$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531323633.roa File: 34332e3232362e34392e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: d6U06tziP1DXRLjXOYcZAo6KHFOwD3UVu3cLHimaZBI= Subject key identifier: 76:65:A8:AB:89:B2:F5:5D:E3:55:F6:D7:A9:CC:54:7A:9D:CF:86:89 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 66F3154A816C427AEF060F6EE6AE6724A0914065 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:09:55 +0000 ROA not before: Thu 25 Jun 2026 07:04:55 +0000 ROA not after: Thu 24 Jun 2027 07:09:55 +0000 asID: 151263 IP address blocks: 43.226.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:f3:15:4a:81:6c:42:7a:ef:06:0f:6e:e6:ae:67:24:a0:91:40:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:04:55 2026 GMT Not After : Jun 24 07:09:55 2027 GMT Subject: CN=7665A8AB89B2F55DE355F6D7A9CC547A9DCF8689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2b:ed:53:a6:0a:e8:ae:86:17:07:22:9e:d6: 70:f6:c8:5b:62:9b:25:c5:ad:66:e3:54:e0:4a:37: 39:75:08:52:30:94:7c:2a:6e:78:26:e7:14:24:2e: 08:f4:6c:e7:ec:af:94:37:e0:97:00:f9:a0:26:a6: 41:ab:e4:93:4e:e5:88:68:f9:cc:78:48:ed:7a:a7: 8b:5c:69:7b:5e:85:cd:88:d9:2a:65:ae:d2:f1:85: 60:39:44:73:a1:e9:ee:0f:74:60:d5:05:06:60:c9: 51:f4:d4:99:b6:0f:41:f4:5e:71:21:ce:b6:3c:10: 36:81:6a:cd:89:19:c6:70:13:b6:a2:dd:01:d4:7f: ca:d8:c8:d2:e0:90:9e:2c:67:57:31:ba:05:d5:03: e1:fe:bc:b0:11:8f:72:cf:70:a5:eb:80:26:c3:72: 4a:49:5b:66:92:a9:71:9e:18:a8:23:29:62:ca:3f: 9a:f8:d9:b2:af:4b:ae:db:3f:57:a0:7c:90:48:1f: 09:ff:b9:fc:d5:ad:2a:f3:da:43:50:58:03:3b:aa: 1c:14:e5:80:18:d7:2a:58:08:46:d2:fa:53:01:57: b8:fa:fb:97:46:18:a4:70:6e:07:eb:77:ef:2d:83: 82:60:91:2f:a3:4b:39:b2:54:41:78:5c:c2:97:5c: fc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:65:A8:AB:89:B2:F5:5D:E3:55:F6:D7:A9:CC:54:7A:9D:CF:86:89 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption 05:ed:58:61:1c:58:82:78:13:78:e5:20:a9:20:18:dd:b9:0d: 2b:32:78:b7:aa:5e:b5:9a:ec:03:33:68:37:89:1d:19:64:92: 73:bc:61:17:0e:fb:ea:13:8d:ed:6b:66:4c:8d:90:f6:21:bf: cc:bd:06:9d:6b:73:c8:db:98:25:74:e5:0b:99:d1:3f:16:6b: 0d:0f:4e:dc:49:80:99:90:35:66:cb:1f:fb:0b:bc:33:54:81: 89:ac:2d:92:3f:c9:29:ca:ab:39:68:34:50:02:0e:77:77:2a: 91:e6:09:a0:c9:19:7f:2c:d7:c8:a2:43:e5:b2:61:6a:db:af: 6e:ce:68:19:74:e0:99:db:53:26:a5:32:76:60:ba:96:46:11: ea:32:b8:2c:0b:89:8c:ed:da:88:07:01:73:89:98:95:e4:de: 52:19:a4:d6:dd:76:a1:26:dd:5f:ed:fd:9e:59:83:c1:99:86: e7:e6:52:ab:5c:eb:b8:ef:16:47:a1:bd:ce:7c:d5:ae:70:19: 59:5a:c5:50:10:6b:0b:44:a9:0d:5e:94:6b:ec:6a:da:12:18: 19:11:bb:fe:b0:38:4c:ad:d3:46:20:58:4c:0f:7a:41:a8:a5: 24:03:b1:d4:4a:09:ae:1f:64:0a:6a:41:26:32:ee:97:a0:b9: a9:e8:8b:b6 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUZvMVSoFsQnrvBg9u5q5nJKCRQGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzA0NTVaFw0yNzA2MjQwNzA5NTVaMDMxMTAvBgNV BAMTKDc2NjVBOEFCODlCMkY1NURFMzU1RjZEN0E5Q0M1NDdBOURDRjg2ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/K+1TpgroroYXByKe1nD2yFti myXFrWbjVOBKNzl1CFIwlHwqbngm5xQkLgj0bOfsr5Q34JcA+aAmpkGr5JNO5Yho +cx4SO16p4tcaXtehc2I2SplrtLxhWA5RHOh6e4PdGDVBQZgyVH01Jm2D0H0XnEh zrY8EDaBas2JGcZwE7ai3QHUf8rYyNLgkJ4sZ1cxugXVA+H+vLARj3LPcKXrgCbD ckpJW2aSqXGeGKgjKWLKP5r42bKvS67bP1egfJBIHwn/ufzVrSrz2kNQWAM7qhwU 5YAY1ypYCEbS+lMBV7j6+5dGGKRwbgfrd+8tg4JgkS+jSzmyVEF4XMKXXPxDAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUdmWoq4my9V3jVfbXqcxUep3PhokwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACviMTANBgkqhkiG9w0BAQsFAAOCAQEABe1YYRxYgngTeOUgqSAY3bkN KzJ4t6petZrsAzNoN4kdGWSSc7xhFw776hON7WtmTI2Q9iG/zL0GnWtzyNuYJXTl C5nRPxZrDQ9O3EmAmZA1Zssf+wu8M1SBiawtkj/JKcqrOWg0UAIOd3cqkeYJoMkZ fyzXyKJD5bJhatuvbs5oGXTgmdtTJqUydmC6lkYR6jK4LAuJjO3aiAcBc4mYleTe Uhmk1t12oSbdX+39nlmDwZmG5+ZSq1zruO8WR6G9znzVrnAZWVrFUBBrC0SpDV6U a+xq2hIYGRG7/rA4TK3TRiBYTA96QailJAOx1EoJrh9kCmpBJjLul6C5qeiLtg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:57 2026 by rpki-client