$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139362e302f32322d3232203d3e203539303337.roa File: 34332e3232372e3139362e302f32322d3232203d3e203539303337.roa (raw, json) Hash identifier: 7zw6/gtCTl50gOBT8n2iBD5ACi9b6uueqr2xJfludOs= Subject key identifier: 8D:13:1A:94:6B:73:6A:3F:DA:3C:59:86:15:B8:DE:AA:F2:1F:0F:54 Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 0F0CFC05DC405695F4A72EF2779041EDEDE16430 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139362e302f32322d3232203d3e203539303337.roa Signing time: Wed 27 May 2026 06:39:06 +0000 ROA not before: Wed 27 May 2026 06:34:06 +0000 ROA not after: Wed 26 May 2027 06:39:06 +0000 asID: 59037 IP address blocks: 43.227.196.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:0c:fc:05:dc:40:56:95:f4:a7:2e:f2:77:90:41:ed:ed:e1:64:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 27 06:34:06 2026 GMT Not After : May 26 06:39:06 2027 GMT Subject: CN=8D131A946B736A3FDA3C598615B8DEAAF21F0F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b9:21:97:69:ec:21:30:b9:ba:6c:c9:df:1e: 17:54:ad:5e:61:07:58:2e:b5:d5:93:09:e1:c2:13: da:9e:d7:d4:bf:71:e9:db:17:8c:5c:70:02:7f:34: bc:ba:9f:0f:c5:7f:f7:ff:e8:65:1e:c1:27:f3:10: 88:68:a5:79:3f:2e:ea:14:17:84:a4:ac:04:dd:f8: 29:74:66:37:ce:8f:65:58:72:b2:61:7a:1a:b4:ed: 32:91:02:6b:2a:92:e9:9d:19:d1:74:bc:9b:b1:81: d3:78:c4:07:54:6c:22:c3:19:53:d3:c8:ff:cb:f0: 14:42:11:05:4a:ad:d2:a2:2d:ca:cc:d0:95:83:9f: 82:ce:71:ed:42:c4:e0:48:72:f8:78:39:1c:93:74: fb:39:68:f2:b2:00:62:8b:19:a9:ae:d6:2d:59:e0: a6:26:88:26:d2:93:37:13:83:ed:ff:9a:ea:bb:b6: 61:1b:3f:fc:e4:6a:2f:f7:1b:00:c9:bf:9b:62:b2: 65:64:f5:27:41:21:07:38:44:91:8a:20:91:de:1c: 23:8d:e3:6d:04:01:26:40:8e:f3:a8:05:e4:e0:41: 89:ea:7f:d2:80:12:f4:01:2f:bc:fd:5f:f0:ed:e0: 29:29:89:6e:79:d5:21:48:0a:11:59:7f:a7:46:87: 35:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:13:1A:94:6B:73:6A:3F:DA:3C:59:86:15:B8:DE:AA:F2:1F:0F:54 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232372e3139362e302f32322d3232203d3e203539303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.227.196.0/22 Signature Algorithm: sha256WithRSAEncryption 77:a5:64:90:63:86:01:46:8e:e3:7e:2b:f5:0f:2e:42:43:f8: d0:71:92:40:3c:50:11:e8:fa:82:54:eb:5f:ae:d5:70:da:90: 97:c2:43:ea:ce:65:0f:ff:08:c2:f6:3d:2b:72:ab:a6:57:f7: 87:dc:e7:27:11:9d:82:2c:30:e2:f1:31:f2:0d:4f:2a:76:36: 0d:6e:0e:50:6c:72:d7:b6:65:22:c3:19:fa:30:8d:c9:9a:ed: 86:36:a9:d7:a5:5f:c3:d5:c2:4f:58:5b:af:63:9f:6e:48:59: 68:18:82:1b:7a:64:d9:8b:e2:eb:64:f9:2d:11:e7:e7:7b:c7: ea:96:c8:38:39:e2:ff:27:a3:ac:87:8d:fd:3d:cb:53:9e:8c: 50:e0:61:da:28:66:36:ee:45:11:f8:34:df:fe:0f:eb:04:b1: 80:e5:7e:30:65:a4:fa:f3:ab:b0:b6:72:fe:eb:07:f2:01:7d: 8b:12:78:8a:6d:97:55:5b:54:ba:3b:87:35:86:1f:3e:23:b3: e0:6c:8e:50:18:86:35:cb:10:5e:b3:e1:a8:df:2e:54:29:78: 3f:63:7e:33:d7:eb:22:57:39:9a:c4:80:d9:14:d2:2f:e7:de: ae:02:f5:65:66:3c:13:84:23:24:c1:5c:1b:07:fe:09:04:0a: e1:27:2b:61 -----BEGIN CERTIFICATE----- MIIFCjCCA/KgAwIBAgIUDwz8BdxAVpX0py7yd5BB7e3hZDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MjcwNjM0MDZaFw0yNzA1MjYwNjM5MDZaMDMxMTAvBgNV BAMTKDhEMTMxQTk0NkI3MzZBM0ZEQTNDNTk4NjE1QjhERUFBRjIxRjBGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuSGXaewhMLm6bMnfHhdUrV5h B1gutdWTCeHCE9qe19S/cenbF4xccAJ/NLy6nw/Ff/f/6GUewSfzEIhopXk/LuoU F4SkrATd+Cl0ZjfOj2VYcrJhehq07TKRAmsqkumdGdF0vJuxgdN4xAdUbCLDGVPT yP/L8BRCEQVKrdKiLcrM0JWDn4LOce1CxOBIcvh4ORyTdPs5aPKyAGKLGamu1i1Z 4KYmiCbSkzcTg+3/muq7tmEbP/zkai/3GwDJv5tismVk9SdBIQc4RJGKIJHeHCON 420EASZAjvOoBeTgQYnqf9KAEvQBL7z9X/Dt4CkpiW551SFIChFZf6dGhzV7AgMB AAGjggIUMIICEDAdBgNVHQ4EFgQUjRMalGtzaj/aPFmGFbjeqvIfD1QwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS1ycHMu Y25uaWMuY24vcmVwby9BMTA5NjMwMTE0OTM3MzM5OTA0MS8xLzM0MzMyZTMyMzIz NzJlMzEzOTM2MmUzMDJmMzIzMjJkMzIzMjIwM2QzZTIwMzUzOTMwMzMzNy5yb2Ew GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQC AAEwBgMEAivjxDANBgkqhkiG9w0BAQsFAAOCAQEAd6VkkGOGAUaO434r9Q8uQkP4 0HGSQDxQEej6glTrX67VcNqQl8JD6s5lD/8IwvY9K3Krplf3h9znJxGdgiww4vEx 8g1PKnY2DW4OUGxy17ZlIsMZ+jCNyZrthjap16Vfw9XCT1hbr2OfbkhZaBiCG3pk 2Yvi62T5LRHn53vH6pbIODni/yejrIeN/T3LU56MUOBh2ihmNu5FEfg03/4P6wSx gOV+MGWk+vOrsLZy/usH8gF9ixJ4im2XVVtUujuHNYYfPiOz4GyOUBiGNcsQXrPh qN8uVCl4P2N+M9frIlc5msSA2RTSL+fergL1ZWY8E4QjJMFcGwf+CQQK4ScrYQ== -----END CERTIFICATE-----Generated at Fri May 29 22:56:15 2026 by rpki-client