$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/0/34322e39362e3132382e302f31372d3234203d3e203337393633.roa File: 34322e39362e3132382e302f31372d3234203d3e203337393633.roa (raw, json) Hash identifier: ++8O7Yy9r71Z40KkFC5fn2klXbDye9Wq9PHfdLP5VqQ= Subject key identifier: 27:0B:FB:CF:BC:8D:0E:3A:EB:03:94:2C:79:6B:F0:AB:0D:10:3F:C3 Certificate issuer: /CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Certificate serial: 0CD1EB29D3500ED8F12B68671F09BDE4BC7C10E4 Authority key identifier: B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/34322e39362e3132382e302f31372d3234203d3e203337393633.roa Signing time: Tue 21 Apr 2026 02:47:09 +0000 ROA not before: Tue 21 Apr 2026 02:42:09 +0000 ROA not after: Tue 20 Apr 2027 02:47:09 +0000 asID: 37963 IP address blocks: 42.96.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:19:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:d1:eb:29:d3:50:0e:d8:f1:2b:68:67:1f:09:bd:e4:bc:7c:10:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3CAFB59F10B03AD2106E8215DBB903F157D0C8E Validity Not Before: Apr 21 02:42:09 2026 GMT Not After : Apr 20 02:47:09 2027 GMT Subject: CN=270BFBCFBC8D0E3AEB03942C796BF0AB0D103FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a0:18:91:7f:44:0c:3e:0c:a0:80:a5:8d:58: 3c:aa:d8:72:55:58:a9:cf:8c:f0:7d:e8:92:c5:8b: 75:53:6d:66:0b:81:95:96:f3:70:85:7d:37:e9:e5: c3:8e:62:4a:1c:cb:d2:2f:21:53:c8:ee:db:dc:2e: 8f:7a:35:d7:97:fe:3a:45:c8:b4:a5:14:ac:c3:9e: fd:7c:5c:81:3e:bd:be:ef:02:33:e7:99:4e:7b:78: 20:2e:b5:a9:9f:39:36:f2:95:a6:69:c6:8d:ef:88: a7:16:b3:5b:4c:e4:b9:71:bc:2c:dc:19:7b:8b:e0: d7:e5:c9:56:0f:cb:65:f1:81:fe:89:78:6b:71:b1: 14:a9:2d:39:2f:0d:d5:02:66:c7:a5:fb:2c:41:e5: 02:55:02:c4:bd:fe:9e:79:38:65:af:69:1e:b0:31: 27:d7:ec:f1:37:0f:98:9d:b7:31:b2:2d:13:fc:64: cf:93:c4:2d:f0:97:91:23:d1:b6:5b:a7:56:81:a1: c4:56:4a:ec:2d:6f:54:dc:37:a8:7f:51:e3:99:85: 43:3a:d0:53:02:a2:55:d4:27:94:4d:ea:45:03:8e: eb:d8:e0:a5:53:ce:e9:ee:b2:74:f0:c8:a1:7c:08: 59:79:45:60:30:cb:12:56:a3:ad:b3:bb:d2:e2:99: ed:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0B:FB:CF:BC:8D:0E:3A:EB:03:94:2C:79:6B:F0:AB:0D:10:3F:C3 X509v3 Authority Key Identifier: keyid:B3:CA:FB:59:F1:0B:03:AD:21:06:E8:21:5D:BB:90:3F:15:7D:0C:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/B3CAFB59F10B03AD2106E8215DBB903F157D0C8E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/0/34322e39362e3132382e302f31372d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 42.96.128.0/17 