$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232372e38302e302f32302d3332203d3e20313531323633.roa File: 34332e3232372e38302e302f32302d3332203d3e20313531323633.roa (raw, json) Hash identifier: 4jkS5M6HasSXGCQpsin8FoCCpuMNdc0/Fz8bW9dxTkU= Subject key identifier: 90:28:F4:C5:E0:6F:18:CF:B0:14:CB:7F:AC:25:30:FD:D5:E1:F3:A2 Certificate issuer: /CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Certificate serial: 5445CE50EEB3AC00CEFADD6AA4E6E2565716B412 Authority key identifier: DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232372e38302e302f32302d3332203d3e20313531323633.roa Signing time: Fri 10 Apr 2026 08:43:54 +0000 ROA not before: Fri 10 Apr 2026 08:38:54 +0000 ROA not after: Fri 09 Apr 2027 08:43:54 +0000 asID: 151263 IP address blocks: 43.227.80.0/20 maxlen: 32 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 11:49:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:45:ce:50:ee:b3:ac:00:ce:fa:dd:6a:a4:e6:e2:56:57:16:b4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DDBA616F96D9C2CD7F7CAB692F9EFE7666680138 Validity Not Before: Apr 10 08:38:54 2026 GMT Not After : Apr 9 08:43:54 2027 GMT Subject: CN=9028F4C5E06F18CFB014CB7FAC2530FDD5E1F3A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a0:6b:7a:1e:d1:de:05:5f:d4:b7:43:35:b7: 66:b2:67:46:a3:3f:98:c1:95:99:5e:80:99:54:f8: 15:74:97:80:37:26:a3:61:09:f2:f6:a8:77:f4:a7: 06:99:12:24:01:f3:a6:b1:9a:ed:d6:80:2a:97:c2: 13:99:a9:d9:02:b4:f0:86:f9:ce:66:f5:28:d8:16: a5:f2:6b:b4:ed:d1:e7:5f:83:45:95:29:5d:69:07: 77:c9:1e:47:1b:37:3b:0b:45:43:2b:cf:69:b2:fa: 6f:f6:e3:cd:c6:89:1d:32:04:80:4c:45:f4:88:86: f1:bc:15:d9:0b:6b:67:94:0f:65:37:1f:d3:30:06: a9:74:82:bb:5e:c6:04:8f:cd:61:fb:da:31:c6:f5: 75:98:95:86:28:3f:d3:88:be:6c:06:53:75:25:23: 96:c5:14:e3:3f:f6:a6:74:ad:67:63:ce:a5:a7:67: f4:50:93:e8:2b:4a:eb:69:81:b7:a9:df:38:e6:d0: 98:cf:34:72:7b:c5:0a:36:75:a6:38:8f:c9:54:73: 60:ac:ad:80:77:d3:cb:91:1f:57:10:95:72:b5:76: 69:19:60:52:f2:37:0f:36:19:0a:7d:a0:ed:7c:13: 86:2b:80:cb:c0:2a:1b:83:dc:e1:8d:6f:88:da:b7: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:28:F4:C5:E0:6F:18:CF:B0:14:CB:7F:AC:25:30:FD:D5:E1:F3:A2 X509v3 Authority Key Identifier: keyid:DD:BA:61:6F:96:D9:C2:CD:7F:7C:AB:69:2F:9E:FE:76:66:68:01:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/DDBA616F96D9C2CD7F7CAB692F9EFE7666680138.