$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095963215377989635/0/34332e3234332e31342e302f32332d3233203d3e2039383038.roa File: 34332e3234332e31342e302f32332d3233203d3e2039383038.roa (raw, json) Hash identifier: rksnU474/yaAzdZ2QgFHiYPs8AORtikwA9cgAXFDQb4= Subject key identifier: C4:A6:BF:95:16:C3:17:3C:A1:D5:28:96:00:AC:D3:CD:B4:2E:38:42 Certificate issuer: /CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Certificate serial: 4CE741F8A9AC2E04FBA101DB6496F2BF94BF351E Authority key identifier: C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/34332e3234332e31342e302f32332d3233203d3e2039383038.roa Signing time: Mon 13 Apr 2026 07:09:27 +0000 ROA not before: Mon 13 Apr 2026 07:04:27 +0000 ROA not after: Mon 12 Apr 2027 07:09:27 +0000 asID: 9808 IP address blocks: 43.243.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Apr 2026 08:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e7:41:f8:a9:ac:2e:04:fb:a1:01:db:64:96:f2:bf:94:bf:35:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6 Validity Not Before: Apr 13 07:04:27 2026 GMT Not After : Apr 12 07:09:27 2027 GMT Subject: CN=C4A6BF9516C3173CA1D5289600ACD3CDB42E3842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:fe:b8:48:c6:7c:6c:e9:c4:02:a6:85:12: 58:15:c2:fa:a9:f4:18:6c:d9:52:aa:d7:59:e5:ed: 72:e9:12:ee:50:3c:8a:eb:2f:33:d2:45:0c:47:d4: 60:40:9e:12:6c:80:ed:ea:76:33:03:24:a1:4b:08: d3:9f:37:95:05:45:ab:f9:98:88:03:07:99:46:09: 95:30:18:76:de:b8:16:bc:76:ea:a5:9f:b0:ae:01: 9a:db:09:5e:72:d1:05:2a:34:10:a0:21:6a:be:ff: be:76:f3:56:8e:3a:1f:a8:c1:e2:d2:be:9f:41:8b: d1:f6:b9:0b:3c:78:fb:43:27:24:ce:41:7e:09:9e: 86:4f:bb:2d:4a:2f:3d:40:aa:e6:6e:c9:86:56:94: f6:52:61:21:95:ea:66:c1:a6:31:ff:86:02:49:b0: c3:7f:10:ed:f8:e0:37:db:38:48:37:03:f7:3d:88: 0d:5b:ea:a0:3c:d1:9b:7f:ec:90:8e:c9:ff:46:2c: b6:5a:29:74:bc:b4:8e:73:59:34:21:d5:06:b6:38: 57:17:a7:56:66:d9:a0:8c:d0:67:8e:9b:0b:c4:8f: f1:6b:00:19:89:7e:57:bc:77:e4:19:d7:16:cc:dd: 74:08:a5:3b:66:be:ea:ac:26:94:a4:a8:74:c9:db: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A6:BF:95:16:C3:17:3C:A1:D5:28:96:00:AC:D3:CD:B4:2E:38:42 X509v3 Authority Key Identifier: keyid:C2:CA:12:03:9A:28:07:0B:0F:BB:EA:FD:E7:FF:C0:5E:1F:8E:6C:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/C2CA12039A28070B0FBBEAFDE7FFC05E1F8E6CC6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095963215377989635/0/34332e3234332e31342e302f32332d3233203d3e2039383038.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.243.14.