$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3233302e302f32342d3234203d3e203536303430.roa File: 34332e3235352e3233302e302f32342d3234203d3e203536303430.roa (raw, json) Hash identifier: piDS41+M6bXi2T8VAJtQQ1vZdFakKCc8DOoH2xJV4j8= Subject key identifier: EC:D3:FF:29:C1:D6:81:16:1E:B0:13:89:92:44:7D:93:ED:B2:9A:39 Certificate issuer: /CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Certificate serial: 2A458B20C74262522792A012CB8337ED704EB879 Authority key identifier: 2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3233302e302f32342d3234203d3e203536303430.roa Signing time: Mon 13 Apr 2026 02:27:53 +0000 ROA not before: Mon 13 Apr 2026 02:22:53 +0000 ROA not after: Mon 12 Apr 2027 02:27:53 +0000 asID: 56040 IP address blocks: 43.255.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 09:53:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:45:8b:20:c7:42:62:52:27:92:a0:12:cb:83:37:ed:70:4e:b8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A Validity Not Before: Apr 13 02:22:53 2026 GMT Not After : Apr 12 02:27:53 2027 GMT Subject: CN=ECD3FF29C1D681161EB0138992447D93EDB29A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:c8:9c:75:17:8c:a7:b1:fb:e1:85:a1:9b: 60:bd:74:13:58:9b:c8:98:03:7c:a8:f5:07:ba:12: 72:c9:bd:31:4a:aa:6a:dd:a6:76:2f:59:80:16:9a: a6:d4:17:c1:a2:1f:d6:41:b7:9c:15:d7:ab:3a:75: 2c:88:9f:a1:ea:a5:5e:e5:24:ae:5e:92:28:cf:6f: f6:95:67:52:61:97:17:5a:db:27:1c:1b:b3:8a:19: d9:05:e8:91:90:3d:b7:eb:ca:4c:7f:71:19:0a:6a: dd:51:ab:43:bb:88:58:b4:a6:eb:a7:c0:6f:57:4a: 91:8b:2c:f0:be:10:f3:00:7e:23:5c:c2:31:2e:c5: 8f:44:1b:88:85:ff:6e:0d:e6:f5:b6:63:06:59:2d: 70:86:71:c0:61:97:7e:84:d7:9d:2c:be:c2:4d:53: d0:00:76:a0:5e:5a:0b:b6:83:ba:ce:74:8a:a3:a3: 32:b2:09:a0:27:cf:37:0d:bc:66:f1:aa:71:58:32: 9f:b6:fb:b6:5e:f5:54:d6:04:4f:44:ff:3d:bf:06: bc:b8:cf:be:28:81:4e:62:f9:bc:a3:69:fb:df:e0: fe:49:3c:26:07:b2:7d:0d:8d:f4:d0:2d:92:fd:a6: 87:fd:2a:2a:77:f6:c0:a7:3e:61:ff:31:ac:71:d4: b0:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:D3:FF:29:C1:D6:81:16:1E:B0:13:89:92:44:7D:93:ED:B2:9A:39 X509v3 Authority Key Identifier: keyid:2D:0B:C1:65:5D:17:A3:AB:09:C9:1E:43:A3:2D:E8:D8:AB:21:35:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/2D0BC1655D17A3AB09C91E43A32DE8D8AB21351A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065579534394720259/0/34332e3235352e3233302e302f32342d3234203d3e203536303430.