$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065580055121690626/0/34332e3234372e3130332e302f32342d3234203d3e2034383132.roa File: 34332e3234372e3130332e302f32342d3234203d3e2034383132.roa (raw, json) Hash identifier: mcRm4nNS2pGUBNGwxEjJhwYd95LI8enACj0yJGkk/8Y= Subject key identifier: 9B:5C:78:FC:8F:B8:6C:81:8D:CA:51:99:51:3E:02:E9:18:8A:DB:CD Certificate issuer: /CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Certificate serial: 62EA72E3F3A5E993F6539364A85D5389501573A0 Authority key identifier: B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/34332e3234372e3130332e302f32342d3234203d3e2034383132.roa Signing time: Tue 21 Apr 2026 03:03:16 +0000 ROA not before: Tue 21 Apr 2026 02:58:16 +0000 ROA not after: Tue 20 Apr 2027 03:03:16 +0000 asID: 4812 IP address blocks: 43.247.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 04:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:ea:72:e3:f3:a5:e9:93:f6:53:93:64:a8:5d:53:89:50:15:73:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8C15036932176BBE4E7217ED5772ACA3DB00427 Validity Not Before: Apr 21 02:58:16 2026 GMT Not After : Apr 20 03:03:16 2027 GMT Subject: CN=9B5C78FC8FB86C818DCA5199513E02E9188ADBCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:1b:80:18:98:76:f6:1c:3e:89:0c:a9:0c: 90:94:9c:8b:09:d2:c3:9f:02:b7:66:62:79:d3:58: e5:78:c3:b5:44:83:33:7a:38:0e:35:6f:b1:3c:1a: f5:9c:35:68:00:c0:c0:7e:bd:48:7d:ad:67:b5:f7: fb:3d:7c:45:ab:c8:af:46:67:df:24:37:3d:bb:ad: 5b:c5:d7:f0:10:03:5c:c2:46:d7:c3:35:9f:7f:84: 1b:ee:98:5f:df:4a:6a:89:6d:d3:ac:73:8b:19:c6: 07:e5:ae:d5:fc:ff:78:80:99:59:40:34:0c:63:42: dd:ce:f1:12:e2:e3:91:5a:e6:bc:7a:3d:c4:7e:4a: 9a:f4:ef:fd:4c:73:97:dd:f3:9a:59:ee:9d:26:0f: e4:fc:4d:6f:89:9c:61:da:65:b4:07:a3:eb:43:76: 26:a8:b2:d5:d5:8f:67:69:41:ed:bb:7d:9e:4b:dc: d4:14:7f:c3:68:8d:59:29:ce:eb:a0:74:52:1e:a8: 49:41:aa:82:52:01:0a:17:07:c9:cf:5f:d9:51:98: 71:aa:59:c5:44:7f:65:f0:18:e7:b7:ef:ac:91:87: 93:5c:8d:e9:ed:74:7c:c5:b8:7b:7b:da:6e:e9:46: 08:c4:fc:52:47:18:df:ae:e7:16:a8:79:50:c0:db: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:5C:78:FC:8F:B8:6C:81:8D:CA:51:99:51:3E:02:E9:18:8A:DB:CD X509v3 Authority Key Identifier: keyid:B8:C1:50:36:93:21:76:BB:E4:E7:21:7E:D5:77:2A:CA:3D:B0:04:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/B8C15036932176BBE4E7217ED5772ACA3DB00427.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B8C15036932176BBE4E7217ED5772ACA3DB00427.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065580055121690626/0/34332e3234372e3130332e302f32342d3234203d3e2034383132.