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:37:46:ef:91:3f:88:f3:68:45:86:81:a8:0e:9b:5e:c6:6f: 43:62:e6:ef:5d:3a:14:f6:a3:8f:79:df:6e:c1:0b:17:39:12: a4:d3:10:4f:d7:b9:16:fd:df:86:02:c3:09:ec:17:d6:4d:56: 1c:4e:f7:62:d4:dd:98:19:9d:7c:4b:33:00:49:e5:81:c6:83: f4:dd:9d:aa:50:a6:71:6b:35:1b:59:de:aa:cb:35:3e:9e:e3: fa:7d:c1:1b:bc:b8:02:08:d3:cc:7c:d8:65:99:d6:64:85:c1: 59:ef:a3:6c:76:b2:b7:9b:d0:e9:72:99:f6:ec:7e:3f:4e:05: 15:55:2c:be:42:cf:5f:98:fe:18:64:e5:f1:64:76:af:84:b1: e2:b4:4e:fc:57:41:ac:6f:10:2b:c5:ca:c0:04:0f:8b:10:2c: b7:69:bd:82:f0:42:55:f2:1f:e2:cc:5e:a6:ee:79:6f:73:a4: f5:3b:22:9f:c3:ba:52:e5:54:e7:e1:09:27:7c:42:79:54:e2: 7a:1d:e1:ac:7f:b8:a9:ab:f5:e6:5d:fb:d1:92:39:15:b1:a4: e7:b6:53:fa:d0:94:d4:d6:ed:32:f0:eb:2e:6c:65:aa:bd:a0: f0:f7:45:ce:4d:4e:61:7f:ba:9c:4a:7a:19:5a:66:cd:bb:00: e7:b2:a8:d9 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTOdB+KmsLgT7oQHbZJbyv5S/NR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUx RjhFNkNDNjAeFw0yNjA0MTMwNzA0MjdaFw0yNzA0MTIwNzA5MjdaMDMxMTAvBgNV BAMTKEM0QTZCRjk1MTZDMzE3M0NBMUQ1Mjg5NjAwQUNEM0NEQjQyRTM4NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7FP64SMZ8bOnEAqaFElgVwvqp 9Bhs2VKq11nl7XLpEu5QPIrrLzPSRQxH1GBAnhJsgO3qdjMDJKFLCNOfN5UFRav5 mIgDB5lGCZUwGHbeuBa8duqln7CuAZrbCV5y0QUqNBCgIWq+/75281aOOh+oweLS vp9Bi9H2uQs8ePtDJyTOQX4JnoZPuy1KLz1AquZuyYZWlPZSYSGV6mbBpjH/hgJJ sMN/EO344DfbOEg3A/c9iA1b6qA80Zt/7JCOyf9GLLZaKXS8tI5zWTQh1Qa2OFcX p1Zm2aCM0GeOmwvEj/FrABmJfle8d+QZ1xbM3XQIpTtmvuqsJpSkqHTJ2/YPAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUxKa/lRbDFzyh1SiWAKzTzbQuOEIwHwYDVR0j BBgwFoAUwsoSA5ooBwsPu+r95//AXh+ObMYwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NTk2MzIxNTM3Nzk4OTYzNS8wL0MyQ0ExMjAzOUEyODA3MEIwRkJCRUFGREU3RkZD MDVFMUY4RTZDQzYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQzJDQTEyMDM5QTI4MDcwQjBGQkJFQUZERTdGRkMwNUUxRjhFNkNDNi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk1OTYzMjE1Mzc3OTg5NjM1LzAvMzQzMzJlMzIzNDMz MmUzMTM0MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzkzODMwMzgucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAEr8w4wDQYJKoZIhvcNAQELBQADggEBAA43Ru+RP4jzaEWGgagOm17Gb0Ni5u9d OhT2o495327BCxc5EqTTEE/XuRb934YCwwnsF9ZNVhxO92LU3ZgZnXxLMwBJ5YHG g/TdnapQpnFrNRtZ3qrLNT6e4/p9wRu8uAII08x82GWZ1mSFwVnvo2x2sreb0Oly mfbsfj9OBRVVLL5Cz1+Y/hhk5fFkdq+EseK0TvxXQaxvECvFysAED4sQLLdpvYLw QlXyH+LMXqbueW9zpPU7Ip/DulLlVOfhCSd8QnlU4nod4ax/uKmr9eZd+9GSORWx pOe2U/rQlNTW7TLw6y5sZaq9oPD3Rc5NTmF/upxKehlaZs27AOeyqNk= -----END CERTIFICATE-----Generated at Mon Apr 13 15:24:02 2026 by rpki-client