$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3332203d3e20313531323633.roa File: 34332e3232362e34392e302f32342d3332203d3e20313531323633.roa (raw, json) Hash identifier: +xN1z1VKskwQnt3EY6pQ5MDi2C4xXIAV51Ye2BNp65Q= Subject key identifier: 33:13:70:A7:1A:D4:06:A7:F7:73:D8:A6:C7:38:23:2D:4A:38:97:80 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 47A5420A9BBDA30BC4C59B0DFA168334FEAA8E8C Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3332203d3e20313531323633.roa Signing time: Fri 10 Apr 2026 08:43:54 +0000 ROA not before: Fri 10 Apr 2026 08:38:54 +0000 ROA not after: Fri 09 Apr 2027 08:43:54 +0000 asID: 151263 IP address blocks: 43.226.49.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:a5:42:0a:9b:bd:a3:0b:c4:c5:9b:0d:fa:16:83:34:fe:aa:8e:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Apr 10 08:38:54 2026 GMT Not After : Apr 9 08:43:54 2027 GMT Subject: CN=331370A71AD406A7F773D8A6C738232D4A389780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:1d:b3:25:3a:c4:0b:ee:2a:8a:b4:fd:cb:c2: 76:0f:4a:6c:a0:9a:7e:a2:8a:62:aa:78:08:34:d2: be:43:0c:c5:7e:8d:bc:e8:64:be:f6:74:e8:01:58: ea:52:02:44:52:37:86:03:89:07:23:c4:b5:61:20: 59:81:76:65:42:e4:1a:56:a6:68:d7:eb:79:98:c4: 03:d1:af:48:10:f4:6d:ae:5d:3b:92:6e:c5:77:86: 31:d5:0e:7d:a5:3e:ff:28:29:f0:51:d4:f2:d3:93: a2:95:4f:68:13:45:38:92:ef:8f:dd:73:93:5a:81: 20:a8:dc:65:fe:14:36:e2:be:22:a3:d1:c8:85:e6: 36:d5:3a:b7:16:65:b1:e6:7d:65:3a:51:9a:3e:fa: 3f:c3:5f:c6:3a:e0:c1:ed:98:25:02:e4:c8:c1:73: 52:5b:92:78:bc:e2:76:e4:c5:90:63:71:e4:20:62: 49:e2:cf:00:1d:c9:d1:ee:41:7d:ac:bd:c2:f0:64: e5:75:28:bc:8b:20:38:84:32:73:8a:0e:1d:30:56: 57:b8:d6:49:f5:9d:ff:ed:39:c2:cf:b8:7d:24:10: 9c:4a:c8:c3:9a:2e:42:78:44:53:cd:4b:cc:5c:7b: f1:56:d8:82:53:78:49:99:68:d9:aa:f7:3e:af:7f: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:13:70:A7:1A:D4:06:A7:F7:73:D8:A6:C7:38:23:2D:4A:38:97:80 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e34392e302f32342d3332203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.49.0/24 Signature Algorithm: sha256WithRSAEncryption c5:14:ba:1e:8a:84:99:79:92:12:c4:bc:32:a2:13:62:f8:06: 49:42:6c:4e:3a:7f:b7:fc:c9:89:38:b2:d9:15:5d:dd:08:e2: 13:ee:0c:e3:eb:f6:e5:2a:a2:af:85:be:5c:10:5e:f7:cf:d5: cd:90:98:d1:2a:1e:97:6a:1f:bb:6c:e4:0d:1c:62:3b:fb:46: c8:a3:18:3d:37:c9:c9:ed:11:68:1c:f7:1f:a0:8c:1c:44:cc: d6:00:0c:17:66:9d:9d:77:86:14:e6:74:04:e9:88:b2:63:d6: 08:e9:cf:33:58:9b:45:f3:5a:42:cc:57:06:4e:68:88:ed:93: 4c:6a:08:10:b6:fd:bd:ad:d1:a8:c1:a3:4c:ea:15:62:59:43: 44:1e:4e:dc:03:dd:52:3f:92:4e:67:6c:d6:3a:f0:bb:64:90: d6:a2:5f:85:60:ab:6f:2f:91:79:5b:d2:aa:80:cd:2d:93:1d: 27:72:24:2b:ee:69:69:4d:60:18:89:e8:df:b2:7e:19:a9:3c: 3f:56:d5:4a:56:fa:e5:7a:89:e7:78:01:79:18:a2:b5:d1:2f: b6:b0:5b:bf:3d:08:96:c4:be:ed:02:e6:88:dc:06:5d:f6:4a: 71:65:a1:0e:4f:a3:e4:dd:e6:c5:4d:73:02:8e:67:e7:72:e3: 2c:a0:90:02 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUR6VCCpu9owvExZsN+haDNP6qjowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA0MTAwODM4NTRaFw0yNzA0MDkwODQzNTRaMDMxMTAvBgNV BAMTKDMzMTM3MEE3MUFENDA2QTdGNzczRDhBNkM3MzgyMzJENEEzODk3ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMHbMlOsQL7iqKtP3LwnYPSmyg mn6iimKqeAg00r5DDMV+jbzoZL72dOgBWOpSAkRSN4YDiQcjxLVhIFmBdmVC5BpW pmjX63mYxAPRr0gQ9G2uXTuSbsV3hjHVDn2lPv8oKfBR1PLTk6KVT2gTRTiS74/d c5NagSCo3GX+FDbiviKj0ciF5jbVOrcWZbHmfWU6UZo++j/DX8Y64MHtmCUC5MjB c1Jbkni84nbkxZBjceQgYknizwAdydHuQX2svcLwZOV1KLyLIDiEMnOKDh0wVle4 1kn1nf/tOcLPuH0kEJxKyMOaLkJ4RFPNS8xce/FW2IJTeEmZaNmq9z6vf6rvAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUMxNwpxrUBqf3c9imxzgjLUo4l4AwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzQzOTJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACviMTANBgkqhkiG9w0BAQsFAAOCAQEAxRS6HoqEmXmSEsS8MqITYvgG SUJsTjp/t/zJiTiy2RVd3QjiE+4M4+v25Sqir4W+XBBe98/VzZCY0Soel2ofu2zk DRxiO/tGyKMYPTfJye0RaBz3H6CMHETM1gAMF2adnXeGFOZ0BOmIsmPWCOnPM1ib RfNaQsxXBk5oiO2TTGoIELb9va3RqMGjTOoVYllDRB5O3APdUj+STmds1jrwu2SQ 1qJfhWCrby+ReVvSqoDNLZMdJ3IkK+5paU1gGIno37J+Gak8P1bVSlb65XqJ53gB eRiitdEvtrBbvz0IlsS+7QLmiNwGXfZKcWWhDk+j5N3mxU1zAo5n53LjLKCQAg== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:28 2026 by rpki-client