$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1094874090583359489/0/34332e3235352e36382e302f32322d3232203d3e203633353831.roa File: 34332e3235352e36382e302f32322d3232203d3e203633353831.roa (raw, json) Hash identifier: vUyKbSrm/jlpu3TklPx1U6F0V6/+jpkyBlDOC/rJv1k= Subject key identifier: 83:B5:F3:32:A4:4F:A2:98:13:88:27:81:F7:B5:37:F3:04:26:5C:46 Certificate issuer: /CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Certificate serial: 53EAC6D91AD5CD8EE882409A23E863B33FFF0AA8 Authority key identifier: 5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/34332e3235352e36382e302f32322d3232203d3e203633353831.roa Signing time: Fri 10 Apr 2026 07:45:49 +0000 ROA not before: Fri 10 Apr 2026 07:40:49 +0000 ROA not after: Fri 09 Apr 2027 07:45:49 +0000 asID: 63581 IP address blocks: 43.255.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 13 Apr 2026 21:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ea:c6:d9:1a:d5:cd:8e:e8:82:40:9a:23:e8:63:b3:3f:ff:0a:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F34DAD9FF1D8B00C9B687A71C090794B9E91E93 Validity Not Before: Apr 10 07:40:49 2026 GMT Not After : Apr 9 07:45:49 2027 GMT Subject: CN=83B5F332A44FA29813882781F7B537F304265C46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:be:30:5d:fa:5c:bd:5d:89:56:be:47:8e:84: 23:72:1e:70:02:3e:7c:b6:1b:69:17:bb:10:e6:25: ac:ea:81:5f:68:36:03:17:63:2a:6a:d1:b2:01:64: 08:30:df:3e:a0:a1:bd:82:77:5c:49:ba:23:c9:41: f4:3b:5f:d6:cb:84:b6:1c:e6:9e:61:c4:f6:7a:98: ad:52:e3:74:fa:73:7a:8f:b6:9e:86:d4:9d:b2:83: 68:4a:29:82:13:5d:3a:73:c8:98:52:2b:b0:3a:25: 41:f3:10:f1:34:7d:42:53:79:3c:94:f5:be:b5:53: d9:8d:0e:08:13:e2:c8:d7:c8:f5:92:28:7c:8d:94: a6:af:b9:84:27:39:be:e8:f3:1b:b6:bd:4c:11:0f: ec:74:01:cc:7e:d6:8d:c7:90:45:d9:db:92:70:58: f8:5f:e7:9f:25:7b:c0:c8:1a:8d:09:56:57:8a:95: 1e:3a:db:55:2a:b7:ff:d1:e1:01:c8:84:fb:b0:8d: 8c:88:3f:ed:8c:3f:30:ce:4d:f7:81:ba:83:b2:fe: e3:59:eb:b5:8f:eb:01:1f:27:3b:46:83:7e:89:ed: 84:db:f0:5e:4f:df:be:e6:cb:ea:2a:18:9d:c2:a2: 78:58:75:22:ae:72:83:0f:17:dd:5d:26:50:ac:0c: a1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:B5:F3:32:A4:4F:A2:98:13:88:27:81:F7:B5:37:F3:04:26:5C:46 X509v3 Authority Key Identifier: keyid:5F:34:DA:D9:FF:1D:8B:00:C9:B6:87:A7:1C:09:07:94:B9:E9:1E:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5F34DAD9FF1D8B00C9B687A71C090794B9E91E93.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1094874090583359489/0/34332e3235352e36382e302f32322d3232203d3e203633353831.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.255.68.