$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37342e302f32342d3234203d3e20313531323633.roa File: 34332e3232362e37342e302f32342d3234203d3e20313531323633.roa (raw, json) Hash identifier: WtGf8luMWVwVCI0JqGilwQMOg1wGl5B8Qlx/WrfN83M= Subject key identifier: 21:9F:68:91:AA:AE:4F:8C:CB:91:72:DE:FE:28:83:1A:1D:6B:99:D5 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 09995DC6D9D2B7C58F22820DB7ABDFCF69A85263 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37342e302f32342d3234203d3e20313531323633.roa Signing time: Thu 25 Jun 2026 07:09:54 +0000 ROA not before: Thu 25 Jun 2026 07:04:54 +0000 ROA not after: Thu 24 Jun 2027 07:09:54 +0000 asID: 151263 IP address blocks: 43.226.74.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:99:5d:c6:d9:d2:b7:c5:8f:22:82:0d:b7:ab:df:cf:69:a8:52:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:04:54 2026 GMT Not After : Jun 24 07:09:54 2027 GMT Subject: CN=219F6891AAAE4F8CCB9172DEFE28831A1D6B99D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:62:30:0f:a6:6f:06:9f:9d:88:43:65:09:70: b0:a4:3e:25:d6:18:91:a8:39:33:01:6e:8f:f3:28: 81:ce:31:cf:0d:a4:df:80:dd:5c:fd:83:1e:61:c9: 51:a2:42:9c:c0:33:4e:17:0a:d3:a9:4a:1d:7e:84: 9f:de:b9:ca:0a:a8:13:e7:a6:98:ee:cb:74:51:f5: 16:11:05:0e:f7:92:31:86:a9:83:b4:c2:06:6c:d8: 09:59:0e:87:2d:2b:bb:66:5c:e2:71:1a:08:11:68: f1:cb:55:05:98:7b:14:e6:f7:60:7d:e7:89:10:02: 2c:ac:cd:24:fe:91:17:05:c0:b9:7b:1b:10:7b:e0: ae:60:08:10:f4:fd:32:a1:22:e3:c5:de:48:83:b1: f2:fd:8d:9f:51:29:cb:18:9a:70:c8:96:24:93:cc: a6:9f:ad:dd:ce:6b:eb:75:33:4f:d9:b5:33:c3:11: a3:08:f8:3e:09:be:da:4d:27:9a:b3:56:8c:ea:17: 2d:18:26:71:93:9a:4a:45:79:ce:e3:da:9b:e9:6f: 8c:b0:df:7a:be:27:a1:10:25:ce:3e:ba:db:2c:b3: 19:59:25:08:25:8a:3f:02:36:d7:10:97:ab:00:d4: 3f:1f:52:d8:f4:1e:0c:67:f8:06:35:10:86:41:4a: 62:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9F:68:91:AA:AE:4F:8C:CB:91:72:DE:FE:28:83:1A:1D:6B:99:D5 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232362e37342e302f32342d3234203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.226.74.0/24 Signature Algorithm: sha256WithRSAEncryption 24:2e:16:02:92:ca:e1:05:16:fa:0c:b6:e1:84:28:58:84:19: 2f:d9:11:bd:fb:dc:a5:b1:82:2b:c5:61:a1:05:1d:c2:80:e6: f3:fb:3b:2d:bc:5b:21:c7:b1:58:9c:46:5d:c9:56:f0:86:04: d1:3b:5f:0a:bd:d0:b2:8a:ac:02:3e:f8:a7:14:bc:06:67:f7: ca:8c:d2:3b:39:e2:1b:9a:87:68:61:82:7c:d4:6f:db:f7:b9: 36:83:3d:eb:e2:40:b3:77:f1:23:bc:e4:d6:75:d9:99:72:79: 70:f1:fd:78:7c:be:f2:d5:d9:81:a6:6f:a3:ff:a7:a1:c8:56: 07:1a:a0:0a:c9:d6:a8:2c:de:71:ae:e4:93:67:a8:f7:e6:c1: f0:62:33:48:db:f9:59:6f:0b:65:8f:f2:85:bf:e6:ad:86:2c: 2f:b3:3f:0f:22:28:cc:39:f7:95:7b:35:89:69:cd:0a:d1:a4: c2:11:62:0a:d8:c3:3a:7e:94:2a:cb:12:98:df:d8:3e:d1:ee: bd:28:9c:6b:c7:60:b7:5d:c1:bf:78:96:e0:cf:fc:a3:a8:55: 33:5d:e8:9c:31:51:e8:e8:0b:a3:68:ca:aa:72:a7:cf:87:10: 6c:e9:1f:5a:1b:76:ba:00:56:82:9b:95:69:82:c3:e8:8a:c6: b1:4f:e1:b7 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUCZldxtnSt8WPIoINt6vfz2moUmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzA0NTRaFw0yNzA2MjQwNzA5NTRaMDMxMTAvBgNV BAMTKDIxOUY2ODkxQUFBRTRGOENDQjkxNzJERUZFMjg4MzFBMUQ2Qjk5RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1YjAPpm8Gn52IQ2UJcLCkPiXW GJGoOTMBbo/zKIHOMc8NpN+A3Vz9gx5hyVGiQpzAM04XCtOpSh1+hJ/eucoKqBPn ppjuy3RR9RYRBQ73kjGGqYO0wgZs2AlZDoctK7tmXOJxGggRaPHLVQWYexTm92B9 54kQAiyszST+kRcFwLl7GxB74K5gCBD0/TKhIuPF3kiDsfL9jZ9RKcsYmnDIliST zKafrd3Oa+t1M0/ZtTPDEaMI+D4JvtpNJ5qzVozqFy0YJnGTmkpFec7j2pvpb4yw 33q+J6EQJc4+utsssxlZJQglij8CNtcQl6sA1D8fUtj0Hgxn+AY1EIZBSmK3AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUIZ9okaquT4zLkXLe/iiDGh1rmdUwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NjJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMyMzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACviSjANBgkqhkiG9w0BAQsFAAOCAQEAJC4WApLK4QUW+gy24YQoWIQZ L9kRvfvcpbGCK8VhoQUdwoDm8/s7LbxbIcexWJxGXclW8IYE0TtfCr3QsoqsAj74 pxS8Bmf3yozSOzniG5qHaGGCfNRv2/e5NoM96+JAs3fxI7zk1nXZmXJ5cPH9eHy+ 8tXZgaZvo/+nochWBxqgCsnWqCzeca7kk2eo9+bB8GIzSNv5WW8LZY/yhb/mrYYs L7M/DyIozDn3lXs1iWnNCtGkwhFiCtjDOn6UKssSmN/YPtHuvSica8dgt13Bv3iW 4M/8o6hVM13onDFR6OgLo2jKqnKnz4cQbOkfWht2ugBWgpuVaYLD6IrGsU/htw== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:21 2026 by rpki-client