$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa File: 34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa (raw, json) Hash identifier: 7ZEwYQHNTiMbSrqiXLL7Q56U2vDkT87WpvBGgULPBaw= Subject key identifier: 17:DE:B7:5D:C1:8F:70:F4:38:48:FA:61:DF:BC:EC:3E:27:5A:73:58 Certificate issuer: /CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Certificate serial: 05A7FF3512D0900B4FAA8B483E7CD36EAC4A1502 Authority key identifier: EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa Signing time: Thu 09 Apr 2026 02:00:18 +0000 ROA not before: Thu 09 Apr 2026 01:55:18 +0000 ROA not after: Thu 08 Apr 2027 02:00:18 +0000 asID: 131506 IP address blocks: 43.225.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 12:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:a7:ff:35:12:d0:90:0b:4f:aa:8b:48:3e:7c:d3:6e:ac:4a:15:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163 Validity Not Before: Apr 9 01:55:18 2026 GMT Not After : Apr 8 02:00:18 2027 GMT Subject: CN=17DEB75DC18F70F43848FA61DFBCEC3E275A7358 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4a:a1:1c:4b:69:a2:13:5a:0a:70:dc:48:a1: e0:41:85:65:c3:14:89:bd:f2:bd:9f:d7:d1:83:7b: 8b:f0:23:d7:c4:c3:ad:7f:8c:81:27:3e:32:fe:94: 2d:60:3f:ae:65:7d:de:89:0d:29:f1:b8:4b:e7:da: 4f:83:ff:4b:c1:15:1f:32:b3:3c:0f:10:ff:c5:e8: 2b:15:d8:75:19:82:2c:0c:43:7e:73:08:d9:4d:9a: a1:69:09:ca:0d:6d:a0:2d:d2:c3:4d:60:41:6e:de: 28:d2:d5:98:1c:cd:b9:dd:d5:23:fc:df:0e:f1:7e: 37:98:d8:c1:54:41:88:1f:43:61:75:bb:31:2a:a8: e0:d7:70:ae:fa:b9:2f:6f:52:32:1e:60:40:20:38: 87:47:6f:ce:d2:9a:84:c5:72:11:f9:99:06:1a:3c: 75:c1:ec:e9:db:3d:34:55:7e:ba:4b:8f:17:5c:ca: 08:dd:55:74:92:73:52:42:26:d4:73:e6:64:11:a5: b3:cd:c3:e0:09:74:b6:eb:dc:ea:42:02:c3:58:4e: 5d:1a:d4:5e:ab:1c:86:4a:27:f5:8c:3e:3a:73:55: ff:b8:68:ab:b9:7e:5a:69:c9:5d:89:7f:80:6c:cc: c2:67:24:b0:3b:fe:d4:5e:c8:97:07:28:26:9e:8e: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DE:B7:5D:C1:8F:70:F4:38:48:FA:61:DF:BC:EC:3E:27:5A:73:58 X509v3 Authority Key Identifier: keyid:EE:AF:21:F2:1F:95:1D:FF:CE:8E:B9:CF:29:6F:8F:92:4D:6D:51:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/EEAF21F21F951DFFCE8EB9CF296F8F924D6D5163.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094436162547744770/0/34332e3232352e3230382e302f32342d3234203d3e20313331353036.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.225.208.