$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31322d3234203d3e203337393633.roa File: 34372e3131322e302e302f31322d3234203d3e203337393633.roa (raw, json) Hash identifier: XnzoRBbJbU4JSck0zmxm+ruNtxcM8ugi+pAaXFexVd8= Subject key identifier: 9B:E0:E3:D8:EC:39:62:67:51:AB:17:18:8C:3C:7D:BD:79:02:25:48 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 701A0C5586F49D6405C762DA440DA989BCCD914B Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31322d3234203d3e203337393633.roa Signing time: Wed 22 Apr 2026 08:51:40 +0000 ROA not before: Wed 22 Apr 2026 08:46:40 +0000 ROA not after: Wed 21 Apr 2027 08:51:40 +0000 asID: 37963 IP address blocks: 47.112.0.0/12 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 18:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:1a:0c:55:86:f4:9d:64:05:c7:62:da:44:0d:a9:89:bc:cd:91:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Apr 22 08:46:40 2026 GMT Not After : Apr 21 08:51:40 2027 GMT Subject: CN=9BE0E3D8EC39626751AB17188C3C7DBD79022548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:aa:4e:49:e8:75:07:89:dd:be:0e:23:a4:84: 99:b3:2f:11:65:eb:58:91:e5:61:73:9a:22:74:0e: ad:81:37:39:f5:f0:a8:47:39:75:bd:59:bc:33:36: be:fb:de:a9:3f:df:54:f9:c3:3e:13:2e:b2:0f:6a: 96:10:56:02:b4:7d:7e:4d:42:1f:6d:06:ac:5c:b2: cd:61:12:f6:52:33:58:ae:e4:81:81:91:04:e9:57: bc:9e:8c:fa:7e:8a:eb:85:f6:51:bc:9e:ce:15:b4: 27:07:82:85:66:29:d0:49:6e:e9:14:32:27:37:24: 60:ed:e9:4e:3f:b2:be:8f:9c:57:a2:3f:c7:30:b6: 3c:60:ac:75:25:6f:aa:19:99:2d:b4:8d:63:d1:a5: 66:71:32:43:24:77:c2:5f:73:48:a3:14:c3:4f:0e: ea:d1:e7:4f:31:50:6b:04:7c:cb:f4:58:f4:19:04: 8b:76:54:2f:46:bd:5f:59:e6:eb:18:78:61:19:e8: e6:3a:9a:42:b9:3e:85:0d:43:1a:7a:ef:b6:1c:6f: 40:4d:d8:30:42:36:43:a0:25:85:20:6f:f7:af:98: 45:c4:d6:0a:15:e0:ce:42:d6:14:a4:1a:b0:9c:f7: dd:b8:2b:d2:8e:76:b4:9c:0f:dc:81:a7:ae:2b:99: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:E0:E3:D8:EC:39:62:67:51:AB:17:18:8C:3C:7D:BD:79:02:25:48 X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e3131322e302e302f31322d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.112.0.0/12 Signature Algorithm: sha256WithRSAEncryption 79:70:91:07:23:16:62:d1:09:1e:8d:92:f7:d1:64:26:ac:fd: d9:54:e6:55:19:c6:55:f5:6f:2b:b7:9f:4b:fc:21:f2:cf:1b: 29:b6:1b:bb:4a:a6:74:52:f1:ad:ec:7d:af:54:eb:3e:a6:9f: 8e:dc:b3:d2:4e:02:1a:0e:e1:2d:68:d5:eb:8e:7d:54:f6:f8: e9:2c:53:61:26:1f:1f:fa:4d:fc:b2:6a:ec:ab:54:8c:67:b6: 10:fa:d1:c3:ae:2e:4f:79:00:c2:62:16:10:b5:0f:ef:c1:17: c6:50:57:5b:d6:fe:2b:67:1a:05:e3:bf:39:c9:26:28:d1:7c: dc:53:32:7b:7c:56:d1:17:7d:b4:f5:f0:7e:68:c6:e7:74:f0: 7b:04:21:93:28:e9:f4:9b:54:24:9f:8f:fc:bb:3a:b2:dc:c5: 4a:2c:5d:1c:18:12:4e:11:21:6a:6b:db:e2:66:c0:ed:90:b9: 90:15:cb:0c:ca:ca:60:7e:3a:08:42:e3:63:9b:12:7f:7f:ba: a5:70:a0:9e:21:5b:92:b6:6e:de:0a:ee:88:85:da:8b:08:77: ed:94:80:23:ef:fc:93:34:8f:66:f9:74:2f:78:7c:b8:76:10: 67:99:28:5f:6c:fb:13:a4:6f:49:e8:e3:7b:98:b1:a3:eb:15: da:b1:38:a9 -----BEGIN CERTIFICATE----- MIIFBDCCA+ygAwIBAgIUcBoMVYb0nWQFx2LaRA2pibzNkUswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjA0MjIwODQ2NDBaFw0yNzA0MjEwODUxNDBaMDMxMTAvBgNV BAMTKDlCRTBFM0Q4RUMzOTYyNjc1MUFCMTcxODhDM0M3REJENzkwMjI1NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qk5J6HUHid2+DiOkhJmzLxFl 61iR5WFzmiJ0Dq2BNzn18KhHOXW9WbwzNr773qk/31T5wz4TLrIPapYQVgK0fX5N Qh9tBqxcss1hEvZSM1iu5IGBkQTpV7yejPp+iuuF9lG8ns4VtCcHgoVmKdBJbukU Mic3JGDt6U4/sr6PnFeiP8cwtjxgrHUlb6oZmS20jWPRpWZxMkMkd8Jfc0ijFMNP DurR508xUGsEfMv0WPQZBIt2VC9GvV9Z5usYeGEZ6OY6mkK5PoUNQxp677Ycb0BN 2DBCNkOgJYUgb/evmEXE1goV4M5C1hSkGrCc9924K9KOdrScD9yBp64rmdyvAgMB AAGjggIOMIICCjAdBgNVHQ4EFgQUm+Dj2Ow5YmdRqxcYjDx9vXkCJUgwHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzEvMzQzNzJlMzEzMTMy MmUzMDJlMzAyZjMxMzIyZDMyMzQyMDNkM2UyMDMzMzczOTM2MzMucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD AwQvcDANBgkqhkiG9w0BAQsFAAOCAQEAeXCRByMWYtEJHo2S99FkJqz92VTmVRnG VfVvK7efS/wh8s8bKbYbu0qmdFLxrex9r1TrPqafjtyz0k4CGg7hLWjV6459VPb4 6SxTYSYfH/pN/LJq7KtUjGe2EPrRw64uT3kAwmIWELUP78EXxlBXW9b+K2caBeO/ OckmKNF83FMye3xW0Rd9tPXwfmjG53TwewQhkyjp9JtUJJ+P/Ls6stzFSixdHBgS ThEhamvb4mbA7ZC5kBXLDMrKYH46CELjY5sSf3+6pXCgniFbkrZu3gruiIXaiwh3 7ZSAI+/8kzSPZvl0L3h8uHYQZ5koX2z7E6RvSejje5ixo+sV2rE4qQ== -----END CERTIFICATE-----Generated at Tue Apr 28 08:04:43 2026 by rpki-client