$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e36342e302f32312d3231203d3e203539303337.roa File: 34332e3232382e36342e302f32312d3231203d3e203539303337.roa (raw, json) Hash identifier: LDzIRzb+kpK0iSRjCFPcMNG5IzX1u7FVWHoKXtw3pVg= Subject key identifier: 0F:0A:8D:91:BC:3E:4C:E6:34:9D:4C:DF:D2:19:FF:11:D7:B2:84:17 Certificate issuer: /CN=5ACF72DA32919503D15480832BA57EB063AE113B Certificate serial: 2261B8E1D20BBB6DA04B5D519A09E7BA2F975546 Authority key identifier: 5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e36342e302f32312d3231203d3e203539303337.roa Signing time: Wed 27 May 2026 06:39:06 +0000 ROA not before: Wed 27 May 2026 06:34:06 +0000 ROA not after: Wed 26 May 2027 06:39:06 +0000 asID: 59037 IP address blocks: 43.228.64.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:28:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:61:b8:e1:d2:0b:bb:6d:a0:4b:5d:51:9a:09:e7:ba:2f:97:55:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ACF72DA32919503D15480832BA57EB063AE113B Validity Not Before: May 27 06:34:06 2026 GMT Not After : May 26 06:39:06 2027 GMT Subject: CN=0F0A8D91BC3E4CE6349D4CDFD219FF11D7B28417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:c7:40:8a:66:87:dc:4f:fb:47:ce:22:8a: 70:c6:d1:85:2c:f1:48:eb:89:f1:a2:67:2e:a0:a1: cb:6a:d8:7d:59:48:80:1f:72:88:89:4a:54:0a:68: 04:30:51:7c:7d:54:4c:2a:c5:24:99:a9:7f:22:c6: 7c:1f:03:9b:cf:af:cd:89:09:3d:b7:ac:73:b0:e1: 5b:f7:16:9b:52:13:3a:c0:c5:ba:9a:1a:1c:a6:98: be:4c:9f:59:a4:a8:0c:25:63:78:91:b7:81:c1:73: 7b:0f:d8:88:76:9c:0f:a5:1d:9d:b6:4f:62:d5:39: c9:f0:3c:44:2c:17:8c:f0:6b:da:53:77:3a:e0:6f: be:87:e7:74:0e:9c:d4:c0:a4:3e:50:76:b8:3f:43: be:af:1f:c8:40:b6:b2:d7:9a:42:b6:43:63:ef:6d: 43:8b:0e:00:50:55:fe:b2:46:8b:ff:1e:d1:a4:d6: 8e:6d:e1:63:1e:b1:05:8d:f8:d0:21:cb:7f:cc:7c: 0e:d5:60:cb:b2:12:8c:ba:d4:78:3c:ab:19:e5:b4: f5:9a:fb:88:b0:7b:eb:77:c0:22:c6:41:5f:c8:c3: 08:05:9b:f8:39:4f:9a:3e:06:ed:38:35:53:7e:27: fa:b0:1f:e9:10:83:b6:a9:39:49:3f:8d:81:d1:ea: 54:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0A:8D:91:BC:3E:4C:E6:34:9D:4C:DF:D2:19:FF:11:D7:B2:84:17 X509v3 Authority Key Identifier: keyid:5A:CF:72:DA:32:91:95:03:D1:54:80:83:2B:A5:7E:B0:63:AE:11:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/5ACF72DA32919503D15480832BA57EB063AE113B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5ACF72DA32919503D15480832BA57EB063AE113B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096301149373399041/1/34332e3232382e36342e302f32312d3231203d3e203539303337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.228.64.0/21 