$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34392e352e302e302f31362d3136203d3e2030.roa File: 34392e352e302e302f31362d3136203d3e2030.roa (raw, json) Hash identifier: RoiOy2neMkxbSgpWFSaFMXzWgVq6/3ts30xuAa4Wtbc= Subject key identifier: BC:72:F9:EE:B7:0A:B0:C1:BA:5A:C5:A4:3B:37:93:71:F5:03:FB:C6 Certificate issuer: /CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Certificate serial: 0AA3D4D7CAD83035AEC6900563475BEF4C769D7F Authority key identifier: 91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34392e352e302e302f31362d3136203d3e2030.roa Signing time: Thu 14 May 2026 08:24:48 +0000 ROA not before: Thu 14 May 2026 08:19:48 +0000 ROA not after: Thu 13 May 2027 08:24:48 +0000 asID: 0 IP address blocks: 49.5.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 23 May 2026 09:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:a3:d4:d7:ca:d8:30:35:ae:c6:90:05:63:47:5b:ef:4c:76:9d:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91C6B644DD6D84839ED120FBC00984D60495C8C4 Validity Not Before: May 14 08:19:48 2026 GMT Not After : May 13 08:24:48 2027 GMT Subject: CN=BC72F9EEB70AB0C1BA5AC5A43B379371F503FBC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:0a:5c:24:c3:7c:9c:92:50:4a:27:c3:cd:33: ec:fe:c6:ae:38:23:54:ab:94:b3:a2:30:8a:1c:47: b1:62:6f:ca:70:c5:ec:da:1f:85:20:6a:bd:22:00: 86:dd:bd:6f:01:14:65:05:0e:ed:1c:77:8a:f3:4e: 65:31:cd:ad:ac:d8:ff:2f:10:7c:28:cc:e9:2f:03: e6:e9:ae:f8:12:ca:78:d7:67:0d:92:8a:c1:85:f2: 58:83:5e:d9:64:01:39:80:23:21:72:f2:07:10:1b: 19:83:92:1e:41:b2:13:65:04:9a:21:1d:fb:6f:03: ab:55:6e:ad:fe:9c:ef:6f:15:66:79:d5:9f:3c:81: be:a4:03:55:2f:cb:f2:d2:28:2a:e9:63:b6:34:8d: a4:7e:6e:55:41:33:a0:79:78:41:f0:78:34:d7:6c: 67:f3:85:52:0e:a2:5b:3a:95:85:3d:e5:f8:86:23: 93:39:3d:cf:b8:f4:2e:f8:8e:fc:cf:2f:07:44:25: dd:04:f5:f8:f2:1f:74:ad:92:f8:14:97:fb:63:8e: a3:68:26:1b:3f:42:e5:0a:d9:f0:be:bb:72:85:d9: dd:c8:fd:78:04:fd:ca:e3:b5:f6:f5:c8:fc:ec:48: 3a:b8:9b:2b:16:89:48:83:30:fe:da:c2:b4:3f:a2: 23:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:72:F9:EE:B7:0A:B0:C1:BA:5A:C5:A4:3B:37:93:71:F5:03:FB:C6 X509v3 Authority Key Identifier: keyid:91:C6:B6:44:DD:6D:84:83:9E:D1:20:FB:C0:09:84:D6:04:95:C8:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/91C6B644DD6D84839ED120FBC00984D60495C8C4.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/91C6B644DD6D84839ED120FBC00984D60495C8C4.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095890985226862595/0/34392e352e302e302f31362d3136203d3e2030.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 49.5.