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.247.103.0/24 Signature Algorithm: sha256WithRSAEncryption 5d:b8:11:ae:cb:76:44:be:97:45:50:67:cd:9e:98:43:93:9c: 27:48:dc:8d:99:27:b5:e3:42:ea:af:d4:2d:4e:c2:72:5d:b9: 8c:5f:9d:f2:20:1e:01:00:73:6e:33:7b:9b:36:a9:4c:17:8c: 18:24:fe:2c:da:14:a5:1d:c8:c0:3f:03:f8:39:e4:36:9b:68: d9:01:11:db:7b:26:b2:d4:38:ce:9f:b9:be:bc:02:d0:07:f5: e8:36:a4:bb:7b:6a:16:cb:ad:35:64:d3:d5:80:4f:41:bb:4c: 1d:21:d2:3d:f8:06:1a:67:d6:43:56:3e:4a:91:13:e0:79:9b: 77:59:dd:a2:28:5c:30:e4:40:38:31:a0:67:e2:f6:f5:e0:61: cb:74:3b:d3:45:91:43:72:30:96:5a:14:3d:92:88:27:e4:20: 3b:e5:d0:31:01:5c:64:07:7b:f3:78:f5:4a:c3:02:8a:e4:38: 74:3e:13:8b:87:0f:9f:dc:a0:ba:e4:82:86:5e:41:8e:56:c7: fc:d8:81:8b:15:d0:de:7e:07:69:a1:9d:78:32:aa:9a:4f:35: 1c:a4:d0:19:d7:cb:f3:e5:c3:90:df:e4:6c:74:2d:8f:ec:a2: 16:fb:34:61:6e:aa:f9:97:83:5a:ed:c0:b8:34:2c:94:c0:27: b0:e3:58:89 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYupy4/Ol6ZP2U5NkqF1TiVAVc6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0Ez REIwMDQyNzAeFw0yNjA0MjEwMjU4MTZaFw0yNzA0MjAwMzAzMTZaMDMxMTAvBgNV BAMTKDlCNUM3OEZDOEZCODZDODE4RENBNTE5OTUxM0UwMkU5MTg4QURCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7xuAGJh29hw+iQypDJCUnIsJ 0sOfArdmYnnTWOV4w7VEgzN6OA41b7E8GvWcNWgAwMB+vUh9rWe19/s9fEWryK9G Z98kNz27rVvF1/AQA1zCRtfDNZ9/hBvumF/fSmqJbdOsc4sZxgflrtX8/3iAmVlA NAxjQt3O8RLi45Fa5rx6PcR+Spr07/1Mc5fd85pZ7p0mD+T8TW+JnGHaZbQHo+tD diaostXVj2dpQe27fZ5L3NQUf8NojVkpzuugdFIeqElBqoJSAQoXB8nPX9lRmHGq WcVEf2XwGOe376yRh5NcjentdHzFuHt72m7pRgjE/FJHGN+u5xaoeVDA2/KXAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUm1x4/I+4bIGNylGZUT4C6RiK280wHwYDVR0j BBgwFoAUuMFQNpMhdrvk5yF+1Xcqyj2wBCcwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4MDA1NTEyMTY5MDYyNi8wL0I4QzE1MDM2OTMyMTc2QkJFNEU3MjE3RUQ1Nzcy QUNBM0RCMDA0MjcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjhDMTUwMzY5MzIxNzZCQkU0RTcyMTdFRDU3NzJBQ0EzREIwMDQyNy5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1NTgwMDU1MTIxNjkwNjI2LzAvMzQzMzJlMzIzNDM3 MmUzMTMwMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNDM4MzEzMi5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEACv3ZzANBgkqhkiG9w0BAQsFAAOCAQEAXbgRrst2RL6XRVBnzZ6YQ5OcJ0jc jZknteNC6q/ULU7Ccl25jF+d8iAeAQBzbjN7mzapTBeMGCT+LNoUpR3IwD8D+Dnk Npto2QER23smstQ4zp+5vrwC0Af16Daku3tqFsutNWTT1YBPQbtMHSHSPfgGGmfW Q1Y+SpET4Hmbd1ndoihcMORAODGgZ+L29eBhy3Q700WRQ3IwlloUPZKIJ+QgO+XQ MQFcZAd783j1SsMCiuQ4dD4Ti4cPn9yguuSChl5BjlbH/NiBixXQ3n4HaaGdeDKq mk81HKTQGdfL8+XDkN/kbHQtj+yiFvs0YW6q+ZeDWu3AuDQslMAnsONYiQ== -----END CERTIFICATE-----Generated at Mon Apr 27 08:24:35 2026 by rpki-client