNzIxOUQ0QTg0RDc3NTlGODI4 NjlGODY5MDUyMDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQUEzOUFFOUZDNDE3MjE5RDRBODRENzc1OUY4Mjg2OUY4NjkwNTIwNC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2NDUzMDk5MTI1NDA3NzYzLzAvMzQzMzJlMzIzMjM1 MmUzNzM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzIzNDMxMzMzOS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivhTDANBgkqhkiG9w0BAQsFAAOCAQEALdG9M8JfjOemwOthxTD5HJ4lYBL6 ZTEDoi2vjzH+ZVWoFjd+VP0l6xNJUJfmr3ZjbQSbqgPw24I3VezJYFpOvqfuA6ta KQOI6OxyyqX3I97yItB7gupICS9AgYQTVmJ0vhm/kUHxUWduJJniCt8taIgaZbx9 wMAcRanU49U13QrNSF3PH9q+tEu3OhFcjRnsFUqfNJSbvMngrHVVcBj7nRlB0lh6 eUkYplRN19r2WFVUK9FiDAtI6NslFGNmPpXNEH1kayy/YR4UnBSSmzQnyp6/ff1j X1AEuJSwTGwPpLpCqKnezR3CBSPZChlzg8saeRijocwnUVo4B6312fs4Bg== -----END CERTIFICATE-----Generated at Wed May 13 18:14:41 2026 by rpki-client