$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34332e3232372e3134302e302f32322d3232203d3e203633363134.roa File: 34332e3232372e3134302e302f32322d3232203d3e203633363134.roa (raw, json) Hash identifier: 1YlErZgQzI+k3M/RrQAuVeM9lWap1eYxH0Be/qgy4mg= Subject key identifier: 7C:CC:96:F0:F9:0B:9C:B6:B9:DA:D0:02:BF:7C:27:FD:14:2A:AE:48 Certificate issuer: /CN=40D86726DB14F9E5E06610928FF6C77226F14874 Certificate serial: 2985B7BB668C81EFFA12213002A0E627C382B8FD Authority key identifier: 40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34332e3232372e3134302e302f32322d3232203d3e203633363134.roa Signing time: Tue 12 May 2026 08:59:29 +0000 ROA not before: Tue 12 May 2026 08:54:29 +0000 ROA not after: Tue 11 May 2027 08:59:29 +0000 asID: 63614 IP address blocks: 43.227.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 05:10:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:85:b7:bb:66:8c:81:ef:fa:12:21:30:02:a0:e6:27:c3:82:b8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40D86726DB14F9E5E06610928FF6C77226F14874 Validity Not Before: May 12 08:54:29 2026 GMT Not After : May 11 08:59:29 2027 GMT Subject: CN=7CCC96F0F90B9CB6B9DAD002BF7C27FD142AAE48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:89:76:59:ed:8e:7b:37:aa:85:3a:20:d0:e4: 5b:9f:ce:ff:fd:17:39:0e:12:d4:1d:58:3e:da:41: e0:a4:cc:82:1f:18:cb:8e:2f:d5:5e:ad:87:fe:20: d7:2f:6b:47:e8:3b:20:b3:89:b7:6a:a0:7f:63:f6: 79:ee:90:e9:6a:cf:c4:2b:e6:f2:7a:62:e1:1a:23: d0:47:7e:cb:02:eb:ec:fe:cc:b7:2b:92:54:49:a3: bc:f1:a5:be:24:7c:dc:aa:d2:41:3c:f2:83:95:72: 90:14:48:6e:a6:c5:c2:0c:7a:e3:68:a0:59:1b:b4: c5:99:36:11:29:4f:f5:42:b2:9d:da:8f:60:43:84: c2:da:03:d1:ba:cb:34:8d:0f:3a:b9:94:2b:fd:83: a6:3b:18:ca:92:37:76:a0:5d:18:66:7f:44:79:ce: 1e:c3:60:01:0f:f6:24:1a:d7:af:00:88:55:bb:21: cf:e9:ba:cd:9f:96:09:22:ec:ab:a8:86:21:ec:7d: 7f:43:bb:eb:36:22:3a:84:1e:b3:18:07:3f:61:85: 5e:f6:50:10:56:82:b9:98:b7:db:c8:05:36:2e:8c: 6e:71:46:3c:55:d2:87:99:21:6f:f3:b3:48:ee:ec: 17:61:cc:5b:fc:24:bc:bf:e4:6e:5d:13:b4:14:1b: ce:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:CC:96:F0:F9:0B:9C:B6:B9:DA:D0:02:BF:7C:27:FD:14:2A:AE:48 X509v3 Authority Key Identifier: keyid:40:D8:67:26:DB:14:F9:E5:E0:66:10:92:8F:F6:C7:72:26:F1:48:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/40D86726DB14F9E5E06610928FF6C77226F14874.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/40D86726DB14F9E5E06610928FF6C77226F14874.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1106503155660619793/0/34332e3232372e3134302e302f32322d3232203d3e203633363134.