$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3232203d3e20313531313835.roa File: 34332e3232362e37322e302f32322d3232203d3e20313531313835.roa (raw, json) Hash identifier: CN+kmzq8ncw0WqWFmCCp+BpI1QiWQtdXyUkbEouSGSI= Subject key identifier: A0:2D:55:90:81:D5:4F:0F:B4:A4:F7:2B:19:E5:1E:D2:97:84:82:04 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 4AEE6E34B3C3602FAAD68EA14B7A07E7528CA549 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3232203d3e20313531313835.roa Signing time: Thu 25 Jun 2026 07:07:27 +0000 ROA not before: Thu 25 Jun 2026 07:02:27 +0000 ROA not after: Thu 24 Jun 2027 07:07:27 +0000 asID: 151185 IP address blocks: 43.226.72.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:ee:6e:34:b3:c3:60:2f:aa:d6:8e:a1:4b:7a:07:e7:52:8c:a5:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:02:27 2026 GMT Not After : Jun 24 07:07:27 2027 GMT Subject: CN=A02D559081D54F0FB4A4F72B19E51ED297848204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:ae:9b:51:04:ad:95:e0:48:c8:19:71:e2: 15:1f:19:2a:ef:8b:5e:44:ea:ce:b8:0b:f6:32:f7: a8:3e:c7:09:b1:a8:1a:a4:61:c3:35:60:94:1e:3c: 66:5b:10:59:44:44:07:90:b6:06:d4:34:11:cb:ea: 36:5c:d3:f0:b6:10:a8:11:aa:c6:c8:05:02:f6:5c: 58:14:6a:7d:97:bf:f5:9b:08:c0:fe:54:78:77:e6: 21:20:b0:95:dc:17:a7:e3:97:b9:fa:43:1b:b8:44: 40:76:42:e3:b5:5d:07:21:6a:e0:29:12:6c:54:cc: 9e:b6:db:26:fa:c3:6a:85:fb:5a:b1:13:2d:b0:27: 70:5e:55:42:50:1c:1e:6f:fa:72:81:cf:46:3d:fd: 69:01:2e:92:c6:36:8f:8f:0f:9a:f9:f5:81:c4:f1: 1a:1f:59:3b:54:dd:47:83:fd:62:96:ff:e0:bb:df: ca:7d:2f:90:e7:01:fc:43:f7:1c:6f:7d:17:d2:b0: 1a:28:e5:36:80:4e:a1:3c:3f:f8:ae:89:c8:ac:b4: 9d:00:b8:28:27:6a:0a:8f:9d:3e:e7:99:18:29:41: f2:12:71:3e:27:8a:8b:3d:3a:48:78:17:a6:7e:5c: fa:84:97:96:8e:07:eb:c2:29:10:58:e8:0b:a6:ec: 71:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:2D:55:90:81:D5:4F:0F:B4:A4:F7:2B:19:E5:1E:D2:97:84:82:04 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3232203d3e20313531313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption 77:b7:5f:81:f9:4e:15:3b:77:5a:62:88:01:a6:ed:a0:6d:ab: 06:88:9e:94:27:12:59:5c:00:b1:e2:e2:ea:ee:5c:9d:f9:98: da:67:1c:59:f0:b7:6c:9a:55:4f:71:19:c0:38:27:4f:e4:90: 65:da:5b:26:39:0a:da:0a:7a:c1:50:fb:b4:dd:19:86:d3:19: fa:f5:cc:9f:c7:0e:a5:1c:9d:71:58:c0:90:8d:7c:85:fb:60: 26:5d:60:37:8e:b5:e1:8f:d4:3d:67:61:66:a8:7a:c6:d6:72: 8c:a4:ac:d5:0c:f5:50:cf:19:43:69:4c:15:56:5f:a7:ff:fd: 8f:92:74:97:38:ce:e7:9c:16:0c:f3:ef:1f:4d:2f:3b:32:3e: 16:a9:8f:7e:32:1d:b6:e5:3f:d2:91:43:4c:20:56:f3:e2:f4: b5:18:12:b9:64:80:8b:fd:f2:28:3d:35:2b:df:c3:52:e9:09: b5:f9:12:1e:76:16:ab:3b:7e:6d:54:43:04:3a:ef:82:a6:c0: 67:d0:7d:da:39:14:92:01:c6:8e:bc:89:e2:44:4f:2c:70:e8: b2:3f:f2:89:dd:1b:61:d0:96:c4:1c:0a:ff:09:14:93:be:36: fa:c2:d9:db:78:d9:a5:1d:6f:cc:09:38:ea:57:d6:10:85:62: 1f:a2:f7:0e -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUSu5uNLPDYC+q1o6hS3oH51KMpUkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAyMjdaFw0yNzA2MjQwNzA3MjdaMDMxMTAvBgNV BAMTKEEwMkQ1NTkwODFENTRGMEZCNEE0RjcyQjE5RTUxRUQyOTc4NDgyMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLOK6bUQStleBIyBlx4hUfGSrv i15E6s64C/Yy96g+xwmxqBqkYcM1YJQePGZbEFlERAeQtgbUNBHL6jZc0/C2EKgR qsbIBQL2XFgUan2Xv/WbCMD+VHh35iEgsJXcF6fjl7n6Qxu4REB2QuO1XQchauAp EmxUzJ622yb6w2qF+1qxEy2wJ3BeVUJQHB5v+nKBz0Y9/WkBLpLGNo+PD5r59YHE 8RofWTtU3UeD/WKW/+C738p9L5DnAfxD9xxvfRfSsBoo5TaATqE8P/iuicistJ0A uCgnagqPnT7nmRgpQfIScT4nios9Okh4F6Z+XPqEl5aOB+vCKRBY6Aum7HHRAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUoC1VkIHVTw+0pPcrGeUe0peEggQwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzczMjJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMxMzUzMTMxMzgzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiviSDANBgkqhkiG9w0BAQsFAAOCAQEAd7dfgflOFTt3WmKIAabtoG2r BoielCcSWVwAseLi6u5cnfmY2mccWfC3bJpVT3EZwDgnT+SQZdpbJjkK2gp6wVD7 tN0ZhtMZ+vXMn8cOpRydcVjAkI18hftgJl1gN4614Y/UPWdhZqh6xtZyjKSs1Qz1 UM8ZQ2lMFVZfp//9j5J0lzjO55wWDPPvH00vOzI+FqmPfjIdtuU/0pFDTCBW8+L0 tRgSuWSAi/3yKD01K9/DUukJtfkSHnYWqzt+bVRDBDrvgqbAZ9B92jkUkgHGjryJ 4kRPLHDosj/yid0bYdCWxBwK/wkUk742+sLZ23jZpR1vzAk46lfWEIViH6L3Dg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:54:03 2026 by rpki-client