$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3232382e302f32322d3232203d3e20313336393538.roa File: 34332e3235352e3232382e302f32322d3232203d3e20313336393538.roa (raw, json) Hash identifier: yN7g2ljeI/Mw/iTnlxgZ+5yk6cpw0rkDvekA71JTxBc= Subject key identifier: BD:FA:D9:83:61:2B:A6:C1:72:CF:0B:8F:5D:5B:09:23:B7:EA:D8:D9 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 6A1016D330B12318511F30793CB3C1F0209753E4 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3232382e302f32322d3232203d3e20313336393538.roa Signing time: Thu 14 May 2026 03:59:24 +0000 ROA not before: Thu 14 May 2026 03:54:24 +0000 ROA not after: Thu 13 May 2027 03:59:24 +0000 asID: 136958 IP address blocks: 43.255.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 11:36:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:10:16:d3:30:b1:23:18:51:1f:30:79:3c:b3:c1:f0:20:97:53:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: May 14 03:54:24 2026 GMT Not After : May 13 03:59:24 2027 GMT Subject: CN=BDFAD983612BA6C172CF0B8F5D5B0923B7EAD8D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:a4:c2:66:08:d0:da:43:78:3b:82:75:a2: 69:b1:43:c3:a1:fc:f5:14:09:d9:df:3b:4f:84:5e: ea:c1:de:4c:43:1c:21:d7:b7:18:c3:f9:40:6b:fe: 48:81:0c:76:43:b3:14:1f:59:e9:e8:da:7f:b8:cf: 3b:2c:2e:f1:90:ed:8f:90:83:cd:90:83:af:28:27: 1f:f1:0b:9a:27:9f:33:bf:4a:b2:75:52:34:84:a1: ce:bc:ab:74:d5:e4:e7:06:e7:1d:c3:c5:b5:28:7e: 34:e2:b9:23:3a:cd:82:5e:ca:fd:26:3e:91:07:a4: 4d:07:1c:0c:f5:bf:fb:ed:1d:75:70:f7:91:74:c9: bf:ac:99:f6:34:3b:86:4c:ea:a6:17:ba:ca:67:91: a7:48:2d:14:0d:3b:05:1e:b3:48:53:48:48:6a:ec: 50:98:20:d8:96:b7:55:a2:5c:97:64:ef:51:d2:46: 0d:d1:7c:7c:1f:a5:8f:2f:5d:f6:05:df:64:1b:27: eb:b4:e1:09:9a:4c:a5:c5:9f:df:ca:15:dc:dc:80: 4e:0f:40:21:9c:3d:fe:b6:b7:c8:8d:62:b3:24:ee: c9:ba:6d:c2:e9:fe:a5:c2:f3:19:8a:2b:f8:8e:1f: eb:d8:06:48:fd:41:95:6b:76:6f:e3:ac:dc:ea:72: c3:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:FA:D9:83:61:2B:A6:C1:72:CF:0B:8F:5D:5B:09:23:B7:EA:D8:D9 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3232382e302f32322d3232203d3e20313336393538.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.228.0/22 Signature Algorithm: sha256WithRSAEncryption 44:d4:0d:79:4c:7c:71:79:59:06:83:6e:bb:8a:c3:ee:99:cd: d9:12:b3:77:dc:d4:de:fd:f9:06:be:3d:33:e4:73:d9:84:36: 95:92:32:6a:61:47:bc:97:82:37:62:80:91:fc:20:9a:1a:ea: 37:a3:bf:03:75:1e:06:86:86:05:9a:b9:ec:94:38:46:b6:97: 57:31:c8:e4:e3:07:fd:59:e2:d3:b8:8c:83:87:69:90:01:63: ae:77:34:f0:76:44:5b:26:43:66:e3:7b:c7:cc:96:4c:02:56: 1f:e2:bf:d3:c2:55:ad:63:42:1e:f8:66:3b:57:55:35:be:27: b4:9f:c9:6d:b8:47:06:51:8f:4f:c9:3f:74:56:d0:e0:34:f6: ce:0e:29:f9:f6:f7:56:da:db:2f:ac:b3:d2:cd:c4:0d:0d:4c: 71:67:31:11:2c:e5:ae:b5:de:d0:0a:ec:5d:2f:a8:e4:4a:c1: b8:5b:95:ba:8b:1a:21:8f:bc:01:42:59:00:a1:0c:06:1b:90: 71:08:fc:10:c9:9a:6c:06:37:c0:e3:81:61:e8:7a:b4:54:98: fa:3b:24:2e:e4:df:02:dc:bc:d3:98:6c:94:c5:bb:50:b3:8c: 14:14:9c:54:0a:75:e4:df:d8:d2:b8:3b:20:ab:7d:d8:8f:3a: a1:94:e8:70 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUahAW0zCxIxhRHzB5PLPB8CCXU+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA1MTQwMzU0MjRaFw0yNzA1MTMwMzU5MjRaMDMxMTAvBgNV BAMTKEJERkFEOTgzNjEyQkE2QzE3MkNGMEI4RjVENUIwOTIzQjdFQUQ4RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7b6TCZgjQ2kN4O4J1ommxQ8Oh /PUUCdnfO0+EXurB3kxDHCHXtxjD+UBr/kiBDHZDsxQfWeno2n+4zzssLvGQ7Y+Q g82Qg68oJx/xC5onnzO/SrJ1UjSEoc68q3TV5OcG5x3DxbUofjTiuSM6zYJeyv0m PpEHpE0HHAz1v/vtHXVw95F0yb+smfY0O4ZM6qYXuspnkadILRQNOwUes0hTSEhq 7FCYINiWt1WiXJdk71HSRg3RfHwfpY8vXfYF32QbJ+u04QmaTKXFn9/KFdzcgE4P QCGcPf62t8iNYrMk7sm6bcLp/qXC8xmKK/iOH+vYBkj9QZVrdm/jrNzqcsMlAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUvfrZg2ErpsFyzwuPXVsJI7fq2NkwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwNjU1Nzk1MzQzOTQ3MjAyNTkvMC8zNDMzMmUzMjM1 MzUyZTMyMzIzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzMzNjM5MzUzOC5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEAiv/5DANBgkqhkiG9w0BAQsFAAOCAQEARNQNeUx8cXlZBoNuu4rD 7pnN2RKzd9zU3v35Br49M+Rz2YQ2lZIyamFHvJeCN2KAkfwgmhrqN6O/A3UeBoaG BZq57JQ4RraXVzHI5OMH/Vni07iMg4dpkAFjrnc08HZEWyZDZuN7x8yWTAJWH+K/ 08JVrWNCHvhmO1dVNb4ntJ/JbbhHBlGPT8k/dFbQ4DT2zg4p+fb3VtrbL6yz0s3E DQ1McWcxESzlrrXe0ArsXS+o5ErBuFuVuosaIY+8AUJZAKEMBhuQcQj8EMmabAY3 wOOBYeh6tFSY+jskLuTfAty805hslMW7ULOMFBScVAp15N/Y0rg7IKt92I86oZTo cA== -----END CERTIFICATE-----Generated at Fri May 29 22:58:16 2026 by rpki-client