$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3232342e302f32322d3234203d3e203233363530.roa File: 34332e3233302e3232342e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: x/rpYTrOUqlRihlgHRziWxbnhpFl1TN8oW8tI5bdxqg= Subject key identifier: 38:24:A4:BA:C1:6F:AA:DE:32:C2:53:10:45:EC:C2:B4:8F:22:64:79 Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 36A7E93A7BCA521084E79A1E6A043EADAAB713BC Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3232342e302f32322d3234203d3e203233363530.roa Signing time: Mon 15 Jun 2026 09:19:57 +0000 ROA not before: Mon 15 Jun 2026 09:14:57 +0000 ROA not after: Mon 14 Jun 2027 09:19:57 +0000 asID: 23650 IP address blocks: 43.230.224.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:a7:e9:3a:7b:ca:52:10:84:e7:9a:1e:6a:04:3e:ad:aa:b7:13:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Jun 15 09:14:57 2026 GMT Not After : Jun 14 09:19:57 2027 GMT Subject: CN=3824A4BAC16FAADE32C2531045ECC2B48F226479 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:77:b3:61:ee:0b:84:f2:0a:74:8e:6d:79:36: ba:50:d6:82:3b:65:ad:89:93:75:e2:cb:e6:e4:4c: b6:16:18:8e:86:37:8b:63:05:73:2e:cd:71:81:45: c3:c2:50:0b:61:5b:cc:53:96:14:49:17:50:4c:30: ab:96:b0:45:41:cf:d1:22:f0:b0:56:82:cb:72:fd: 4d:d4:13:67:ab:18:91:8f:f7:89:d4:8d:e3:97:e9: c4:e1:15:34:4d:1d:88:bf:07:36:7e:24:76:7f:ac: ec:c6:21:9d:62:8f:2a:1f:b9:a5:4d:29:df:b4:7d: a2:46:1a:34:5a:dd:c0:ee:a4:62:b1:97:30:94:d2: 4a:9e:32:27:48:1e:4c:54:59:20:04:b5:82:20:06: e6:4f:2d:d5:df:0b:6c:66:30:d4:76:bb:3b:14:ec: b1:e1:45:58:dc:af:c8:a4:b7:7d:da:62:5d:69:5d: 08:9a:4d:69:df:f2:48:8b:55:3e:38:6c:c8:4d:cd: d2:17:2d:d8:c7:cb:5f:0f:0f:d6:8c:7e:59:ce:0c: e0:d0:e6:d0:26:c6:8f:ee:35:b9:62:32:87:71:9d: a5:f3:85:42:57:c9:f9:f2:fc:e9:03:e0:0a:32:8a: fc:3c:86:9d:23:f2:1b:36:8c:69:c3:23:29:72:b1: 23:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:24:A4:BA:C1:6F:AA:DE:32:C2:53:10:45:EC:C2:B4:8F:22:64:79 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3232342e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.224.0/22 Signature Algorithm: sha256WithRSAEncryption 68:46:92:ad:63:b2:11:7a:4e:5e:e8:b0:b8:91:f5:e3:01:04: f3:f9:85:c6:51:a0:0c:7b:54:23:5c:30:d1:69:36:9a:71:4f: a7:a8:fa:60:4a:7c:0c:7c:8d:d8:ea:1d:fd:1a:3c:e1:7a:22: 72:14:05:e3:b3:eb:99:f5:d3:15:2c:da:c0:98:23:2e:25:02: aa:24:10:d3:d1:ee:38:b7:4f:fd:3e:ba:0f:7e:d1:eb:28:4f: b2:74:b5:76:24:55:a4:13:a3:3c:7e:44:6d:75:a9:bf:56:6c: fb:77:62:5d:a4:70:87:4b:8d:a7:a1:ac:c3:2e:7d:91:1b:7a: c6:e0:8c:a3:01:78:c4:7b:d0:f9:54:82:9b:5a:81:d6:0e:0e: df:85:56:ca:54:03:7d:d5:c8:1e:80:2a:4d:b1:87:74:40:dc: 3a:40:cb:72:b9:3d:84:86:f5:3e:fd:d8:92:71:de:69:3a:fa: 03:9b:b6:55:2e:71:fd:9a:a0:17:72:1e:a5:68:1a:1a:35:b0: 0d:77:70:68:57:86:34:7b:f4:de:37:2e:ce:96:95:81:84:e5: 51:3e:35:83:e3:4e:a1:4f:ae:3a:c3:0b:c3:c8:dd:c9:bf:f4: 84:44:d7:b2:b5:1b:ab:4f:b0:41:31:53:25:db:26:76:6c:ea: 95:2f:c0:83 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUNqfpOnvKUhCE55oeagQ+raq3E7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA2MTUwOTE0NTdaFw0yNzA2MTQwOTE5NTdaMDMxMTAvBgNV BAMTKDM4MjRBNEJBQzE2RkFBREUzMkMyNTMxMDQ1RUNDMkI0OEYyMjY0NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSd7Nh7guE8gp0jm15NrpQ1oI7 Za2Jk3Xiy+bkTLYWGI6GN4tjBXMuzXGBRcPCUAthW8xTlhRJF1BMMKuWsEVBz9Ei 8LBWgsty/U3UE2erGJGP94nUjeOX6cThFTRNHYi/BzZ+JHZ/rOzGIZ1ijyofuaVN Kd+0faJGGjRa3cDupGKxlzCU0kqeMidIHkxUWSAEtYIgBuZPLdXfC2xmMNR2uzsU 7LHhRVjcr8ikt33aYl1pXQiaTWnf8kiLVT44bMhNzdIXLdjHy18PD9aMflnODODQ 5tAmxo/uNbliModxnaXzhUJXyfny/OkD4Aoyivw8hp0j8hs2jGnDIylysSMhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOCSkusFvqt4ywlMQRezCtI8iZHkwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzM0MzMyZTMyMzMz MDJlMzIzMjM0MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivm4DANBgkqhkiG9w0BAQsFAAOCAQEAaEaSrWOyEXpOXuiwuJH14wEE 8/mFxlGgDHtUI1ww0Wk2mnFPp6j6YEp8DHyN2Ood/Ro84XoichQF47PrmfXTFSza wJgjLiUCqiQQ09HuOLdP/T66D37R6yhPsnS1diRVpBOjPH5EbXWpv1Zs+3diXaRw h0uNp6Gswy59kRt6xuCMowF4xHvQ+VSCm1qB1g4O34VWylQDfdXIHoAqTbGHdEDc OkDLcrk9hIb1Pv3YknHeaTr6A5u2VS5x/ZqgF3IepWgaGjWwDXdwaFeGNHv03jcu zpaVgYTlUT41g+NOoU+uOsMLw8jdyb/0hETXsrUbq0+wQTFTJdsmdmzqlS/Agw== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:55 2026 by rpki-client