$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3332203d3e20313531323633.roa File: 34332e3232362e37322e302f32322d3332203d3e20313531323633.roa (raw, json) Hash identifier: jQPMggXT1FjPZtyPkeJOQLab+84xGE4z7mH9SKKEpPQ= Subject key identifier: 49:94:26:52:BA:45:EF:54:97:0A:50:BF:D9:9A:77:58:08:B3:51:CF Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 61253F33605569A0FEA59007ED64E1083791BE94 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3332203d3e20313531323633.roa Signing time: Fri 10 Apr 2026 08:43:54 +0000 ROA not before: Fri 10 Apr 2026 08:38:54 +0000 ROA not after: Fri 09 Apr 2027 08:43:54 +0000 asID: 151263 IP address blocks: 43.226.72.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:25:3f:33:60:55:69:a0:fe:a5:90:07:ed:64:e1:08:37:91:be:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Apr 10 08:38:54 2026 GMT Not After : Apr 9 08:43:54 2027 GMT Subject: CN=49942652BA45EF54970A50BFD99A775808B351CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:b8:81:a7:dd:62:02:ea:50:66:ef:d3:72:cf: bb:43:bc:20:7c:ab:01:66:50:a3:27:67:24:18:44: f2:a7:c2:d0:ff:ab:1d:59:c1:8d:1a:90:85:b5:12: 90:fa:6f:73:99:1a:9e:55:46:85:a7:d0:25:68:79: 0b:ca:d3:ab:ea:3e:06:76:1c:c1:00:cf:87:5d:ed: a2:09:20:12:24:4e:40:3c:99:b8:ba:3c:b5:f8:11: 2e:68:d5:1f:40:82:7b:cd:94:d1:34:93:6e:fc:9d: b3:d3:b3:96:25:88:06:2a:95:1c:5a:35:ca:2a:98: e3:2a:39:ff:b8:7f:7a:86:bc:e9:b0:fd:e7:08:18: 82:b4:fc:b7:67:70:c2:a4:28:9e:38:93:3c:f3:6c: dc:11:bc:af:a1:80:54:52:98:a7:50:27:86:a6:18: c3:8c:a1:3f:65:29:90:e0:c4:db:c8:e0:d2:fd:b5: b3:aa:d0:b4:c6:a9:72:99:03:a1:f6:d8:0d:dc:ae: 30:95:d1:78:f7:29:1f:3b:1f:63:7d:84:83:18:fe: cf:3f:b6:16:b3:62:30:fe:a0:b5:2f:a6:f9:25:b3: a1:d5:06:c7:85:62:53:6e:64:21:8a:c6:b2:c9:08: b5:be:e7:a1:78:79:e0:6c:13:56:45:c3:82:5a:07: 1c:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:94:26:52:BA:45:EF:54:97:0A:50:BF:D9:9A:77:58:08:B3:51:CF X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37322e302f32322d3332203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.72.0/22 Signature Algorithm: sha256WithRSAEncryption e2:70:12:a2:9d:7d:65:4f:64:11:cd:d7:a9:b2:88:d3:dc:91: 87:ae:f5:28:14:c3:33:2a:49:cd:4b:73:8f:27:89:ee:3c:a2: 08:c1:b6:a3:b9:82:4c:a9:44:bb:1c:a0:36:ac:b9:b6:05:06: 43:bf:4e:6d:40:1a:ee:0e:c7:fe:95:19:ad:3b:b2:00:d1:ba: 82:6b:18:d3:92:78:19:a4:58:cd:bd:63:66:e8:c4:37:02:af: 4b:65:9b:50:36:62:1e:2b:82:80:f2:15:c2:eb:2c:3c:d9:d5: 25:6f:2a:4d:be:dc:9d:00:4b:b5:a2:25:95:1b:8b:2b:27:2e: 76:42:c5:4b:bf:e7:12:94:f1:4e:65:1a:a4:dc:e7:00:e1:1c: a1:73:7d:f7:d8:6d:9a:4d:62:73:13:cd:30:92:f0:d9:dc:de: f2:c1:a5:2d:de:ce:61:1e:81:fa:df:7e:73:75:11:d4:51:73: 02:56:49:fd:ce:c2:a9:8d:8c:3c:f3:ed:68:d2:5b:2f:de:7d: 74:ec:a2:2a:74:28:e9:df:94:02:34:2b:00:6e:08:7c:5b:e1: 8d:c7:41:d9:5d:94:ef:d5:de:6a:39:93:63:3a:fd:be:32:91: 29:a4:7c:f7:35:91:0e:d4:5c:b4:2f:5c:d3:c3:1c:f5:60:84: af:1e:84:79 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUYSU/M2BVaaD+pZAH7WThCDeRvpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA0MTAwODM4NTRaFw0yNzA0MDkwODQzNTRaMDMxMTAvBgNV BAMTKDQ5OTQyNjUyQkE0NUVGNTQ5NzBBNTBCRkQ5OUE3NzU4MDhCMzUxQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmuIGn3WIC6lBm79Nyz7tDvCB8 qwFmUKMnZyQYRPKnwtD/qx1ZwY0akIW1EpD6b3OZGp5VRoWn0CVoeQvK06vqPgZ2 HMEAz4dd7aIJIBIkTkA8mbi6PLX4ES5o1R9AgnvNlNE0k278nbPTs5YliAYqlRxa NcoqmOMqOf+4f3qGvOmw/ecIGIK0/LdncMKkKJ44kzzzbNwRvK+hgFRSmKdQJ4am GMOMoT9lKZDgxNvI4NL9tbOq0LTGqXKZA6H22A3crjCV0Xj3KR87H2N9hIMY/s8/ thazYjD+oLUvpvkls6HVBseFYlNuZCGKxrLJCLW+56F4eeBsE1ZFw4JaBxz9AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUSZQmUrpF71SXClC/2Zp3WAizUc8wHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzczMjJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAiviSDANBgkqhkiG9w0BAQsFAAOCAQEA4nASop19ZU9kEc3XqbKI09yR h671KBTDMypJzUtzjyeJ7jyiCMG2o7mCTKlEuxygNqy5tgUGQ79ObUAa7g7H/pUZ rTuyANG6gmsY05J4GaRYzb1jZujENwKvS2WbUDZiHiuCgPIVwussPNnVJW8qTb7c nQBLtaIllRuLKycudkLFS7/nEpTxTmUapNznAOEcoXN999htmk1icxPNMJLw2dze 8sGlLd7OYR6B+t9+c3UR1FFzAlZJ/c7CqY2MPPPtaNJbL959dOyiKnQo6d+UAjQr AG4IfFvhjcdB2V2U79XeajmTYzr9vjKRKaR89zWRDtRctC9c08Mc9WCErx6EeQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:27 2026 by rpki-client