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:98:61:64:a6:ac:40:9d:0b:87:2c:57:67:d0:02:4a:b2:bb: 7b:60:81:2c:41:67:5d:92:dc:ea:0f:21:83:21:04:25:61:70: 6d:d5:3b:a8:7d:1b:72:6c:c3:fc:35:a2:0f:f1:38:ca:12:9c: ee:30:ef:c5:2c:5e:d9:63:13:fb:0c:e3:68:1d:71:f6:6c:59: a4:a0:72:d9:fc:64:3f:bc:e2:84:3e:4b:08:1e:1e:b7:54:6d: fe:09:80:93:c7:b6:2c:e1:17:82:2d:44:db:31:ec:f3:fe:92: 39:97:f1:9e:52:a5:7d:fb:ef:d4:4a:05:c2:72:45:e1:06:c1: 1c:53:df:fb:74:01:03:34:81:73:75:b8:d1:a8:ea:49:7d:37: f9:b6:71:fe:47:0b:08:04:56:ca:57:ad:f4:f4:08:a8:60:97: 79:6a:55:29:65:5b:71:66:66:8c:02:3f:f9:2d:6b:fc:8e:40: f7:bc:18:a8:d6:23:80:8a:e1:22:4f:22:5e:47:1b:3f:5d:52: 9b:16:0d:6f:3c:a8:a1:d0:c2:45:fe:3d:c1:05:60:c8:9e:89: 7f:98:86:47:25:02:54:d5:d2:ba:0b:7c:79:dd:1b:37:9d:64: 02:aa:bb:b8:0f:01:ac:3e:2d:c6:4e:d3:3f:50:92:7f:ae:79: 29:f6:97:a8 -----BEGIN CERTIFICATE----- MIIFDTCCA/WgAwIBAgIUBaf/NRLQkAtPqotIPnzTbqxKFQIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0 RDZENTE2MzAeFw0yNjA0MDkwMTU1MThaFw0yNzA0MDgwMjAwMThaMDMxMTAvBgNV BAMTKDE3REVCNzVEQzE4RjcwRjQzODQ4RkE2MURGQkNFQzNFMjc1QTczNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQSqEcS2miE1oKcNxIoeBBhWXD FIm98r2f19GDe4vwI9fEw61/jIEnPjL+lC1gP65lfd6JDSnxuEvn2k+D/0vBFR8y szwPEP/F6CsV2HUZgiwMQ35zCNlNmqFpCcoNbaAt0sNNYEFu3ijS1Zgczbnd1SP8 3w7xfjeY2MFUQYgfQ2F1uzEqqODXcK76uS9vUjIeYEAgOIdHb87SmoTFchH5mQYa PHXB7OnbPTRVfrpLjxdcygjdVXSSc1JCJtRz5mQRpbPNw+AJdLbr3OpCAsNYTl0a 1F6rHIZKJ/WMPjpzVf+4aKu5flppyV2Jf4BszMJnJLA7/tReyJcHKCaejt3VAgMB AAGjggIXMIICEzAdBgNVHQ4EFgQUF963XcGPcPQ4SPph37zsPidac1gwHwYDVR0j BBgwFoAU7q8h8h+VHf/OjrnPKW+Pkk1tUWMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDQzNjE2MjU0Nzc0NDc3MC8wL0VFQUYyMUYyMUY5NTFERkZDRThFQjlDRjI5NkY4 RjkyNEQ2RDUxNjMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvRUVBRjIxRjIxRjk1MURGRkNFOEVCOUNGMjk2RjhGOTI0RDZENTE2My5jZXIw gZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzALhnJyc3luYzovL3Jwa2ktcnBz LmNubmljLmNuL3JlcG8vQTEwOTQ0MzYxNjI1NDc3NDQ3NzAvMC8zNDMzMmUzMjMy MzUyZTMyMzAzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzMzMTM1MzAzNi5y b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w DAQCAAEwBgMEACvh0DANBgkqhkiG9w0BAQsFAAOCAQEAjphhZKasQJ0LhyxXZ9AC SrK7e2CBLEFnXZLc6g8hgyEEJWFwbdU7qH0bcmzD/DWiD/E4yhKc7jDvxSxe2WMT +wzjaB1x9mxZpKBy2fxkP7zihD5LCB4et1Rt/gmAk8e2LOEXgi1E2zHs8/6SOZfx nlKlffvv1EoFwnJF4QbBHFPf+3QBAzSBc3W40ajqSX03+bZx/kcLCARWylet9PQI qGCXeWpVKWVbcWZmjAI/+S1r/I5A97wYqNYjgIrhIk8iXkcbP11SmxYNbzyoodDC Rf49wQVgyJ6Jf5iGRyUCVNXSugt8ed0bN51kAqq7uA8BrD4txk7TP1CSf655KfaX qA== -----END CERTIFICATE-----Generated at Mon Apr 13 15:20:34 2026 by rpki-client