$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e39382e302e302f31352d3234203d3e203337393633.roa File: 34372e39382e302e302f31352d3234203d3e203337393633.roa (raw, json) Hash identifier: iwjVE24waqNRMxAnsWWloR6ZemTe2jtU1nDhdHBmFDE= Subject key identifier: 9B:60:D5:C3:37:4A:76:02:85:FF:AF:02:58:69:11:CC:12:66:33:85 Certificate issuer: /CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Certificate serial: 33AEC832F8CA3AA442A075D9EE4F6C2290A56049 Authority key identifier: A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e39382e302e302f31352d3234203d3e203337393633.roa Signing time: Mon 20 Apr 2026 09:02:58 +0000 ROA not before: Mon 20 Apr 2026 08:57:58 +0000 ROA not after: Mon 19 Apr 2027 09:02:58 +0000 asID: 37963 IP address blocks: 47.98.0.0/15 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/CB0214A5C404D6F840433B120CACBB5B8C59E613.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ywIUpcQE1vhAQzsSDKy7W4xZ5hM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Apr 2026 18:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ae:c8:32:f8:ca:3a:a4:42:a0:75:d9:ee:4f:6c:22:90:a5:60:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5B2B14D97513B6C0C82B1E540703EB912DFD229 Validity Not Before: Apr 20 08:57:58 2026 GMT Not After : Apr 19 09:02:58 2027 GMT Subject: CN=9B60D5C3374A760285FFAF02586911CC12663385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:0f:49:df:01:13:5c:2e:5a:ac:72:52:33:7f: 28:89:48:bc:e8:a4:93:89:1b:51:35:9b:b2:73:a6: c6:0c:b3:55:1a:ab:01:51:e1:3a:6f:f3:35:24:8a: 6a:45:ac:06:36:88:c3:0c:1f:52:46:52:49:93:a9: 24:23:c6:b3:4b:fc:20:5b:97:b4:25:ae:e3:ff:7e: 68:7d:6e:2c:1a:f2:1b:16:26:45:d6:b1:bb:33:0e: ed:af:b9:a4:aa:53:e5:fb:c3:ab:59:9f:7e:77:06: 30:1a:62:1b:f9:2d:31:98:cf:3a:ec:08:41:fc:59: 8d:5b:e5:8a:9d:61:16:31:33:07:22:df:86:f0:41: f3:21:19:31:09:cc:50:6c:db:cd:c0:fa:81:3f:01: 2f:72:42:ca:a7:e7:e7:09:df:56:ab:94:d7:ff:f5: 04:7d:ac:e6:b1:c0:02:db:cd:b9:18:ba:3b:ab:f3: 66:8e:58:df:4f:b6:91:1b:bd:94:21:ea:12:e6:fb: 54:16:37:aa:3a:16:5e:8b:ac:14:4b:d4:2d:76:ea: 01:dd:4e:ce:2c:41:cd:e6:f7:90:b3:b2:33:f1:38: 56:95:51:40:17:c3:6a:15:4e:85:52:95:04:5f:2e: fc:8b:1b:f1:f6:b7:17:89:7d:56:0e:88:ff:2d:04: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:60:D5:C3:37:4A:76:02:85:FF:AF:02:58:69:11:CC:12:66:33:85 X509v3 Authority Key Identifier: keyid:A5:B2:B1:4D:97:51:3B:6C:0C:82:B1:E5:40:70:3E:B9:12:DF:D2:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/A5B2B14D97513B6C0C82B1E540703EB912DFD229.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/0/A5B2B14D97513B6C0C82B1E540703EB912DFD229.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1065887644090630145/1/34372e39382e302e302f31352d3234203d3e203337393633.