$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3233322e302f32322d3234203d3e203233363530.roa File: 34332e3233302e3233322e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: 0TfLvOPV3PFb51ksxIyyS/hJKVjtx7BMptSRRpxN1uY= Subject key identifier: 38:CC:F3:FD:E1:33:B1:B7:2F:00:A6:C0:34:DE:B3:70:F3:98:6E:53 Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 5CA388D558F1D4F59C99911A5CE27A8C53CF7791 Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3233322e302f32322d3234203d3e203233363530.roa Signing time: Mon 15 Jun 2026 09:19:57 +0000 ROA not before: Mon 15 Jun 2026 09:14:57 +0000 ROA not after: Mon 14 Jun 2027 09:19:57 +0000 asID: 23650 IP address blocks: 43.230.232.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:a3:88:d5:58:f1:d4:f5:9c:99:91:1a:5c:e2:7a:8c:53:cf:77:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Jun 15 09:14:57 2026 GMT Not After : Jun 14 09:19:57 2027 GMT Subject: CN=38CCF3FDE133B1B72F00A6C034DEB370F3986E53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:29:2e:b3:f9:7d:61:f0:65:f1:49:f9:55:e5: fe:3f:68:f6:f7:2c:8b:93:01:27:5a:41:d0:09:dd: ab:60:3e:b8:0f:bb:60:f6:45:51:2e:8a:84:f4:14: c3:c1:bc:31:ec:89:de:fd:77:9a:57:ad:bd:aa:c3: fb:a9:91:9c:3c:22:d5:6d:6a:ea:3d:c6:c7:2a:4b: 12:e1:f4:d4:91:4e:c2:03:1e:7b:dc:a5:75:33:e6: 63:3f:5c:db:0f:be:3f:c4:0b:f9:c8:a8:b9:5b:20: 36:20:71:b6:49:e4:63:1f:95:a1:b1:72:c4:04:59: a7:53:e7:2d:11:b7:16:7e:8f:35:0f:fb:bb:c2:3f: ff:3d:de:5c:0f:61:ca:0c:72:e2:03:4c:dc:1f:a7: 36:30:e6:52:46:41:ce:92:4c:f5:67:7b:f4:d5:5f: 25:bc:90:33:47:db:cd:da:23:e7:fd:33:09:66:2f: a7:83:18:be:22:64:52:c5:7e:2d:8b:5d:88:d7:de: 02:68:a5:8d:20:c0:08:5c:c9:c9:29:7f:1f:d1:c0: 9a:f5:3f:57:03:03:24:ea:1d:4c:74:d0:e7:45:b5: b2:23:e9:05:25:2a:fc:fb:a8:70:c5:34:b4:62:e5: 6f:2c:8d:0e:2d:55:89:81:32:5f:b2:ea:63:cc:26: 92:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:CC:F3:FD:E1:33:B1:B7:2F:00:A6:C0:34:DE:B3:70:F3:98:6E:53 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3233322e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.232.0/22 Signature Algorithm: sha256WithRSAEncryption 11:d2:49:e2:1f:6a:cb:d4:38:3d:4c:bf:63:7c:f9:79:31:fa: 8b:f3:a8:1b:e7:e8:0b:bb:27:67:81:55:73:1f:4f:34:da:f9: dc:4d:83:ee:d8:61:0c:07:69:fb:18:9c:fe:40:f4:26:b4:1e: 4b:29:b8:b4:2e:77:6c:b9:6c:91:95:e6:c7:c0:cb:75:cd:8c: bb:ea:3a:c9:c0:4e:90:07:d7:c3:91:7b:9d:db:a9:a2:eb:a0: d5:fa:80:90:5b:95:27:2b:09:fd:3f:21:f3:0f:51:40:60:f1: d3:9f:21:5e:98:c2:22:13:a4:24:9c:e2:ad:54:1e:d9:cc:ab: dc:02:f7:8a:59:cc:63:db:c4:e1:12:3a:a9:7f:aa:13:10:0b: 05:bd:85:2f:6d:6e:83:ff:86:c1:b0:ca:a3:9c:f0:5e:69:79: 9d:72:99:84:32:17:a8:fb:e3:5c:36:fd:20:a8:f4:54:67:87: 64:d6:01:a1:e8:7a:d0:75:09:8a:a5:2f:71:81:30:93:43:ac: e9:50:6b:97:ab:e0:21:8c:5e:04:8a:a9:ac:8c:19:5f:f6:01: da:d1:ae:0b:e1:2c:9d:79:b9:b9:53:60:1d:74:a6:49:0a:12: 81:b3:32:2f:f2:99:fc:bc:a5:74:d6:44:21:8c:b1:00:97:c8: 5f:75:17:f1 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUXKOI1Vjx1PWcmZEaXOJ6jFPPd5EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA2MTUwOTE0NTdaFw0yNzA2MTQwOTE5NTdaMDMxMTAvBgNV BAMTKDM4Q0NGM0ZERTEzM0IxQjcyRjAwQTZDMDM0REVCMzcwRjM5ODZFNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGKS6z+X1h8GXxSflV5f4/aPb3 LIuTASdaQdAJ3atgPrgPu2D2RVEuioT0FMPBvDHsid79d5pXrb2qw/upkZw8ItVt auo9xscqSxLh9NSRTsIDHnvcpXUz5mM/XNsPvj/EC/nIqLlbIDYgcbZJ5GMflaGx csQEWadT5y0RtxZ+jzUP+7vCP/893lwPYcoMcuIDTNwfpzYw5lJGQc6STPVne/TV XyW8kDNH283aI+f9MwlmL6eDGL4iZFLFfi2LXYjX3gJopY0gwAhcyckpfx/RwJr1 P1cDAyTqHUx00OdFtbIj6QUlKvz7qHDFNLRi5W8sjQ4tVYmBMl+y6mPMJpJ1AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUOMzz/eEzsbcvAKbANN6zcPOYblMwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzM0MzMyZTMyMzMz MDJlMzIzMzMyMmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivm6DANBgkqhkiG9w0BAQsFAAOCAQEAEdJJ4h9qy9Q4PUy/Y3z5eTH6 i/OoG+foC7snZ4FVcx9PNNr53E2D7thhDAdp+xic/kD0JrQeSym4tC53bLlskZXm x8DLdc2Mu+o6ycBOkAfXw5F7ndupouug1fqAkFuVJysJ/T8h8w9RQGDx058hXpjC IhOkJJzirVQe2cyr3AL3ilnMY9vE4RI6qX+qExALBb2FL21ug/+GwbDKo5zwXml5 nXKZhDIXqPvjXDb9IKj0VGeHZNYBoeh60HUJiqUvcYEwk0Os6VBrl6vgIYxeBIqp rIwZX/YB2tGuC+EsnXm5uVNgHXSmSQoSgbMyL/KZ/LyldNZEIYyxAJfIX3UX8Q== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:55 2026 by rpki-client