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.140.0/22 Signature Algorithm: sha256WithRSAEncryption 33:d5:fd:2e:03:18:8f:9f:e7:14:7e:21:f9:bf:a5:8e:36:24: b7:c3:93:11:65:90:d1:09:7c:c6:78:9e:3c:fb:12:68:29:3d: 35:18:c0:17:42:71:20:07:9a:57:32:a5:e0:69:3c:97:4c:9f: cc:05:0d:f0:d2:7f:5f:8f:37:c7:86:3e:fa:a6:0a:de:40:3c: b8:4c:19:f2:cc:57:8e:02:56:b1:3e:04:a5:ad:95:05:1d:0f: b0:e9:12:4c:84:25:d2:0c:74:26:24:ca:af:af:1c:c0:76:dc: 53:15:a0:f3:db:5a:09:0c:6d:9b:22:fe:b6:7e:60:3b:4c:55: b1:91:03:f3:4c:2f:b7:18:cc:41:ea:ef:dc:c7:9f:f2:88:45: 36:1d:03:8d:b2:e7:e0:7d:02:74:55:12:0c:53:18:58:f0:73: ba:ff:b3:c7:d6:c3:e2:37:90:ac:2c:77:ff:e0:6c:7d:54:38: 2e:44:6b:5c:63:63:0f:91:3d:aa:37:88:16:74:d6:16:1e:e7: 7d:66:da:77:e8:b9:d0:f1:3a:7c:41:42:61:95:e1:8f:a8:4d: 03:3e:42:54:f6:61:71:d5:33:5b:b0:31:48:0c:64:c8:e7:61: f8:7e:c7:8e:9f:cf:d9:f3:ac:b3:fc:50:02:24:1a:5b:52:af: c9:f6:a1:29 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKYW3u2aMge/6EiEwAqDmJ8OCuP0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIy NkYxNDg3NDAeFw0yNjA1MTIwODU0MjlaFw0yNzA1MTEwODU5MjlaMDMxMTAvBgNV BAMTKDdDQ0M5NkYwRjkwQjlDQjZCOURBRDAwMkJGN0MyN0ZEMTQyQUFFNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiXZZ7Y57N6qFOiDQ5Fufzv/9 FzkOEtQdWD7aQeCkzIIfGMuOL9VerYf+INcva0foOyCzibdqoH9j9nnukOlqz8Qr 5vJ6YuEaI9BHfssC6+z+zLcrklRJo7zxpb4kfNyq0kE88oOVcpAUSG6mxcIMeuNo oFkbtMWZNhEpT/VCsp3aj2BDhMLaA9G6yzSNDzq5lCv9g6Y7GMqSN3agXRhmf0R5 zh7DYAEP9iQa168AiFW7Ic/pus2flgki7KuohiHsfX9Du+s2IjqEHrMYBz9hhV72 UBBWgrmYt9vIBTYujG5xRjxV0oeZIW/zs0ju7BdhzFv8JLy/5G5dE7QUG87vAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUfMyW8PkLnLa52tACv3wn/RQqrkgwHwYDVR0j BBgwFoAUQNhnJtsU+eXgZhCSj/bHcibxSHQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTEw NjUwMzE1NTY2MDYxOTc5My8wLzQwRDg2NzI2REIxNEY5RTVFMDY2MTA5MjhGRjZD NzcyMjZGMTQ4NzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNDBEODY3MjZEQjE0RjlFNUUwNjYxMDkyOEZGNkM3NzIyNkYxNDg3NC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTEwNjUwMzE1NTY2MDYxOTc5My8wLzM0MzMyZTMyMzIz NzJlMzEzNDMwMmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM2MzEzNC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivjjDANBgkqhkiG9w0BAQsFAAOCAQEAM9X9LgMYj5/nFH4h+b+ljjYk t8OTEWWQ0Ql8xniePPsSaCk9NRjAF0JxIAeaVzKl4Gk8l0yfzAUN8NJ/X483x4Y+ +qYK3kA8uEwZ8sxXjgJWsT4Epa2VBR0PsOkSTIQl0gx0JiTKr68cwHbcUxWg89ta CQxtmyL+tn5gO0xVsZED80wvtxjMQerv3Mef8ohFNh0DjbLn4H0CdFUSDFMYWPBz uv+zx9bD4jeQrCx3/+BsfVQ4LkRrXGNjD5E9qjeIFnTWFh7nfWbad+i50PE6fEFC YZXhj6hNAz5CVPZhcdUzW7AxSAxkyOdh+H7Hjp/P2fOss/xQAiQaW1KvyfahKQ== -----END CERTIFICATE-----Generated at Wed May 13 14:40:08 2026 by rpki-client