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 47.98.0.0/15 Signature Algorithm: sha256WithRSAEncryption 97:bf:b8:22:7c:9b:ff:cb:24:c8:b9:53:ca:e0:fa:c1:37:1f: 26:51:31:76:10:a2:49:7f:d1:ea:89:fa:e3:8c:93:c2:31:fc: 33:d0:af:49:4c:81:6d:f2:0e:19:15:a6:dc:e9:fb:5f:47:ff: 30:8d:b5:db:c0:86:c8:b8:5f:d3:e2:47:73:c8:bd:43:3f:f8: fa:29:b9:d5:1f:93:de:7c:40:87:f0:ea:46:16:38:9f:4c:0d: 2f:6c:b9:91:f7:92:35:87:85:58:d5:a0:c8:5d:f9:e1:3f:d2: 4b:2b:3b:53:7b:45:00:11:1c:fb:a6:ca:c6:70:e7:d3:30:ef: 3c:f4:f0:00:99:2d:30:d0:c8:fa:d3:60:b2:8d:d5:79:a8:6a: d9:e4:45:fa:26:3a:8a:3b:52:c6:aa:bd:6d:d6:f7:53:9c:5a: 13:dc:17:49:76:e1:e7:63:3f:4f:fa:d9:1d:f4:b0:f4:00:b0: be:4b:45:fb:f2:52:e3:87:40:53:f5:34:39:28:dc:08:34:b4: 7d:c3:47:ab:10:ef:13:d9:0b:e1:95:13:c0:52:b7:14:36:e5: 14:8a:f9:0d:7e:0c:e1:2b:91:ed:25:48:3e:6d:81:a1:d5:0c: 58:1d:02:b7:1a:7a:6b:a1:96:d2:c3:0a:c1:f3:1b:d0:29:17: 7b:06:fb:4f -----BEGIN CERTIFICATE----- MIIFAjCCA+qgAwIBAgIUM67IMvjKOqRCoHXZ7k9sIpClYEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkx MkRGRDIyOTAeFw0yNjA0MjAwODU3NThaFw0yNzA0MTkwOTAyNThaMDMxMTAvBgNV BAMTKDlCNjBENUMzMzc0QTc2MDI4NUZGQUYwMjU4NjkxMUNDMTI2NjMzODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfD0nfARNcLlqsclIzfyiJSLzo pJOJG1E1m7JzpsYMs1UaqwFR4Tpv8zUkimpFrAY2iMMMH1JGUkmTqSQjxrNL/CBb l7QlruP/fmh9biwa8hsWJkXWsbszDu2vuaSqU+X7w6tZn353BjAaYhv5LTGYzzrs CEH8WY1b5YqdYRYxMwci34bwQfMhGTEJzFBs283A+oE/AS9yQsqn5+cJ31arlNf/ 9QR9rOaxwALbzbkYujur82aOWN9PtpEbvZQh6hLm+1QWN6o6Fl6LrBRL1C126gHd Ts4sQc3m95CzsjPxOFaVUUAXw2oVToVSlQRfLvyLG/H2txeJfVYOiP8tBEapAgMB AAGjggIMMIICCDAdBgNVHQ4EFgQUm2DVwzdKdgKF/68CWGkRzBJmM4UwHwYDVR0j BBgwFoAUpbKxTZdRO2wMgrHlQHA+uRLf0ikwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA2 NTg4NzY0NDA5MDYzMDE0NS8xL0E1QjJCMTREOTc1MTNCNkMwQzgyQjFFNTQwNzAz RUI5MTJERkQyMjkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzAvQTVCMkIxNEQ5NzUxM0I2QzBDODJCMUU1NDA3MDNFQjkxMkRGRDIyOS5jZXIw gYYGCCsGAQUFBwELBHoweDB2BggrBgEFBQcwC4ZqcnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDY1ODg3NjQ0MDkwNjMwMTQ1LzEvMzQzNzJlMzkzODJl MzAyZTMwMmYzMTM1MmQzMjM0MjAzZDNlMjAzMzM3MzkzNjMzLnJvYTAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMB L2IwDQYJKoZIhvcNAQELBQADggEBAJe/uCJ8m//LJMi5U8rg+sE3HyZRMXYQokl/ 0eqJ+uOMk8Ix/DPQr0lMgW3yDhkVptzp+19H/zCNtdvAhsi4X9PiR3PIvUM/+Pop udUfk958QIfw6kYWOJ9MDS9suZH3kjWHhVjVoMhd+eE/0ksrO1N7RQARHPumysZw 59Mw7zz08ACZLTDQyPrTYLKN1XmoatnkRfomOoo7UsaqvW3W91OcWhPcF0l24edj P0/62R30sPQAsL5LRfvyUuOHQFP1NDko3Ag0tH3DR6sQ7xPZC+GVE8BStxQ25RSK +Q1+DOErke0lSD5tgaHVDFgdArcaemuhltLDCsHzG9ApF3sG+08= -----END CERTIFICATE-----Generated at Tue Apr 28 08:04:38 2026 by rpki-client