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.230.0/24 Signature Algorithm: sha256WithRSAEncryption 41:ea:80:8e:4b:0e:62:bf:70:92:f2:30:35:7b:0f:71:eb:e9: cc:ee:eb:89:56:61:b8:67:3c:7b:6a:50:0f:50:bf:3a:b7:0f: 23:d9:bb:f8:24:7d:23:dd:f4:b1:5c:94:d0:1e:46:03:ce:96: 87:bc:1a:3f:78:9c:66:43:67:81:50:c8:db:90:ce:3c:39:40: 3e:6b:77:ce:94:91:97:a6:58:d3:32:be:7f:22:66:b4:7a:d1: 2d:1c:2f:be:34:b1:28:8a:cf:9a:2a:6c:67:8f:72:db:2e:81: cf:65:b2:13:7c:cd:2b:97:9a:31:0d:35:e3:f8:fb:69:3b:6f: fc:f7:62:96:1f:4f:82:28:b7:fa:e1:f0:7c:4b:da:97:02:ba: bc:b2:fd:36:cb:0e:86:5a:d3:c5:82:7d:ab:86:8e:20:2e:a5: ac:90:78:41:c8:cd:5f:b5:64:e0:18:4c:8b:80:ba:28:d6:c7: 59:c8:80:9f:f3:cb:a7:28:f8:60:36:ae:45:8f:83:0d:b3:bb: c0:c8:89:64:c2:62:3c:90:1d:e2:07:03:67:1e:5e:df:b1:e5: a9:16:f0:f8:3a:6c:40:c2:6e:38:2b:31:12:00:22:1e:99:dc: 3c:23:f8:93:ec:cd:e4:75:e7:51:7b:71:52:95:e5:45:d6:18: a0:19:50:5a -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUKkWLIMdCYlInkqASy4M37XBOuHkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhB QjIxMzUxQTAeFw0yNjA0MTMwMjIyNTNaFw0yNzA0MTIwMjI3NTNaMDMxMTAvBgNV BAMTKEVDRDNGRjI5QzFENjgxMTYxRUIwMTM4OTkyNDQ3RDkzRURCMjlBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFG8icdReMp7H74YWhm2C9dBNY m8iYA3yo9Qe6EnLJvTFKqmrdpnYvWYAWmqbUF8GiH9ZBt5wV16s6dSyIn6HqpV7l JK5ekijPb/aVZ1Jhlxda2yccG7OKGdkF6JGQPbfrykx/cRkKat1Rq0O7iFi0puun wG9XSpGLLPC+EPMAfiNcwjEuxY9EG4iF/24N5vW2YwZZLXCGccBhl36E150svsJN U9AAdqBeWgu2g7rOdIqjozKyCaAnzzcNvGbxqnFYMp+2+7Ze9VTWBE9E/z2/Bry4 z74ogU5i+byjafvf4P5JPCYHsn0NjfTQLZL9pof9Kip39sCnPmH/Maxx1LAtAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQU7NP/KcHWgRYesBOJkkR9k+2ymjkwHwYDVR0j BBgwFoAULQvBZV0Xo6sJyR5Doy3o2KshNRowDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU3OTUzNDM5NDcyMDI1OS8wLzJEMEJDMTY1NUQxN0EzQUIwOUM5MUU0M0EzMkRF OEQ4QUIyMTM1MUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvMkQwQkMxNjU1RDE3QTNBQjA5QzkxRTQzQTMyREU4RDhBQjIxMzUxQS5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU3OTUzNDM5NDcyMDI1OS8wLzM0MzMyZTMyMzUz NTJlMzIzMzMwMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzUzNjMwMzQzMC5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACv/5jANBgkqhkiG9w0BAQsFAAOCAQEAQeqAjksOYr9wkvIwNXsPcevp zO7riVZhuGc8e2pQD1C/OrcPI9m7+CR9I930sVyU0B5GA86Wh7waP3icZkNngVDI 25DOPDlAPmt3zpSRl6ZY0zK+fyJmtHrRLRwvvjSxKIrPmipsZ49y2y6Bz2WyE3zN K5eaMQ014/j7aTtv/Pdilh9Pgii3+uHwfEvalwK6vLL9NssOhlrTxYJ9q4aOIC6l rJB4QcjNX7Vk4BhMi4C6KNbHWciAn/PLpyj4YDauRY+DDbO7wMiJZMJiPJAd4gcD Zx5e37HlqRbw+DpsQMJuOCsxEgAiHpncPCP4k+zN5HXnUXtxUpXlRdYYoBlQWg== -----END CERTIFICATE-----Generated at Mon Apr 13 15:31:16 2026 by rpki-client