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:ee:c1:0c:89:e8:71:fd:c9:bf:20:ce:e8:b1:4e:2e:c9:3d: 6a:f7:bb:24:6f:24:f4:25:20:02:91:04:c8:5b:b6:a9:17:13: e6:2a:86:8f:7e:0c:c7:44:d0:ae:81:78:7b:44:bf:b2:13:6d: 56:76:a4:e1:86:6c:a3:bd:9c:eb:53:54:e0:94:c6:6c:2d:9d: 0d:8e:82:2d:9b:8c:ce:52:61:6b:2e:94:3d:76:7f:66:b3:bc: ec:99:b5:a0:46:ce:4c:49:db:d2:14:2b:4a:8d:47:65:9c:73: 93:27:45:5c:58:2b:2d:dc:5b:bd:77:3a:bc:0f:5d:59:0e:20: 3b:24:9e:56:4a:4d:8b:6b:c0:d9:3a:62:4c:e3:9e:6b:89:8f: 10:f0:d9:ca:79:58:6c:8b:4d:9f:a4:26:8c:02:4f:1c:67:f5: 9f:c7:e7:19:8a:b7:5f:52:2a:78:e8:56:b0:2f:b7:8a:5a:f5: d4:61:63:9f:d7:d3:77:a8:85:71:c6:b4:5a:ad:7a:87:23:e9: e5:b4:f8:e4:ef:e0:3f:ac:e4:9f:84:8f:1b:0a:4d:68:ae:39: 26:68:e0:20:91:db:dc:e5:63:6d:8d:ab:1e:ba:cb:0b:13:f6: c0:b5:33:79:eb:0e:ba:24:03:f2:7c:07:80:00:b9:9d:52:f8: e0:c5:42:2b -----BEGIN CERTIFICATE----- MIIE9zCCA9+gAwIBAgIUCqPU18rYMDWuxpAFY0db70x2nX8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYw NDk1QzhDNDAeFw0yNjA1MTQwODE5NDhaFw0yNzA1MTMwODI0NDhaMDMxMTAvBgNV BAMTKEJDNzJGOUVFQjcwQUIwQzFCQTVBQzVBNDNCMzc5MzcxRjUwM0ZCQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHClwkw3ycklBKJ8PNM+z+xq44 I1SrlLOiMIocR7Fib8pwxezaH4Ugar0iAIbdvW8BFGUFDu0cd4rzTmUxza2s2P8v EHwozOkvA+bprvgSynjXZw2SisGF8liDXtlkATmAIyFy8gcQGxmDkh5BshNlBJoh HftvA6tVbq3+nO9vFWZ51Z88gb6kA1Uvy/LSKCrpY7Y0jaR+blVBM6B5eEHweDTX bGfzhVIOols6lYU95fiGI5M5Pc+49C74jvzPLwdEJd0E9fjyH3StkvgUl/tjjqNo Jhs/QuUK2fC+u3KF2d3I/XgE/crjtfb1yPzsSDq4mysWiUiDMP7awrQ/oiORAgMB AAGjggIBMIIB/TAdBgNVHQ4EFgQUvHL57rcKsMG6WsWkOzeTcfUD+8YwHwYDVR0j BBgwFoAUkca2RN1thIOe0SD7wAmE1gSVyMQwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTg5MDk4NTIyNjg2MjU5NS8wLzkxQzZCNjQ0REQ2RDg0ODM5RUQxMjBGQkMwMDk4 NEQ2MDQ5NUM4QzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvOTFDNkI2NDRERDZEODQ4MzlFRDEyMEZCQzAwOTg0RDYwNDk1QzhDNC5jZXIw fAYIKwYBBQUHAQsEcDBuMGwGCCsGAQUFBzALhmByc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTU4OTA5ODUyMjY4NjI1OTUvMC8zNDM5MmUzNTJlMzAy ZTMwMmYzMTM2MmQzMTM2MjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDADEFMA0GCSqGSIb3 DQEBCwUAA4IBAQCd7sEMiehx/cm/IM7osU4uyT1q97skbyT0JSACkQTIW7apFxPm KoaPfgzHRNCugXh7RL+yE21WdqThhmyjvZzrU1TglMZsLZ0NjoItm4zOUmFrLpQ9 dn9ms7zsmbWgRs5MSdvSFCtKjUdlnHOTJ0VcWCst3Fu9dzq8D11ZDiA7JJ5WSk2L a8DZOmJM455riY8Q8NnKeVhsi02fpCaMAk8cZ/Wfx+cZirdfUip46FawL7eKWvXU YWOf19N3qIVxxrRarXqHI+nltPjk7+A/rOSfhI8bCk1orjkmaOAgkdvc5WNtjase ussLE/bAtTN56w66JAPyfAeAALmdUvjgxUIr -----END CERTIFICATE-----Generated at Sat May 23 03:03:29 2026 by rpki-client