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:11:db:35:73:ef:66:09:dd:f6:a4:79:7b:7b:4e:1c:1f:22: 68:20:7b:f0:5a:93:7a:51:32:5c:42:65:82:83:6e:ea:e7:31: 8a:a6:6e:ca:ba:51:51:53:11:ef:d1:f4:d8:48:da:fd:bc:31: a0:f8:2e:39:47:b2:39:19:c1:55:a6:6d:e5:f1:1c:21:4e:15: bd:1c:01:78:47:82:35:74:77:fd:bc:5a:27:83:2f:3b:f9:8c: 9a:cb:d5:45:af:f5:ed:b9:93:01:c8:e2:82:da:65:68:f3:66: 90:0e:dc:2f:14:f2:9d:04:77:e1:b9:f3:f5:57:86:73:f4:cc: 5c:f4:79:c4:84:c4:2a:9a:cd:60:2f:f2:59:88:46:ce:79:bb: 70:f3:29:80:2d:0c:53:4b:56:39:9f:95:27:8e:3d:63:22:1f: 43:2a:74:bd:62:3f:a8:aa:85:c6:1b:4e:63:f7:8c:1c:69:7c: fd:2f:91:6a:33:b7:62:11:6a:1d:0f:47:df:0e:e3:9c:56:a0: c8:2b:fa:eb:12:40:f3:99:40:b2:68:6e:25:76:7c:f2:cb:20: 72:3a:c5:23:f1:35:fa:c7:a8:4a:79:4b:3b:31:0b:67:26:b6: 68:9c:34:d8:b6:7e:99:9d:cd:7c:3b:4e:3c:47:2b:8a:2e:fd: 14:2d:03:41 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUU+rG2RrVzY7ogkCaI+hjsz//CqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRC OUU5MUU5MzAeFw0yNjA0MTAwNzQwNDlaFw0yNzA0MDkwNzQ1NDlaMDMxMTAvBgNV BAMTKDgzQjVGMzMyQTQ0RkEyOTgxMzg4Mjc4MUY3QjUzN0YzMDQyNjVDNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGvjBd+ly9XYlWvkeOhCNyHnAC Pny2G2kXuxDmJazqgV9oNgMXYypq0bIBZAgw3z6gob2Cd1xJuiPJQfQ7X9bLhLYc 5p5hxPZ6mK1S43T6c3qPtp6G1J2yg2hKKYITXTpzyJhSK7A6JUHzEPE0fUJTeTyU 9b61U9mNDggT4sjXyPWSKHyNlKavuYQnOb7o8xu2vUwRD+x0Acx+1o3HkEXZ25Jw WPhf558le8DIGo0JVleKlR4621Uqt//R4QHIhPuwjYyIP+2MPzDOTfeBuoOy/uNZ 67WP6wEfJztGg36J7YTb8F5P377my+oqGJ3ConhYdSKucoMPF91dJlCsDKFxAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUg7XzMqRPopgTiCeB97U38wQmXEYwHwYDVR0j BBgwFoAUXzTa2f8diwDJtoenHAkHlLnpHpMwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NDg3NDA5MDU4MzM1OTQ4OS8wLzVGMzREQUQ5RkYxRDhCMDBDOUI2ODdBNzFDMDkw Nzk0QjlFOTFFOTMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUYzNERBRDlGRjFEOEIwMEM5QjY4N0E3MUMwOTA3OTRCOUU5MUU5My5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk0ODc0MDkwNTgzMzU5NDg5LzAvMzQzMzJlMzIzNTM1 MmUzNjM4MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzYzMzM1MzgzMS5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAiv/RDANBgkqhkiG9w0BAQsFAAOCAQEAXRHbNXPvZgnd9qR5e3tOHB8iaCB7 8FqTelEyXEJlgoNu6ucxiqZuyrpRUVMR79H02Eja/bwxoPguOUeyORnBVaZt5fEc IU4VvRwBeEeCNXR3/bxaJ4MvO/mMmsvVRa/17bmTAcjigtplaPNmkA7cLxTynQR3 4bnz9VeGc/TMXPR5xITEKprNYC/yWYhGznm7cPMpgC0MU0tWOZ+VJ449YyIfQyp0 vWI/qKqFxhtOY/eMHGl8/S+RajO3YhFqHQ9H3w7jnFagyCv66xJA85lAsmhuJXZ8 8ssgcjrFI/E1+seoSnlLOzELZya2aJw02LZ+mZ3NfDtOPEcrii79FC0DQQ== -----END CERTIFICATE-----Generated at Mon Apr 13 13:53:24 2026 by rpki-client