$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34332e3232372e3134302e302f32322d3232203d3e2034383437.roa File: 34332e3232372e3134302e302f32322d3232203d3e2034383437.roa (raw, json) Hash identifier: aF4/oE0nKF7/LKffe8lyhVCPu0Gr84SGiYDte7e+yvk= Subject key identifier: 10:D1:9B:7B:41:F8:1C:2F:BB:B7:E8:FB:07:54:1D:AF:C3:22:62:61 Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874 Certificate serial: 69F2B071C6C8A6865E68601AF21AB14409E4A15E Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34332e3232372e3134302e302f32322d3232203d3e2034383437.roa Signing time: Tue 12 May 2026 08:59:29 +0000 ROA not before: Tue 12 May 2026 08:54:29 +0000 ROA not after: Tue 11 May 2027 08:59:29 +0000 asID: 4847 IP address blocks: 43.227.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:f2:b0:71:c6:c8:a6:86:5e:68:60:1a:f2:1a:b1:44:09:e4:a1:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874 Validity Not Before: May 12 08:54:29 2026 GMT Not After : May 11 08:59:29 2027 GMT Subject: CN=10D19B7B41F81C2FBBB7E8FB07541DAFC3226261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:24:e9:98:4a:e6:4b:61:88:fd:75:73:03: c8:9d:45:32:71:1c:3f:ed:2a:c2:2f:67:38:54:89: 4c:36:c4:22:f8:bf:e9:5b:bb:16:f0:45:4a:88:da: e1:a4:b1:f5:fa:dc:e1:7f:91:e8:a8:d1:ef:e6:ec: a4:c9:85:18:ff:da:e2:7f:b9:bc:87:8a:94:c3:ef: c0:a1:2a:9e:22:94:78:e9:79:97:39:ce:8b:75:29: 7c:4f:88:bb:d2:d1:46:04:9f:1b:1a:44:0b:cd:38: 5a:c6:a5:54:bf:ba:db:7e:70:3e:6a:4e:93:75:53: 14:de:2c:5e:ff:34:78:bf:59:b2:e0:00:a1:ba:2d: 68:04:71:48:23:f6:b1:53:f3:40:8f:bd:f4:95:cc: 0d:8e:e8:2a:6b:4f:54:4e:f8:16:9f:d7:95:05:dd: 90:30:1f:98:f9:7e:06:21:0f:4b:af:a3:5f:64:65: e5:e9:73:ec:6a:7e:ff:af:58:a5:f1:66:e1:6b:67: b2:64:b9:b3:df:86:af:93:c3:bf:66:36:ef:3f:5e: ad:58:a4:43:c1:87:81:4b:07:a4:18:55:07:6e:53: 41:3d:5c:c2:d5:28:ec:bb:62:e8:55:19:fd:be:00: 5b:0e:89:87:f2:aa:92:84:3e:93:97:20:2f:35:12: e8:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D1:9B:7B:41:F8:1C:2F:BB:B7:E8:FB:07:54:1D:AF:C3:22:62:61 X509v3 Authority Key Identifier: keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34332e3232372e3134302e302f32322d3232203d3e2034383437.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.140.0/22 Signature Algorithm: sha256WithRSAEncryption 64:fb:50:ce:10:4c:1f:65:a1:b5:56:f7:39:ab:0d:c7:2a:53: 96:da:79:ec:c5:56:1c:9a:ce:47:cf:76:b7:36:bb:44:9e:26: ce:00:a5:e8:78:3d:5d:1f:05:e2:fd:ee:28:60:77:78:77:7f: f7:2a:e5:8d:66:b8:45:f9:a7:3b:66:af:8a:9f:33:fa:57:ec: 3b:cd:e6:59:cc:72:0c:24:38:08:0e:a6:97:ba:ba:e5:94:a8: 61:37:1d:3e:79:c2:03:24:b6:2a:ae:8c:2c:96:41:ff:f7:ff: 6d:c9:c1:65:33:ce:f3:3e:3c:70:7f:1b:3f:15:9e:84:76:77: fc:e2:37:79:b4:25:67:0c:52:d7:14:b9:b3:98:5f:8f:7a:78: 1b:72:11:ae:1d:22:7f:9a:ba:06:2d:72:59:e4:75:d5:95:2f: c2:40:8c:10:4f:24:cf:3e:20:a2:83:ac:2d:54:0c:8e:83:67: ea:98:fd:75:2d:f7:e4:b8:9f:4b:4a:8a:86:fc:c0:a3:b3:2f: 37:59:90:99:a8:94:28:aa:6e:73:04:95:f2:5d:0d:a5:db:34: 57:f3:37:e6:26:d2:4b:34:92:2b:91:6d:7e:02:86:6c:38:8b: f1:46:9a:36:20:a0:72:69:3e:41:dd:d0:ab:c1:d4:d0:1a:3f: 10:57:0b:d5 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUafKwccbIpoZeaGAa8hqxRAnkoV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy NkYxNDg3NDAeFw0yNjA1MTIwODU0MjlaFw0yNzA1MTEwODU5MjlaMDMxMTAvBgNV BAMTKDEwRDE5QjdCNDFGODFDMkZCQkI3RThGQjA3NTQxREFGQzMyMjYyNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1eCTpmErmS2GI/XVzA8idRTJx HD/tKsIvZzhUiUw2xCL4v+lbuxbwRUqI2uGksfX63OF/keio0e/m7KTJhRj/2uJ/ ubyHipTD78ChKp4ilHjpeZc5zot1KXxPiLvS0UYEnxsaRAvNOFrGpVS/utt+cD5q TpN1UxTeLF7/NHi/WbLgAKG6LWgEcUgj9rFT80CPvfSVzA2O6CprT1RO+Baf15UF 3ZAwH5j5fgYhD0uvo19kZeXpc+xqfv+vWKXxZuFrZ7JkubPfhq+Tw79mNu8/Xq1Y pEPBh4FLB6QYVQduU0E9XMLVKOy7YuhVGf2+AFsOiYfyqpKEPpOXIC81EugLAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUENGbe0H4HC+7t+j7B1Qdr8MiYmEwHwYDVR0j BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMTA2NTAzMTU1NjYwNjE5NzkzLzAvMzQzMzJlMzIzMjM3 MmUzMTM0MzAyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzQzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivjjDANBgkqhkiG9w0BAQsFAAOCAQEAZPtQzhBMH2WhtVb3OasNxypTltp5 7MVWHJrOR892tza7RJ4mzgCl6Hg9XR8F4v3uKGB3eHd/9yrljWa4RfmnO2avip8z +lfsO83mWcxyDCQ4CA6ml7q65ZSoYTcdPnnCAyS2Kq6MLJZB//f/bcnBZTPO8z48 cH8bPxWehHZ3/OI3ebQlZwxS1xS5s5hfj3p4G3IRrh0if5q6Bi1yWeR11ZUvwkCM EE8kzz4gooOsLVQMjoNn6pj9dS335LifS0qKhvzAo7MvN1mQmaiUKKpucwSV8l0N pds0V/M35ibSSzSSK5FtfgKGbDiL8UaaNiCgcmk+Qd3Qq8HU0Bo/EFcL1Q== -----END CERTIFICATE-----Generated at Wed May 13 14:59:37 2026 by rpki-client