$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e302e302f32322d3232203d3e203539303337.roa File: 34332e3232382e302e302f32322d3232203d3e203539303337.roa (raw, json) Hash identifier: WIIM6WznzsN69nFg27fgZKP/ipX97t44tdGInDFlG60= Subject key identifier: C1:B0:C2:B8:27:9C:1C:AB:F3:63:62:1D:B7:9C:02:E9:4E:1D:8A:53 Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 4EC774B6329685A66736F176E7A7E85E8B83B957 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e302e302f32322d3232203d3e203539303337.roa Signing time: Wed 27 May 2026 06:56:11 +0000 ROA not before: Wed 27 May 2026 06:51:11 +0000 ROA not after: Wed 26 May 2027 06:56:11 +0000 asID: 59037 IP address blocks: 43.228.0.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:c7:74:b6:32:96:85:a6:67:36:f1:76:e7:a7:e8:5e:8b:83:b9:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 27 06:51:11 2026 GMT Not After : May 26 06:56:11 2027 GMT Subject: CN=C1B0C2B8279C1CABF363621DB79C02E94E1D8A53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:23:57:0c:7c:e4:fe:ad:5f:b9:87:96:f8:09: 71:32:18:18:82:03:6d:fd:c6:eb:0f:45:75:2d:0a: f1:49:f5:5a:e5:f5:13:24:7b:dc:08:3a:72:da:38: c1:ac:68:c9:a2:91:75:da:af:95:50:5e:9f:0e:4b: 6e:64:f4:91:5d:28:af:6c:b8:65:a6:b8:ba:66:2e: 19:c0:ff:95:dc:df:66:c0:b8:42:00:ac:56:44:b8: 2d:36:6f:81:d1:27:2e:12:e4:58:a5:ad:5f:bd:f8: 4b:66:6a:17:eb:3d:71:bd:e2:c7:1d:c2:05:a2:5b: 6b:ab:92:40:19:5b:2c:8a:fb:ed:ba:b3:af:a1:70: 47:78:0b:aa:59:6c:e1:ad:5e:c5:6b:38:19:18:cf: 9b:b5:fe:81:63:7c:92:a6:c1:79:dd:59:70:75:fa: 4f:15:1b:5b:7f:89:45:b4:8a:35:47:c4:45:fa:4f: d8:de:a1:31:0d:1e:3a:84:58:85:09:2f:d2:a9:12: 8e:50:c8:ff:3f:e1:09:95:07:c9:8b:68:c1:8e:1a: be:ac:c7:5d:88:fe:1f:ce:d0:1b:4b:a7:45:f3:6e: 27:e0:a3:0e:72:13:8b:a0:5d:e8:ca:75:d7:fa:ac: 76:8d:4b:93:97:1b:b2:58:01:17:5e:06:59:0d:32: 30:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B0:C2:B8:27:9C:1C:AB:F3:63:62:1D:B7:9C:02:E9:4E:1D:8A:53 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e302e302f32322d3232203d3e203539303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.0.0/22 Signature Algorithm: sha256WithRSAEncryption 45:71:f5:be:68:73:15:03:4f:07:d3:f6:41:98:7e:d4:11:e1: a7:38:ce:62:0b:d9:b0:54:c0:b3:9f:55:05:6d:1d:15:17:51: 36:72:03:2d:11:df:fd:e7:05:44:30:94:d5:a8:46:23:16:da: 4b:78:65:5d:3d:3b:a0:97:5e:d4:57:e9:97:e0:1e:0b:3d:c3: 7d:23:9d:21:ed:c1:5a:fd:b8:5a:7f:f4:5b:47:45:7b:b9:14: b7:84:ee:01:07:c5:f5:7a:bb:fc:47:8d:5d:08:c1:fb:d9:9d: 54:ef:20:b5:b0:e7:f5:8e:e9:3f:b1:73:24:eb:29:c6:9b:39: d2:a9:53:93:02:1b:a7:66:13:7f:6c:2f:17:bb:78:13:94:c1: 77:29:4c:40:8c:2a:3a:b8:63:cf:a5:4e:f1:f1:8b:d8:c5:62: a2:b5:fc:67:13:3d:dc:55:6d:d1:c8:97:f2:89:d0:39:1f:8d: 6c:99:b9:b7:6b:df:80:28:63:04:55:c9:6d:ef:bc:bd:63:69: fe:85:13:f0:12:9d:85:11:3b:e6:c4:4b:68:c4:fd:c3:06:27: 66:5b:b5:cc:ff:e3:96:57:00:fc:62:60:a4:3d:74:a3:4d:98: e0:16:5b:9a:6a:10:fb:38:31:62:11:dd:59:d3:7c:86:e6:ae: 0c:47:06:93 -----BEGIN CERTIFICATE----- MIIFBTCCA+2gAwIBAgIUTsd0tjKWhaZnNvF256foXouDuVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MjcwNjUxMTFaFw0yNzA1MjYwNjU2MTFaMDMxMTAvBgNV BAMTKEMxQjBDMkI4Mjc5QzFDQUJGMzYzNjIxREI3OUMwMkU5NEUxRDhBNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOI1cMfOT+rV+5h5b4CXEyGBiC A239xusPRXUtCvFJ9Vrl9RMke9wIOnLaOMGsaMmikXXar5VQXp8OS25k9JFdKK9s uGWmuLpmLhnA/5Xc32bAuEIArFZEuC02b4HRJy4S5FilrV+9+EtmahfrPXG94scd wgWiW2urkkAZWyyK++26s6+hcEd4C6pZbOGtXsVrOBkYz5u1/oFjfJKmwXndWXB1 +k8VG1t/iUW0ijVHxEX6T9jeoTENHjqEWIUJL9KpEo5QyP8/4QmVB8mLaMGOGr6s x12I/h/O0BtLp0Xzbifgow5yE4ugXejKddf6rHaNS5OXG7JYARdeBlkNMjDzAgMB AAGjggIPMIICCzAdBgNVHQ4EFgQUwbDCuCecHKvzY2Idt5wC6U4dilMwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw gYgGCCsGAQUFBwELBHwwejB4BggrBgEFBQcwC4ZscnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQxLzEvMzQzMzJlMzIzMjM4 MmUzMDJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDM1MzkzMDMzMzcucm9hMBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAIr5AAwDQYJKoZIhvcNAQELBQADggEBAEVx9b5ocxUDTwfT9kGYftQR4ac4zmIL 2bBUwLOfVQVtHRUXUTZyAy0R3/3nBUQwlNWoRiMW2kt4ZV09O6CXXtRX6ZfgHgs9 w30jnSHtwVr9uFp/9FtHRXu5FLeE7gEHxfV6u/xHjV0IwfvZnVTvILWw5/WO6T+x cyTrKcabOdKpU5MCG6dmE39sLxe7eBOUwXcpTECMKjq4Y8+lTvHxi9jFYqK1/GcT PdxVbdHIl/KJ0DkfjWyZubdr34AoYwRVyW3vvL1jaf6FE/ASnYURO+bES2jE/cMG J2Zbtcz/45ZXAPxiYKQ9dKNNmOAWW5pqEPs4MWIR3VnTfIbmrgxHBpM= -----END CERTIFICATE-----Generated at Fri May 29 23:49:46 2026 by rpki-client