$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e32342e302f32312d3231203d3e203539303337.roa File: 34332e3232382e32342e302f32312d3231203d3e203539303337.roa (raw, json) Hash identifier: +Mmz62MyqPj7tvMxl3lF/Y1asGlPdV6BhH2hlmm7ZV4= Subject key identifier: 53:74:CD:83:8B:2D:55:4E:B6:80:BD:8E:E3:CA:86:49:F3:81:85:15 Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 614D1E6356F08C01CF31DCBD5B7ADC683BA6D43D Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e32342e302f32312d3231203d3e203539303337.roa Signing time: Wed 27 May 2026 06:39:06 +0000 ROA not before: Wed 27 May 2026 06:34:06 +0000 ROA not after: Wed 26 May 2027 06:39:06 +0000 asID: 59037 IP address blocks: 43.228.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:4d:1e:63:56:f0:8c:01:cf:31:dc:bd:5b:7a:dc:68:3b:a6:d4:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 27 06:34:06 2026 GMT Not After : May 26 06:39:06 2027 GMT Subject: CN=5374CD838B2D554EB680BD8EE3CA8649F3818515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6c:f0:4e:c1:ed:7e:6b:27:e8:6c:85:4b:70: a1:99:71:11:fe:b5:8a:54:d9:d9:60:c1:77:5c:de: 0e:aa:96:8a:5f:9f:d0:9d:6b:f1:27:02:57:83:86: e5:3e:1a:c8:39:f5:47:fb:d6:fa:af:b7:b8:15:c6: 4c:c2:35:c4:60:67:a1:62:59:b6:b5:19:99:a8:36: 33:9f:b9:c5:27:8a:79:50:ad:93:42:7f:e8:70:31: 44:63:eb:e9:50:1f:79:23:81:c1:e7:0c:46:2e:79: eb:53:bb:9d:8d:a3:f4:34:ae:72:74:ef:fc:bb:6a: a9:df:07:7b:f1:a4:0f:23:19:43:10:5f:31:b7:32: b6:85:56:bc:bd:35:c6:ef:bc:db:a4:8b:ab:d3:18: 37:3b:cc:1e:54:a7:64:7f:d0:36:94:03:87:60:4f: a4:fc:fa:39:19:5d:7e:d3:ab:ad:43:d8:17:77:4f: e8:ba:90:28:32:41:34:41:a0:b9:33:3f:d4:5c:a3: 3a:3e:96:22:51:be:13:de:b7:1f:44:64:db:7f:ef: 52:f6:59:2e:6a:c4:23:49:a2:0d:6b:29:c9:aa:da: 78:27:63:01:65:8d:ca:db:b0:18:98:a0:28:d3:ba: ac:7d:79:83:4c:08:91:e9:32:93:d2:2e:0a:5a:19: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:74:CD:83:8B:2D:55:4E:B6:80:BD:8E:E3:CA:86:49:F3:81:85:15 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e32342e302f32312d3231203d3e203539303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.24.0/21 Signature Algorithm: sha256WithRSAEncryption 92:a9:0d:88:7f:94:94:06:b3:6d:77:f8:54:4f:f9:10:fc:c6: 29:54:61:48:43:6a:a1:eb:e5:2f:4d:15:7f:7c:82:df:e0:01: d0:68:d1:8f:c0:a0:2b:3d:8e:00:48:b2:5b:62:1d:6e:0f:9e: 39:63:a5:df:d8:40:0d:98:7e:83:f7:cc:d3:c6:05:4d:c9:2e: 9b:b7:b9:70:40:3b:a2:62:0d:9f:c8:58:70:61:ac:6b:c5:fa: 03:6b:f0:d8:e0:41:fb:3c:38:69:d9:00:f7:7b:95:04:06:ae: 7d:7a:01:05:fb:2e:9b:40:d9:56:90:ff:76:fa:d1:62:8e:f9: 2e:ae:44:10:c2:a3:31:0a:9d:61:67:e5:9a:58:11:2d:31:e5: 3d:45:c7:57:8a:dd:2c:54:d8:e0:54:7b:e2:5e:fa:c9:73:f2: 6f:1a:4c:e5:e4:60:84:ac:ac:fe:40:bc:dd:33:46:09:cf:2d: f3:48:a1:ab:d1:0a:44:96:f8:ed:f7:dd:8d:2b:9f:50:f9:6b: 61:de:a0:07:61:71:52:96:90:02:48:2c:01:df:8e:7a:8a:05: f4:07:ea:7d:5b:d5:84:bf:7c:2d:21:d5:5a:22:59:70:10:59: f0:ae:33:5d:0f:2e:82:e6:a6:a3:60:04:ae:fb:07:ee:2e:d0: 3b:99:9a:11 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUYU0eY1bwjAHPMdy9W3rcaDum1D0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MjcwNjM0MDZaFw0yNzA1MjYwNjM5MDZaMDMxMTAvBgNV BAMTKDUzNzRDRDgzOEIyRDU1NEVCNjgwQkQ4RUUzQ0E4NjQ5RjM4MTg1MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bPBOwe1+ayfobIVLcKGZcRH+ tYpU2dlgwXdc3g6qlopfn9Cda/EnAleDhuU+Gsg59Uf71vqvt7gVxkzCNcRgZ6Fi Wba1GZmoNjOfucUninlQrZNCf+hwMURj6+lQH3kjgcHnDEYueetTu52No/Q0rnJ0 7/y7aqnfB3vxpA8jGUMQXzG3MraFVry9NcbvvNuki6vTGDc7zB5Up2R/0DaUA4dg T6T8+jkZXX7Tq61D2Bd3T+i6kCgyQTRBoLkzP9Rcozo+liJRvhPetx9EZNt/71L2 WS5qxCNJog1rKcmq2ngnYwFljcrbsBiYoCjTuqx9eYNMCJHpMpPSLgpaGTN5AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUU3TNg4stVU62gL2O48qGSfOBhRUwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQxLzEvMzQzMzJlMzIzMjM4 MmUzMjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyvkGDANBgkqhkiG9w0BAQsFAAOCAQEAkqkNiH+UlAazbXf4VE/5EPzGKVRh SENqoevlL00Vf3yC3+AB0GjRj8CgKz2OAEiyW2Idbg+eOWOl39hADZh+g/fM08YF Tckum7e5cEA7omINn8hYcGGsa8X6A2vw2OBB+zw4adkA93uVBAaufXoBBfsum0DZ VpD/dvrRYo75Lq5EEMKjMQqdYWflmlgRLTHlPUXHV4rdLFTY4FR74l76yXPybxpM 5eRghKys/kC83TNGCc8t80ihq9EKRJb47ffdjSufUPlrYd6gB2FxUpaQAkgsAd+O eooF9AfqfVvVhL98LSHVWiJZcBBZ8K4zXQ8uguamo2AErvsH7i7QO5maEQ== -----END CERTIFICATE-----Generated at Fri May 29 22:56:00 2026 by rpki-client