Signature Algorithm: sha256WithRSAEncryption 80:97:d3:41:e4:71:4c:d4:8b:e4:91:51:2b:f9:d9:d5:eb:7b: 8b:9e:2f:bf:c3:1f:51:5e:32:09:96:3f:6a:ba:11:d6:a6:9a: 5a:59:d9:88:ab:31:85:30:f4:2a:49:95:8a:2d:e3:5b:8f:79: 11:69:b1:ea:18:14:ee:d9:19:53:49:09:73:61:f8:0e:cb:8b: d9:65:f2:99:0d:20:1b:75:4b:f7:f5:06:b2:fc:8d:2b:d7:29: 1d:cb:d4:20:3c:ca:09:15:9c:bd:16:46:f2:76:d6:72:47:8d: 65:11:c3:56:86:c6:49:a9:02:c5:ab:c4:cc:af:aa:d7:53:da: 00:7e:69:92:83:86:b1:25:de:9b:ec:05:3f:29:c3:bd:3f:26: c6:88:e5:85:ef:2b:4e:1b:04:bd:c4:99:11:38:14:8a:0a:d4: 2b:2e:3e:fa:9f:9a:03:89:ac:16:06:be:52:60:c7:cc:65:f5: 9a:c3:2c:0a:24:df:26:00:63:55:98:21:7b:d6:74:1f:18:c3: b4:bb:b4:54:5c:a1:a1:70:65:f5:f9:64:f3:68:d2:f0:1d:38: f4:34:6f:bd:39:0d:16:45:db:bc:bf:b9:66:68:0d:e3:2c:ea: da:d2:b7:0d:f1:3c:e5:74:f4:71:d8:b5:b1:a1:ab:c3:d8:ab: f4:c0:b6:1b -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUImG44dILu22gS11Rmgnnui+XVUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2 M0FFMTEzQjAeFw0yNjA1MjcwNjM0MDZaFw0yNzA1MjYwNjM5MDZaMDMxMTAvBgNV BAMTKDBGMEE4RDkxQkMzRTRDRTYzNDlENENERkQyMTlGRjExRDdCMjg0MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJ8dAimaH3E/7R84iinDG0YUs 8UjrifGiZy6goctq2H1ZSIAfcoiJSlQKaAQwUXx9VEwqxSSZqX8ixnwfA5vPr82J CT23rHOw4Vv3FptSEzrAxbqaGhymmL5Mn1mkqAwlY3iRt4HBc3sP2Ih2nA+lHZ22 T2LVOcnwPEQsF4zwa9pTdzrgb76H53QOnNTApD5Qdrg/Q76vH8hAtrLXmkK2Q2Pv bUOLDgBQVf6yRov/HtGk1o5t4WMesQWN+NAhy3/MfA7VYMuyEoy61Hg8qxnltPWa +4iwe+t3wCLGQV/IwwgFm/g5T5o+Bu04NVN+J/qwH+kQg7apOUk/jYHR6lRpAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUDwqNkbw+TOY0nUzf0hn/EdeyhBcwHwYDVR0j BBgwFoAUWs9y2jKRlQPRVICDK6V+sGOuETswDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjMwMTE0OTM3MzM5OTA0MS8xLzVBQ0Y3MkRBMzI5MTk1MDNEMTU0ODA4MzJCQTU3 RUIwNjNBRTExM0IuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNUFDRjcyREEzMjkxOTUwM0QxNTQ4MDgzMkJBNTdFQjA2M0FFMTEzQi5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2MzAxMTQ5MzczMzk5MDQxLzEvMzQzMzJlMzIzMjM4 MmUzNjM0MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzUzOTMwMzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAyvkQDANBgkqhkiG9w0BAQsFAAOCAQEAgJfTQeRxTNSL5JFRK/nZ1et7i54v v8MfUV4yCZY/aroR1qaaWlnZiKsxhTD0KkmVii3jW495EWmx6hgU7tkZU0kJc2H4 DsuL2WXymQ0gG3VL9/UGsvyNK9cpHcvUIDzKCRWcvRZG8nbWckeNZRHDVobGSakC xavEzK+q11PaAH5pkoOGsSXem+wFPynDvT8mxojlhe8rThsEvcSZETgUigrUKy4+ +p+aA4msFga+UmDHzGX1msMsCiTfJgBjVZghe9Z0HxjDtLu0VFyhoXBl9flk82jS 8B049DRvvTkNFkXbvL+5ZmgN4yzq2tK3DfE85XT0cdi1saGrw9ir9MC2Gw== -----END CERTIFICATE-----Generated at Fri May 29 23:50:50 2026 by rpki-client