$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232372e36382e302f32342d3234203d3e20313531313835.roa File: 34332e3232372e36382e302f32342d3234203d3e20313531313835.roa (raw, json) Hash identifier: oUG06qYlcP6HelHain3gpetHHCQC7+Gu44AkhpUHC0k= Subject key identifier: BC:DB:E5:C5:70:BA:8C:35:0C:16:7A:04:93:C4:F6:A5:E7:8A:FB:B6 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 59639BD4480645852F65DC8B2D72BD348A4E04ED Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232372e36382e302f32342d3234203d3e20313531313835.roa Signing time: Thu 25 Jun 2026 07:05:14 +0000 ROA not before: Thu 25 Jun 2026 07:00:14 +0000 ROA not after: Thu 24 Jun 2027 07:05:14 +0000 asID: 151185 IP address blocks: 43.227.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 15 Jul 2026 09:01:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:63:9b:d4:48:06:45:85:2f:65:dc:8b:2d:72:bd:34:8a:4e:04:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Jun 25 07:00:14 2026 GMT Not After : Jun 24 07:05:14 2027 GMT Subject: CN=BCDBE5C570BA8C350C167A0493C4F6A5E78AFBB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:61:64:ee:33:b3:07:a2:fa:f1:97:a1:5a:fe: ae:c5:9c:55:fe:a6:19:ed:15:ce:fd:7c:25:67:94: bd:3f:7a:8d:b2:66:aa:4a:ef:b2:a8:6b:92:af:e7: e3:34:b3:58:08:7e:0f:29:ab:0b:6f:4e:55:3f:d4: d7:da:c4:fa:1b:61:5b:68:82:9e:da:e2:c3:13:be: de:37:a8:38:b0:25:8d:4d:bc:bd:82:42:60:08:b0: 7b:dd:ab:23:53:fb:62:57:76:d8:bc:fa:8f:26:b4: 02:6d:82:7f:9c:79:d2:e0:f5:a3:ed:09:16:10:dc: 7a:63:c7:a8:9d:17:65:9d:af:e9:86:3c:20:c5:f1: 3e:c7:f6:52:14:03:d4:70:80:65:e4:3f:bf:eb:b1: ec:af:59:ce:b8:32:e1:7f:cd:21:8a:52:b8:1d:32: 12:d9:e6:a0:1b:ac:f1:ae:45:79:c0:28:c6:c9:8b: 66:9b:92:e2:7d:6b:86:2f:85:44:64:c7:84:da:e1: 21:d9:6f:25:41:de:99:d4:35:aa:95:90:17:85:10: 9e:fe:f3:8d:89:1c:27:1f:a0:92:51:53:83:f6:ad: a1:77:68:41:b4:76:f0:f4:ee:8b:3d:42:ac:1d:a7: a5:3f:67:5f:eb:ee:c6:29:2c:45:2c:ac:a8:46:5b: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:DB:E5:C5:70:BA:8C:35:0C:16:7A:04:93:C4:F6:A5:E7:8A:FB:B6 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232372e36382e302f32342d3234203d3e20313531313835.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.68.0/24 Signature Algorithm: sha256WithRSAEncryption 24:7a:d7:db:bf:bb:97:0a:36:f7:97:2b:13:99:38:ab:b2:1f: 3b:85:25:52:b3:60:0d:36:02:b7:43:17:4c:9a:fd:79:ef:9a: 7f:8c:c3:cf:65:4d:0d:c0:5a:59:b3:17:ed:99:93:09:3a:b5: 0c:4d:85:88:dd:55:60:a9:eb:52:58:0a:a3:84:3f:be:9f:2c: e0:a8:aa:a8:9e:a4:01:dc:fa:5f:fa:e5:28:24:96:50:dc:cd: 0c:a5:c1:53:3e:c6:ae:48:b3:40:72:c1:95:e3:26:97:d6:c6: 2f:a3:d6:f5:dd:94:f5:ac:83:65:43:8d:a2:88:e3:55:dd:8b: 50:82:ac:76:db:86:9d:b8:74:79:64:d0:77:ed:d8:35:40:e7: e1:e6:09:4a:b6:9c:a1:e8:4b:11:37:a5:1f:9f:d9:81:e9:e1: 44:77:33:66:4e:2b:65:34:ab:5c:6b:34:3b:ba:4e:f8:62:f5: 87:2d:8f:ac:76:da:68:db:33:f2:68:21:bf:7c:a8:1d:80:a6: 23:ea:bf:38:cd:39:1c:74:36:9b:da:b9:1a:73:4d:e9:ad:f6: 9e:d0:9d:f0:a7:d1:ad:47:33:be:d8:b2:9c:42:c4:05:e6:4f: 99:ff:66:0d:9a:35:36:b8:ea:ed:70:18:80:ba:ca:8a:8c:e5: 30:d5:04:a2 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUWWOb1EgGRYUvZdyLLXK9NIpOBO0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA2MjUwNzAwMTRaFw0yNzA2MjQwNzA1MTRaMDMxMTAvBgNV BAMTKEJDREJFNUM1NzBCQThDMzUwQzE2N0EwNDkzQzRGNkE1RTc4QUZCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTYWTuM7MHovrxl6Fa/q7FnFX+ phntFc79fCVnlL0/eo2yZqpK77Koa5Kv5+M0s1gIfg8pqwtvTlU/1NfaxPobYVto gp7a4sMTvt43qDiwJY1NvL2CQmAIsHvdqyNT+2JXdti8+o8mtAJtgn+cedLg9aPt CRYQ3Hpjx6idF2Wdr+mGPCDF8T7H9lIUA9RwgGXkP7/rseyvWc64MuF/zSGKUrgd MhLZ5qAbrPGuRXnAKMbJi2abkuJ9a4YvhURkx4Ta4SHZbyVB3pnUNaqVkBeFEJ7+ 842JHCcfoJJRU4P2raF3aEG0dvD07os9Qqwdp6U/Z1/r7sYpLEUsrKhGW4RXAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUvNvlxXC6jDUMFnoEk8T2peeK+7YwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NzJlMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzUzMTMxMzgzNS5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEACvjRDANBgkqhkiG9w0BAQsFAAOCAQEAJHrX27+7lwo295crE5k4q7If O4UlUrNgDTYCt0MXTJr9ee+af4zDz2VNDcBaWbMX7ZmTCTq1DE2FiN1VYKnrUlgK o4Q/vp8s4KiqqJ6kAdz6X/rlKCSWUNzNDKXBUz7GrkizQHLBleMml9bGL6PW9d2U 9ayDZUONoojjVd2LUIKsdtuGnbh0eWTQd+3YNUDn4eYJSracoehLETelH5/Zgenh RHczZk4rZTSrXGs0O7pO+GL1hy2PrHbaaNsz8mghv3yoHYCmI+q/OM05HHQ2m9q5 GnNN6a32ntCd8KfRrUczvtiynELEBeZPmf9mDZo1Nrjq7XAYgLrKiozlMNUEog== -----END CERTIFICATE-----Generated at Tue Jul 14 20:53:55 2026 by rpki-client