$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3233362e302f32322d3234203d3e203233363530.roa File: 34332e3233302e3233362e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: ky0oESQeYnsxj2GWXbC4MoD0tQpWhDFt/hoReLhOr5M= Subject key identifier: 85:0F:0F:C6:0E:27:32:EE:5E:1F:B2:C7:65:11:65:B4:6F:CC:D0:A2 Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 2CB2242CAF41B4A3BE35BF9F3C6C59629FE31F7A Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3233362e302f32322d3234203d3e203233363530.roa Signing time: Mon 15 Jun 2026 09:19:57 +0000 ROA not before: Mon 15 Jun 2026 09:14:57 +0000 ROA not after: Mon 14 Jun 2027 09:19:57 +0000 asID: 23650 IP address blocks: 43.230.236.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:b2:24:2c:af:41:b4:a3:be:35:bf:9f:3c:6c:59:62:9f:e3:1f:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Jun 15 09:14:57 2026 GMT Not After : Jun 14 09:19:57 2027 GMT Subject: CN=850F0FC60E2732EE5E1FB2C7651165B46FCCD0A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:65:c9:c7:7b:43:cd:71:ba:78:3b:92:c0: f4:ac:e0:ea:b0:60:dc:62:13:18:13:24:d0:34:4d: 0a:c4:07:ce:eb:08:3f:67:22:0f:63:c7:06:7a:00: 54:ed:71:9b:23:b6:b5:70:0b:93:bd:15:8d:b3:ff: 4f:9e:5f:da:be:92:1a:e7:16:50:27:eb:c2:52:5a: fb:f9:31:2b:14:6b:51:15:5d:48:ec:44:ae:f1:33: 52:3a:35:0c:f9:52:b9:6c:60:0b:5c:ef:62:4f:d4: c4:88:3a:9f:f9:8f:97:16:85:21:fe:70:93:81:d7: 3c:35:ee:95:4a:e4:50:d9:e5:98:50:19:ec:28:12: d7:39:bb:1d:d3:cd:81:3c:6a:8a:5f:49:f9:05:97: ca:61:87:e9:e5:f3:b9:4c:2b:ed:de:bc:2c:a3:34: 67:b6:3c:82:55:a7:4a:a7:be:a7:bf:ab:e6:e7:e0: 0f:4c:45:47:a7:ac:b9:03:86:78:73:ed:50:36:00: c5:a5:b7:b2:30:ec:c7:2b:c7:d3:4c:04:8e:ee:28: 45:ef:1e:0e:c7:07:20:e8:e6:37:c7:99:65:fc:9c: 4d:ad:39:9a:a1:bb:2a:ae:7d:6f:25:ae:39:f3:32: a5:5f:b4:b0:12:87:74:c6:56:8f:eb:47:73:88:60: 4c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0F:0F:C6:0E:27:32:EE:5E:1F:B2:C7:65:11:65:B4:6F:CC:D0:A2 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233302e3233362e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.230.236.0/22 Signature Algorithm: sha256WithRSAEncryption a3:ce:ce:c1:4b:0f:a8:9f:9a:b1:79:e8:ac:6a:70:27:06:30: 85:cc:95:a1:f9:5c:aa:99:40:8e:56:e7:86:90:a9:3b:1f:0b: 35:d3:da:df:3f:e3:dd:27:5c:55:35:b0:f0:86:8c:ae:fd:cc: d1:e9:fb:a2:33:14:0f:31:79:f5:19:4d:86:9a:3e:d4:af:53: 07:16:a7:c4:59:a5:a8:59:4d:fb:c7:ae:c7:47:eb:9c:1a:7e: c3:d1:29:b0:2c:1e:dc:ba:cb:a4:df:1c:96:1a:39:2b:a1:17: 99:f3:98:4e:de:63:09:94:63:1c:ca:e5:dd:3b:66:72:02:9b: 7c:95:51:44:5f:db:28:67:69:c1:39:79:3e:c6:01:61:eb:35: 1f:a0:97:b1:d1:16:cb:07:c4:29:83:95:ae:d6:e1:1e:e4:33: ae:24:0d:12:a1:69:69:b3:e3:86:b1:8e:b6:27:0b:a0:de:27: 19:26:e2:0c:57:e5:f5:1e:3c:75:7e:d4:d5:78:1f:be:b0:5f: 78:c6:72:16:1a:fe:12:06:74:96:03:a7:6b:8f:ab:6a:40:4a: a7:6c:18:5e:97:ff:fe:0c:a2:da:40:e5:f4:08:6c:1d:0b:b1: f7:7b:a7:d7:24:91:25:6c:8b:97:96:65:c4:58:ef:ac:11:27: 40:7d:1a:55 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIULLIkLK9BtKO+Nb+fPGxZYp/jH3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA2MTUwOTE0NTdaFw0yNzA2MTQwOTE5NTdaMDMxMTAvBgNV BAMTKDg1MEYwRkM2MEUyNzMyRUU1RTFGQjJDNzY1MTE2NUI0NkZDQ0QwQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxzWXJx3tDzXG6eDuSwPSs4Oqw YNxiExgTJNA0TQrEB87rCD9nIg9jxwZ6AFTtcZsjtrVwC5O9FY2z/0+eX9q+khrn FlAn68JSWvv5MSsUa1EVXUjsRK7xM1I6NQz5UrlsYAtc72JP1MSIOp/5j5cWhSH+ cJOB1zw17pVK5FDZ5ZhQGewoEtc5ux3TzYE8aopfSfkFl8phh+nl87lMK+3evCyj NGe2PIJVp0qnvqe/q+bn4A9MRUenrLkDhnhz7VA2AMWlt7Iw7Mcrx9NMBI7uKEXv Hg7HByDo5jfHmWX8nE2tOZqhuyqufW8lrjnzMqVftLASh3TGVo/rR3OIYEznAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUhQ8Pxg4nMu5eH7LHZRFltG/M0KIwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzM0MzMyZTMyMzMz MDJlMzIzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivm7DANBgkqhkiG9w0BAQsFAAOCAQEAo87OwUsPqJ+asXnorGpwJwYw hcyVoflcqplAjlbnhpCpOx8LNdPa3z/j3SdcVTWw8IaMrv3M0en7ojMUDzF59RlN hpo+1K9TBxanxFmlqFlN+8eux0frnBp+w9EpsCwe3LrLpN8clho5K6EXmfOYTt5j CZRjHMrl3TtmcgKbfJVRRF/bKGdpwTl5PsYBYes1H6CXsdEWywfEKYOVrtbhHuQz riQNEqFpabPjhrGOticLoN4nGSbiDFfl9R48dX7U1XgfvrBfeMZyFhr+EgZ0lgOn a4+rakBKp2wYXpf//gyi2kDl9AhsHQux93un1ySRJWyLl5ZlxFjvrBEnQH0aVQ== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:55 2026 by rpki-client