$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3232382e302f32322d3234203d3e203233363530.roa File: 34332e3233302e3232382e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: S/o6RSJ8nIQQPznnCXCCSySWQrs3lHogPsaa2JKXfQc= Subject key identifier: B4:83:76:CE:6A:47:F3:70:A3:33:BD:81:96:A2:D6:86:89:BB:23:FF Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 089C2B5636BD34FDB5CE1067B7DF0CCDC4233BDE Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3232382e302f32322d3234203d3e203233363530.roa Signing time: Mon 15 Jun 2026 09:19:57 +0000 ROA not before: Mon 15 Jun 2026 09:14:57 +0000 ROA not after: Mon 14 Jun 2027 09:19:57 +0000 asID: 23650 IP address blocks: 43.230.228.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:9c:2b:56:36:bd:34:fd:b5:ce:10:67:b7:df:0c:cd:c4:23:3b:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Jun 15 09:14:57 2026 GMT Not After : Jun 14 09:19:57 2027 GMT Subject: CN=B48376CE6A47F370A333BD8196A2D68689BB23FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:ad:69:b3:9c:92:a0:ad:c6:82:fd:ed:2a: 52:76:5e:b7:29:ec:83:ee:4f:03:59:cb:a4:f1:01: c3:23:d2:2f:4c:6d:be:cf:3a:e9:1a:63:0b:46:52: 67:5b:cf:39:38:cb:15:fd:1f:57:e7:8a:c0:d9:11: db:2a:29:46:7e:e3:9f:ee:00:58:93:9b:47:67:b8: 19:99:e4:e3:7c:e1:4b:d9:41:08:52:df:e9:45:6a: b2:e3:9b:31:87:97:a1:f6:74:5f:6c:84:a0:fe:3f: 55:ee:ab:ab:27:9c:c1:0d:df:5b:28:ad:bd:fd:85: ce:68:53:e7:44:83:0f:6f:25:53:3e:d2:08:5a:98: d1:2b:ea:cc:2d:00:ef:86:f0:53:3c:38:83:2a:0d: d9:ed:87:03:95:8d:26:a6:8f:b8:3f:1a:12:28:03: b3:0f:2e:9a:79:3e:e7:8d:be:79:f5:1b:6c:09:73: 89:50:b0:04:23:ee:08:c6:46:1b:18:4a:b9:63:97: 13:b2:3e:e4:ed:9a:02:a6:17:60:7c:47:25:9a:0b: cc:86:9d:89:20:11:66:35:65:eb:60:58:21:aa:a9: d7:d2:11:60:d9:02:74:e7:79:f7:b9:f5:1f:85:04: 0b:d1:7d:35:06:a7:39:1d:52:aa:ef:2f:ff:b4:ac: 9a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:83:76:CE:6A:47:F3:70:A3:33:BD:81:96:A2:D6:86:89:BB:23:FF X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3232382e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.228.0/22 Signature Algorithm: sha256WithRSAEncryption 85:f0:ea:b8:32:c4:6c:a3:71:0a:2b:89:04:d8:52:94:b1:6c: b2:39:31:9e:b1:dc:ec:e1:18:00:ba:c9:33:1a:19:ed:28:f6: 73:fe:56:f4:3d:fe:6c:42:d9:87:35:c9:c6:ca:f0:75:59:a9: 23:66:4b:04:20:86:3b:de:28:84:7c:f8:00:0d:a7:0c:2c:98: 61:07:43:a4:bd:36:7a:dd:6d:74:4b:94:19:b1:03:86:b9:b9: 0f:83:45:89:2e:a2:54:ca:74:95:29:1f:f4:c6:0a:c2:96:03: 96:ee:03:d4:79:8d:bb:10:21:7b:18:8a:bc:77:65:a3:23:ce: 73:1a:65:6c:47:33:e4:0a:a9:c8:82:4e:71:bb:f3:3b:d3:0a: 03:b2:66:f2:5f:59:0a:8d:0f:39:f0:74:e2:3e:a9:a7:b7:c7: b4:f7:86:18:64:2a:38:c0:aa:34:d0:2b:46:06:45:64:40:1b: 85:52:a7:ad:12:30:44:21:46:03:25:71:5b:70:79:f2:1b:52: e3:0e:9f:b2:1e:5d:44:0a:59:51:93:50:77:b4:c3:c1:fe:ba: e1:25:4a:a2:ad:4a:79:e5:77:ea:7c:e7:ee:8c:28:15:88:73: ec:42:3d:33:9e:20:99:0a:c4:36:a0:3f:b5:d0:7c:d2:0c:d4: 34:33:cc:a7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCJwrVja9NP21zhBnt98MzcQjO94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA2MTUwOTE0NTdaFw0yNzA2MTQwOTE5NTdaMDMxMTAvBgNV BAMTKEI0ODM3NkNFNkE0N0YzNzBBMzMzQkQ4MTk2QTJENjg2ODlCQjIzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatK1ps5ySoK3Ggv3tKlJ2Xrcp 7IPuTwNZy6TxAcMj0i9Mbb7POukaYwtGUmdbzzk4yxX9H1fnisDZEdsqKUZ+45/u AFiTm0dnuBmZ5ON84UvZQQhS3+lFarLjmzGHl6H2dF9shKD+P1Xuq6snnMEN31so rb39hc5oU+dEgw9vJVM+0ghamNEr6swtAO+G8FM8OIMqDdnthwOVjSamj7g/GhIo A7MPLpp5PueNvnn1G2wJc4lQsAQj7gjGRhsYSrljlxOyPuTtmgKmF2B8RyWaC8yG nYkgEWY1ZetgWCGqqdfSEWDZAnTnefe59R+FBAvRfTUGpzkdUqrvL/+0rJqdAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUtIN2zmpH83CjM72BlqLWhom7I/8wHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzM0MzMyZTMyMzMz MDJlMzIzMjM4MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivm5DANBgkqhkiG9w0BAQsFAAOCAQEAhfDquDLEbKNxCiuJBNhSlLFs sjkxnrHc7OEYALrJMxoZ7Sj2c/5W9D3+bELZhzXJxsrwdVmpI2ZLBCCGO94ohHz4 AA2nDCyYYQdDpL02et1tdEuUGbEDhrm5D4NFiS6iVMp0lSkf9MYKwpYDlu4D1HmN uxAhexiKvHdloyPOcxplbEcz5AqpyIJOcbvzO9MKA7Jm8l9ZCo0POfB04j6pp7fH tPeGGGQqOMCqNNArRgZFZEAbhVKnrRIwRCFGAyVxW3B58htS4w6fsh5dRApZUZNQ d7TDwf664SVKoq1KeeV36nzn7owoFYhz7EI9M54gmQrENqA/tdB80gzUNDPMpw== -----END CERTIFICATE-----Generated at Wed Jul 22 03:33:12 2026 by rpki-client