$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233312e3133362e302f32322d3234203d3e203233363530.roa File: 34332e3233312e3133362e302f32322d3234203d3e203233363530.roa (raw, json) Hash identifier: ICViG4/qkZPs9MGuW+IKw2mNlpug7dWBW5MBGS4d/gk= Subject key identifier: FC:FC:31:82:DB:47:9E:7D:46:C6:4F:5C:4C:59:30:E4:F2:37:D0:C7 Certificate issuer: /CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Certificate serial: 39C72AD7CF0D983DDD1D8B1B9ECD8B3948DBBF9F Authority key identifier: D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233312e3133362e302f32322d3234203d3e203233363530.roa Signing time: Mon 15 Jun 2026 09:19:57 +0000 ROA not before: Mon 15 Jun 2026 09:14:57 +0000 ROA not after: Mon 14 Jun 2027 09:19:57 +0000 asID: 23650 IP address blocks: 43.231.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 22:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:c7:2a:d7:cf:0d:98:3d:dd:1d:8b:1b:9e:cd:8b:39:48:db:bf:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1358E96A5278AC218AFB718E2A1BBEF54B9149D Validity Not Before: Jun 15 09:14:57 2026 GMT Not After : Jun 14 09:19:57 2027 GMT Subject: CN=FCFC3182DB479E7D46C64F5C4C5930E4F237D0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:33:f1:d7:09:cc:61:4f:16:ba:3c:6e:df:17: 8f:2d:d1:87:ec:83:6d:ad:07:62:b7:08:bf:74:14: fa:66:ad:54:8c:11:ef:81:41:38:66:61:58:ef:0c: b3:80:13:e6:01:3c:06:b3:b5:04:7c:48:07:31:5c: 78:2c:1c:68:8b:91:c1:1a:78:ee:27:d3:39:b3:e7: e8:d9:08:14:b6:a3:b3:f4:ae:af:d2:e0:3e:7d:3a: 35:ec:04:69:5f:01:18:ce:ec:bf:92:a8:d5:6c:2d: 55:b8:2e:83:fb:50:9d:b5:19:16:8d:86:0f:ab:ab: cc:86:fb:a6:6b:43:5e:50:e1:48:e6:b0:ff:92:81: 7e:6c:60:72:d5:6d:af:76:e1:1c:70:6f:0d:b2:b3: c5:33:65:cc:58:7c:e5:8e:fa:4a:4a:92:13:85:37: 75:40:04:22:5e:64:5d:35:94:9a:42:e6:41:1f:b0: 28:02:f6:eb:f4:71:01:83:64:74:c1:d2:68:03:cb: 72:0a:3c:bc:b1:1c:ed:0c:5c:08:20:5b:09:e6:a3: a7:39:fa:5c:c0:6a:c3:bd:f3:60:46:b9:85:44:c8: 8f:ee:a6:60:75:b7:6b:69:20:ab:eb:71:47:e2:0e: ed:87:35:ae:b8:4a:37:11:71:e7:d5:6b:8a:73:4a: b1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:FC:31:82:DB:47:9E:7D:46:C6:4F:5C:4C:59:30:E4:F2:37:D0:C7 X509v3 Authority Key Identifier: keyid:D1:35:8E:96:A5:27:8A:C2:18:AF:B7:18:E2:A1:BB:EF:54:B9:14:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/D1358E96A5278AC218AFB718E2A1BBEF54B9149D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096251215517384705/0/34332e3233312e3133362e302f32322d3234203d3e203233363530.