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065585649345822722/0/34332e3232372e38302e302f32302d3332203d3e20313531323633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.80.0/20 Signature Algorithm: sha256WithRSAEncryption a9:4e:9d:11:d0:16:e0:e7:2e:50:75:27:3e:a6:79:bd:3e:4a: bf:80:ad:8b:a3:30:cd:84:37:d4:1f:f3:3f:f0:34:fb:ac:cb: 3b:5d:cb:40:14:f4:af:17:65:ea:e5:cf:b1:ef:0b:53:81:e6: 7b:5a:0b:9c:84:c0:d2:f0:96:54:69:46:b3:c0:80:cf:b9:49: 15:06:c5:ce:03:ce:59:cc:a5:99:dc:fd:11:76:c2:41:68:5d: a3:6e:68:c2:97:fa:89:91:5b:dc:87:53:15:f2:29:8b:48:3e: 02:97:c2:84:32:44:f1:54:86:97:b4:d2:65:0c:73:10:10:4f: a0:b8:b5:42:25:55:71:39:89:23:9d:c5:ba:36:43:c6:88:94: 98:cc:09:b1:3e:7c:9b:46:7e:42:34:ec:32:1a:a1:10:a7:a9: 1a:05:0b:0f:10:8e:16:c2:ee:d0:5b:f8:ca:2f:0a:e9:80:8a: 34:95:af:cd:a3:d1:28:d6:9e:d8:ae:ae:ca:a4:4a:f1:14:9e: ac:81:66:6c:91:57:33:3b:2c:31:d1:a1:9e:d9:8e:dd:bc:ff: 0b:d9:88:87:71:91:cc:d1:2a:c8:c9:1c:34:bf:23:1b:4a:4f: 83:08:3b:63:6b:ae:22:83:78:29:05:53:13:4a:5c:f6:5b:5a: 1a:69:08:95 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUVEXOUO6zrADO+t1qpObiVlcWtBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2 NjY4MDEzODAeFw0yNjA0MTAwODM4NTRaFw0yNzA0MDkwODQzNTRaMDMxMTAvBgNV BAMTKDkwMjhGNEM1RTA2RjE4Q0ZCMDE0Q0I3RkFDMjUzMEZERDVFMUYzQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMoGt6HtHeBV/Ut0M1t2ayZ0aj P5jBlZlegJlU+BV0l4A3JqNhCfL2qHf0pwaZEiQB86axmu3WgCqXwhOZqdkCtPCG +c5m9SjYFqXya7Tt0edfg0WVKV1pB3fJHkcbNzsLRUMrz2my+m/2483GiR0yBIBM RfSIhvG8FdkLa2eUD2U3H9MwBql0grtexgSPzWH72jHG9XWYlYYoP9OIvmwGU3Ul I5bFFOM/9qZ0rWdjzqWnZ/RQk+grSutpgbep3zjm0JjPNHJ7xQo2daY4j8lUc2Cs rYB308uRH1cQlXK1dmkZYFLyNw82GQp9oO18E4YrgMvAKhuD3OGNb4jat+RhAgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUkCj0xeBvGM+wFMt/rCUw/dXh86IwHwYDVR0j BBgwFoAU3bphb5bZws1/fKtpL57+dmZoATgwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTU4NTY0OTM0NTgyMjcyMi8wL0REQkE2MTZGOTZEOUMyQ0Q3RjdDQUI2OTJGOUVG RTc2NjY2ODAxMzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRERCQTYxNkY5NkQ5QzJDRDdGN0NBQjY5MkY5RUZFNzY2NjY4MDEzOC5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA2NTU4NTY0OTM0NTgyMjcyMi8wLzM0MzMyZTMyMzIz NzJlMzgzMDJlMzAyZjMyMzAyZDMzMzIyMDNkM2UyMDMxMzUzMTMyMzYzMy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEBCvjUDANBgkqhkiG9w0BAQsFAAOCAQEAqU6dEdAW4OcuUHUnPqZ5vT5K v4Cti6MwzYQ31B/zP/A0+6zLO13LQBT0rxdl6uXPse8LU4Hme1oLnITA0vCWVGlG s8CAz7lJFQbFzgPOWcylmdz9EXbCQWhdo25owpf6iZFb3IdTFfIpi0g+ApfChDJE 8VSGl7TSZQxzEBBPoLi1QiVVcTmJI53FujZDxoiUmMwJsT58m0Z+QjTsMhqhEKep GgULDxCOFsLu0Fv4yi8K6YCKNJWvzaPRKNae2K6uyqRK8RSerIFmbJFXMzssMdGh ntmO3bz/C9mIh3GRzNEqyMkcNL8jG0pPgwg7Y2uuIoN4KQVTE0pc9ltaGmkIlQ== -----END CERTIFICATE-----Generated at Mon Apr 13 12:23:31 2026 by rpki-client