$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e34302e302f32312d3231203d3e203539303337.roa File: 34332e3232382e34302e302f32312d3231203d3e203539303337.roa (raw, json) Hash identifier: qeXeR1451IWjM2MaVOFH13EgA6uzkpa7Bb5PHeLdhv0= Subject key identifier: E5:90:EC:4E:4C:EE:75:9A:18:09:93:B1:E5:96:D0:D5:34:D5:58:A2 Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 06F21D64182FC44BA0043C1262AE44A5D4E43822 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e34302e302f32312d3231203d3e203539303337.roa Signing time: Wed 27 May 2026 06:39:06 +0000 ROA not before: Wed 27 May 2026 06:34:06 +0000 ROA not after: Wed 26 May 2027 06:39:06 +0000 asID: 59037 IP address blocks: 43.228.40.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f2:1d:64:18:2f:c4:4b:a0:04:3c:12:62:ae:44:a5:d4:e4:38:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 27 06:34:06 2026 GMT Not After : May 26 06:39:06 2027 GMT Subject: CN=E590EC4E4CEE759A180993B1E596D0D534D558A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:32:0e:88:61:84:eb:e9:59:48:65:e1:57:77: 25:1f:65:74:ad:75:2e:cc:3b:0e:8a:79:63:94:2d: c4:ae:54:5e:40:64:43:7b:c9:cc:4f:13:99:6e:6d: 8c:49:12:7c:02:23:16:37:03:38:5c:71:2d:fa:0a: 9d:c6:34:1c:61:0a:41:2b:48:66:c4:4b:99:62:4a: 04:0e:42:ec:e7:10:55:18:db:e2:a7:3e:ed:9e:f5: c0:3a:7a:c8:0f:c9:d5:2d:b4:60:75:6b:e2:d0:57: 46:4d:24:d4:6f:eb:75:b2:44:5b:9c:a2:70:4d:1f: 4c:bb:b5:06:fc:8f:ee:0c:8b:d9:b2:e4:97:67:f5: 6c:87:69:b4:31:57:48:f9:10:ca:cd:b8:8d:e6:13: ed:d5:88:73:fe:2b:88:3c:b9:86:da:49:14:51:ca: 2d:bd:66:44:33:11:8d:5b:af:a7:18:a0:e0:64:02: 3b:dd:06:c9:1e:12:c5:06:cf:8b:a2:9f:1a:e4:1c: 6b:4a:a2:df:76:49:a5:14:d0:ef:57:ed:4c:b6:20: 1e:7b:8a:a7:22:bb:40:81:d4:9d:fd:4a:74:2f:b2: 33:4c:9b:3e:1c:b1:92:d5:58:4a:ca:60:d7:b5:27: 89:70:72:de:59:88:d9:1f:68:18:9a:51:ad:01:dd: a2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:90:EC:4E:4C:EE:75:9A:18:09:93:B1:E5:96:D0:D5:34:D5:58:A2 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e34302e302f32312d3231203d3e203539303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.40.0/21 Signature Algorithm: sha256WithRSAEncryption 20:3a:12:28:b3:e2:a1:35:9b:72:36:a2:92:e0:9d:99:16:ab: d1:23:c2:b8:47:df:5e:fc:86:23:fd:20:87:45:36:b4:ce:d8: 6e:72:50:10:23:3e:71:1b:a0:24:ec:d7:25:7d:c0:e7:d3:5b: 20:25:e9:3d:9a:6c:25:40:a8:e6:37:c4:f3:b9:ca:4c:71:88: 30:47:07:96:e7:26:4d:8f:a0:b8:ea:d0:a1:88:ef:e4:76:6e: 40:cb:23:bb:1a:d2:46:43:70:ad:68:e1:11:8d:0c:51:d9:dd: ea:90:5e:7b:e5:91:93:60:a0:af:a1:3b:1c:b1:f5:7f:2d:62: 64:fa:49:06:09:34:db:a2:81:a5:13:09:aa:b4:d8:9f:40:2f: 3a:41:36:47:2e:a9:b3:83:5f:cd:69:49:13:e5:af:5d:61:4c: 02:3e:43:7f:dd:47:d6:e2:c3:d7:89:d3:02:e2:8c:05:f5:06: d7:bb:9c:b6:6b:4b:00:d7:c8:87:33:9a:92:8a:03:f5:33:0b: 00:2d:0e:dc:7f:66:46:78:1d:4d:a7:14:ac:9a:b1:bb:86:c1: 8c:c9:79:5b:68:e9:71:1b:dc:0f:6f:6f:6e:60:b1:8a:f4:b2: bc:ca:7a:5f:37:a9:06:b2:df:01:a9:82:d3:a4:52:c9:a1:eb: 6c:0c:7b:df -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUBvIdZBgvxEugBDwSYq5EpdTkOCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MjcwNjM0MDZaFw0yNzA1MjYwNjM5MDZaMDMxMTAvBgNV BAMTKEU1OTBFQzRFNENFRTc1OUExODA5OTNCMUU1OTZEMEQ1MzRENTU4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChMg6IYYTr6VlIZeFXdyUfZXSt dS7MOw6KeWOULcSuVF5AZEN7ycxPE5lubYxJEnwCIxY3AzhccS36Cp3GNBxhCkEr SGbES5liSgQOQuznEFUY2+KnPu2e9cA6esgPydUttGB1a+LQV0ZNJNRv63WyRFuc onBNH0y7tQb8j+4Mi9my5Jdn9WyHabQxV0j5EMrNuI3mE+3ViHP+K4g8uYbaSRRR yi29ZkQzEY1br6cYoOBkAjvdBskeEsUGz4uinxrkHGtKot92SaUU0O9X7Uy2IB57 iqciu0CB1J39SnQvsjNMmz4csZLVWErKYNe1J4lwct5ZiNkfaBiaUa0B3aI1AgMB AAGjggIRMIICDTAdBgNVHQ4EFgQU5ZDsTkzudZoYCZOx5ZbQ1TTVWKIwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQxLzEvMzQzMzJlMzIzMjM4 MmUzNDMwMmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyvkKDANBgkqhkiG9w0BAQsFAAOCAQEAIDoSKLPioTWbcjaikuCdmRar0SPC uEffXvyGI/0gh0U2tM7YbnJQECM+cRugJOzXJX3A59NbICXpPZpsJUCo5jfE87nK THGIMEcHlucmTY+guOrQoYjv5HZuQMsjuxrSRkNwrWjhEY0MUdnd6pBee+WRk2Cg r6E7HLH1fy1iZPpJBgk026KBpRMJqrTYn0AvOkE2Ry6ps4NfzWlJE+WvXWFMAj5D f91H1uLD14nTAuKMBfUG17uctmtLANfIhzOakooD9TMLAC0O3H9mRngdTacUrJqx u4bBjMl5W2jpcRvcD29vbmCxivSyvMp6XzepBrLfAamC06RSyaHrbAx73w== -----END CERTIFICATE-----Generated at Fri May 29 23:50:48 2026 by rpki-client