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.231.136.0/22 Signature Algorithm: sha256WithRSAEncryption 3f:66:e5:6c:23:9a:e7:5d:ac:3b:51:21:53:0b:06:a0:b4:01: f0:86:64:03:4d:c7:55:52:26:1b:af:96:2e:d8:ad:d6:c2:c8: eb:30:c9:71:a1:c2:d2:eb:14:0e:e0:83:71:44:5d:d2:26:e4: 58:28:aa:3a:5b:97:27:4d:6a:72:0f:65:a6:7c:00:d2:6d:f2: 1c:fb:09:a5:da:5c:ae:7e:48:74:b6:ab:5c:85:82:bb:22:4c: 78:26:21:ec:8e:70:4d:52:72:77:c8:9d:d3:ab:aa:39:d5:f4: ff:5b:af:c0:14:83:c8:4f:a5:c8:c2:9a:5b:e7:2b:39:20:03: 25:49:b5:64:e6:4d:94:50:b0:e5:91:a0:b6:cc:76:00:3d:de: 0d:ac:b2:9a:c1:9f:7b:12:96:0e:98:08:1c:09:09:a7:fb:d9: b7:a6:23:2c:4e:24:c8:c6:21:8f:57:98:fc:67:70:5f:ec:ce: 90:76:ea:6e:e6:bb:ce:6b:1f:fb:c0:0a:06:4f:47:c3:fa:8c: 69:6b:f7:52:1d:2f:8b:ad:d2:5e:2f:0f:62:eb:a4:a5:6b:35: d0:e7:af:11:6e:dc:98:a2:6a:4d:d7:d0:bb:c4:55:a9:cd:cf: 8d:cd:83:f4:a5:9f:55:17:f8:9e:1d:d3:63:ee:dc:14:d8:5f: 23:9e:92:61 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUOccq188NmD3dHYsbns2LOUjbv58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1 NEI5MTQ5RDAeFw0yNjA2MTUwOTE0NTdaFw0yNzA2MTQwOTE5NTdaMDMxMTAvBgNV BAMTKEZDRkMzMTgyREI0NzlFN0Q0NkM2NEY1QzRDNTkzMEU0RjIzN0QwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgM/HXCcxhTxa6PG7fF48t0Yfs g22tB2K3CL90FPpmrVSMEe+BQThmYVjvDLOAE+YBPAaztQR8SAcxXHgsHGiLkcEa eO4n0zmz5+jZCBS2o7P0rq/S4D59OjXsBGlfARjO7L+SqNVsLVW4LoP7UJ21GRaN hg+rq8yG+6ZrQ15Q4UjmsP+SgX5sYHLVba924Rxwbw2ys8UzZcxYfOWO+kpKkhOF N3VABCJeZF01lJpC5kEfsCgC9uv0cQGDZHTB0mgDy3IKPLyxHO0MXAggWwnmo6c5 +lzAasO982BGuYVEyI/upmB1t2tpIKvrcUfiDu2HNa64SjcRcefVa4pzSrGLAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU/PwxgttHnn1Gxk9cTFkw5PI30McwHwYDVR0j BBgwFoAU0TWOlqUnisIYr7cY4qG771S5FJ0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjI1MTIxNTUxNzM4NDcwNS8wL0QxMzU4RTk2QTUyNzhBQzIxOEFGQjcxOEUyQTFC QkVGNTRCOTE0OUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRDEzNThFOTZBNTI3OEFDMjE4QUZCNzE4RTJBMUJCRUY1NEI5MTQ5RC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjI1MTIxNTUxNzM4NDcwNS8wLzM0MzMyZTMyMzMz MTJlMzEzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzMzM2MzUzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivniDANBgkqhkiG9w0BAQsFAAOCAQEAP2blbCOa512sO1EhUwsGoLQB 8IZkA03HVVImG6+WLtit1sLI6zDJcaHC0usUDuCDcURd0ibkWCiqOluXJ01qcg9l pnwA0m3yHPsJpdpcrn5IdLarXIWCuyJMeCYh7I5wTVJyd8id06uqOdX0/1uvwBSD yE+lyMKaW+crOSADJUm1ZOZNlFCw5ZGgtsx2AD3eDayymsGfexKWDpgIHAkJp/vZ t6YjLE4kyMYhj1eY/GdwX+zOkHbqbua7zmsf+8AKBk9Hw/qMaWv3Uh0vi63SXi8P YuukpWs10OevEW7cmKJqTdfQu8RVqc3Pjc2D9KWfVRf4nh3TY+7cFNhfI56SYQ== -----END CERTIFICATE-----Generated at Wed Jul 22 03:32:55 2026 by rpki-client