Signature Algorithm: sha256WithRSAEncryption a7:f9:50:91:4a:26:d3:ed:76:35:ff:65:82:b2:43:6c:4e:de: 2b:be:2e:91:ec:0e:87:6f:54:9a:75:8d:47:9b:a2:52:5a:f0: 0e:e4:91:62:2b:cd:9e:0e:fa:3a:b0:0a:cf:49:45:d9:e0:48: fa:af:0a:94:62:20:23:84:68:9a:c0:92:eb:b7:5e:01:0a:db: b9:9e:b8:13:0c:81:c3:30:bc:b7:b4:90:eb:ad:7f:13:a1:0b: b7:63:b1:67:a6:44:62:7f:8b:7c:48:30:d5:e0:21:20:05:69: 4a:5a:e5:c2:f2:bc:5b:32:6e:aa:bf:6b:07:08:4c:f4:0c:f6: 25:1e:0b:72:13:f6:d4:45:9a:2f:22:77:4a:d5:1c:16:5f:48: 90:f4:22:91:34:74:7b:a9:9b:9c:37:91:74:43:5b:1b:ef:53: 0a:6d:ba:d7:ca:c0:05:7e:58:53:c4:01:be:da:c1:ed:94:8e: c8:e8:86:a7:c9:bc:43:3f:17:e0:fb:3e:68:67:d0:9e:f3:3f: 66:a5:cf:59:17:c8:48:0c:ee:54:5e:0a:ae:d4:da:32:1b:4d: 45:e4:6e:ed:41:b1:6c:9d:07:04:2b:67:8d:38:19:d8:b4:bb: 80:71:de:ef:c4:71:9e:c1:51:e7:ee:15:50:9b:1a:08:e4:f4: 63:a6:f2:c6 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUDNHrKdNQDtjxK2hnHwm95Lx8EOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0Yx NTdEMEM4RTAeFw0yNjA0MjEwMjQyMDlaFw0yNzA0MjAwMjQ3MDlaMDMxMTAvBgNV BAMTKDI3MEJGQkNGQkM4RDBFM0FFQjAzOTQyQzc5NkJGMEFCMEQxMDNGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLoBiRf0QMPgyggKWNWDyq2HJV WKnPjPB96JLFi3VTbWYLgZWW83CFfTfp5cOOYkocy9IvIVPI7tvcLo96NdeX/jpF yLSlFKzDnv18XIE+vb7vAjPnmU57eCAutamfOTbylaZpxo3viKcWs1tM5LlxvCzc GXuL4NflyVYPy2Xxgf6JeGtxsRSpLTkvDdUCZsel+yxB5QJVAsS9/p55OGWvaR6w MSfX7PE3D5idtzGyLRP8ZM+TxC3wl5Ej0bZbp1aBocRWSuwtb1TcN6h/UeOZhUM6 0FMColXUJ5RN6kUDjuvY4KVTzunusnTwyKF8CFl5RWAwyxJWo62zu9Lime2fAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUJwv7z7yNDjrrA5QseWvwqw0QP8MwHwYDVR0j BBgwFoAUs8r7WfELA60hBughXbuQPxV9DI4wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8wL0IzQ0FGQjU5RjEwQjAzQUQyMTA2RTgyMTVEQkI5 MDNGMTU3RDBDOEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQjNDQUZCNTlGMTBCMDNBRDIxMDZFODIxNURCQjkwM0YxNTdEMEM4RS5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzAvMzQzMjJlMzkzNjJl MzEzMjM4MmUzMDJmMzEzNzJkMzIzNDIwM2QzZTIwMzMzNzM5MzYzMy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEBypggDANBgkqhkiG9w0BAQsFAAOCAQEAp/lQkUom0+12Nf9lgrJDbE7eK74u kewOh29UmnWNR5uiUlrwDuSRYivNng76OrAKz0lF2eBI+q8KlGIgI4RomsCS67de AQrbuZ64EwyBwzC8t7SQ661/E6ELt2OxZ6ZEYn+LfEgw1eAhIAVpSlrlwvK8WzJu qr9rBwhM9Az2JR4LchP21EWaLyJ3StUcFl9IkPQikTR0e6mbnDeRdENbG+9TCm26 18rABX5YU8QBvtrB7ZSOyOiGp8m8Qz8X4Ps+aGfQnvM/ZqXPWRfISAzuVF4KrtTa MhtNReRu7UGxbJ0HBCtnjTgZ2LS7gHHe78RxnsFR5+4VUJsaCOT0Y6byxg== -----END CERTIFICATE-----Generated at Wed Apr 22 06:42:11 2026 by rpki-client