$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37332e302f32342d3234203d3e20313531323633.roa File: 34332e3232362e37332e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: ultQo/tcXYAJcwMYiGhTdBYowU2VUdrcVlfYZG7sFc4= Subject key identifier: 68:4B:CB:17:1E:86:DC:A3:D5:55:BE:4B:5C:1D:CC:26:9B:AA:34:23 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 13AF5D6CCEC9B7DE7D0F6ACCADD467BDD0395133 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37332e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:09:54 +0000 ROA not before: Thu 25 Jun 2026 07:04:54 +0000 ROA not after: Thu 24 Jun 2027 07:09:54 +0000 asID: 151263 IP address blocks: 43.226.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:af:5d:6c:ce:c9:b7:de:7d:0f:6a:cc:ad:d4:67:bd:d0:39:51:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:04:54 2026 GMT Not After : Jun 24 07:09:54 2027 GMT Subject: CN=684BCB171E86DCA3D555BE4B5C1DCC269BAA3423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9a:4e:e5:ea:1c:e2:e2:0d:5c:5f:1e:54:59: ca:2d:f6:04:64:87:15:d2:e5:2c:ae:18:e5:2e:69: e1:dd:4f:71:e6:6c:a7:92:36:ef:a5:f7:9e:a8:26: be:bb:93:ca:5c:b1:46:fc:de:60:96:26:ee:46:25: 74:52:cf:d6:e1:1b:4c:2d:73:74:7c:8a:32:a3:14: 6a:4a:99:e1:4e:4d:6e:fb:6d:33:a9:b4:22:35:b0: 2a:f1:d7:6a:ec:f4:91:a3:5c:24:cb:37:39:4c:62: f4:c3:0c:46:02:e9:cd:d2:80:01:8c:74:ac:80:8d: d9:92:db:e7:f9:ac:92:98:34:82:47:44:8e:d6:c9: fb:ec:7d:d7:8f:a0:1c:b7:26:11:ea:e6:0f:4d:c2: f9:a3:ab:e0:38:cf:bf:5f:b0:18:13:6d:93:a5:73: 46:f3:a5:67:a1:7d:76:bd:7d:6f:6a:2f:12:41:d3: 67:dc:d2:13:8d:55:fe:00:9a:f7:c7:7c:5a:ca:3e: 4a:ae:4e:be:9e:c7:23:53:29:5b:ab:ff:df:cb:4e: 01:df:17:6b:53:d2:ef:89:7b:ec:4a:54:38:43:43: e1:f7:50:13:1b:ad:5c:e0:b3:f8:75:e1:5f:89:fd: 39:b5:b9:b4:d0:e5:27:93:02:98:0b:fb:9c:85:3e: b7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:4B:CB:17:1E:86:DC:A3:D5:55:BE:4B:5C:1D:CC:26:9B:AA:34:23 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37332e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.73.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:8f:29:7d:4a:61:76:d1:4a:23:10:d6:48:9e:73:2a:4f:b1: 2e:51:86:d3:ba:8d:d8:85:52:8a:45:f9:bb:2c:17:b1:de:79: ed:b1:18:60:00:a0:01:2b:38:62:c8:79:ef:0b:39:3c:ea:e2: 83:69:7e:61:83:26:86:67:76:34:b8:32:47:e4:df:8c:9e:bc: 34:c0:69:fc:1a:92:ee:81:7a:41:6b:40:49:88:a0:b5:4c:9d: 61:b2:78:4c:c7:9a:c8:93:95:e2:21:1f:86:2e:a8:4e:13:1f: 56:e2:d8:29:e1:ea:ac:1e:58:fe:6b:4d:c5:ea:ea:12:ea:c3: 1b:2c:39:ef:03:04:3d:b8:7e:a7:b0:6c:b1:58:29:ee:97:66: ce:8d:d1:d1:7c:1f:2b:5a:b9:32:fe:95:b2:19:22:e9:7a:cd: 92:00:35:1b:95:b6:44:66:65:f7:93:6e:aa:e7:b0:25:17:e8: 7a:14:fc:82:a7:a3:67:a1:6e:b7:4d:7f:8a:75:68:1d:69:75: 8b:1a:51:e1:40:52:a9:cc:be:0c:e1:92:66:b6:83:7e:f9:15: 4e:a6:33:87:74:5b:25:aa:1c:f8:db:11:58:bc:d5:7a:f4:63: cf:23:5a:42:0d:9b:96:76:b4:92:9d:14:b2:db:22:86:84:21: d2:66:45:82 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUE69dbM7Jt959D2rMrdRnvdA5UTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzA0NTRaFw0yNzA2MjQwNzA5NTRaMDMxMTAvBgNV BAMTKDY4NEJDQjE3MUU4NkRDQTNENTU1QkU0QjVDMURDQzI2OUJBQTM0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQComk7l6hzi4g1cXx5UWcot9gRk hxXS5SyuGOUuaeHdT3HmbKeSNu+l956oJr67k8pcsUb83mCWJu5GJXRSz9bhG0wt c3R8ijKjFGpKmeFOTW77bTOptCI1sCrx12rs9JGjXCTLNzlMYvTDDEYC6c3SgAGM dKyAjdmS2+f5rJKYNIJHRI7WyfvsfdePoBy3JhHq5g9Nwvmjq+A4z79fsBgTbZOl c0bzpWehfXa9fW9qLxJB02fc0hONVf4AmvfHfFrKPkquTr6exyNTKVur/9/LTgHf F2tT0u+Je+xKVDhDQ+H3UBMbrVzgs/h14V+J/Tm1ubTQ5SeTApgL+5yFPrcxAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUaEvLFx6G3KPVVb5LXB3MJpuqNCMwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzczMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACviSTANBgkqhkiG9w0BAQsFAAOCAQEAe48pfUphdtFKIxDWSJ5zKk+x LlGG07qN2IVSikX5uywXsd557bEYYACgASs4Ysh57ws5POrig2l+YYMmhmd2NLgy R+TfjJ68NMBp/BqS7oF6QWtASYigtUydYbJ4TMeayJOV4iEfhi6oThMfVuLYKeHq rB5Y/mtNxerqEurDGyw57wMEPbh+p7BssVgp7pdmzo3R0XwfK1q5Mv6Vshki6XrN kgA1G5W2RGZl95NuquewJRfoehT8gqejZ6Fut01/inVoHWl1ixpR4UBSqcy+DOGS ZraDfvkVTqYzh3RbJaoc+NsRWLzVevRjzyNaQg2blna0kp0UstsihoQh0mZFgg== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:20 2026 by rpki-client