$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135362e302f32322d3232203d3e2034383337.roa File: 34332e3234302e3135362e302f32322d3232203d3e2034383337.roa (raw, json) Hash identifier: GbGKWmxQ6q4U8u0KX49ujLZaCvlv2jY9oUHVdiN1mLs= Subject key identifier: 31:C5:75:88:B9:CD:4B:EA:65:94:5D:F0:87:DB:ED:4A:10:C5:7C:86 Certificate issuer: /CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Certificate serial: 3C330005857CAEE4E535269E4AAF433CDC462846 Authority key identifier: 69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135362e302f32322d3232203d3e2034383337.roa Signing time: Thu 28 May 2026 02:38:50 +0000 ROA not before: Thu 28 May 2026 02:33:50 +0000 ROA not after: Thu 27 May 2027 02:38:50 +0000 asID: 4837 IP address blocks: 43.240.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 May 2026 12:59:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:33:00:05:85:7c:ae:e4:e5:35:26:9e:4a:af:43:3c:dc:46:28:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D8917902AD24A5AC6751655C29BB7E9171C796 Validity Not Before: May 28 02:33:50 2026 GMT Not After : May 27 02:38:50 2027 GMT Subject: CN=31C57588B9CD4BEA65945DF087DBED4A10C57C86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:82:c1:8a:be:58:2f:ec:f3:16:25:17:c2:7f: 8d:a1:08:19:c6:97:f9:5c:16:39:4b:14:8e:8f:4c: c0:ef:11:22:03:60:4b:6e:f4:a6:24:af:97:96:0c: b1:dc:d4:68:30:55:9d:02:00:03:92:11:9a:ec:16: e8:a0:da:84:d0:cb:fb:92:3b:4a:67:27:85:c2:1f: 07:b3:b4:65:a8:05:47:6e:1b:23:7b:a2:06:41:32: a4:f7:e0:db:fe:2a:39:9c:3c:d9:9d:b5:98:f3:f4: 8d:41:68:3d:f8:d1:88:6f:20:45:db:98:58:a2:93: 95:28:49:d9:e9:3a:a8:96:90:a1:3d:02:bd:aa:1a: 60:31:0a:40:86:c6:71:dc:ea:3c:5e:02:05:64:fe: 12:6e:15:59:cf:18:4f:55:7c:0d:d9:e0:be:a9:aa: bb:39:12:75:e5:c8:36:b1:ef:fd:47:a8:4b:72:c9: bb:4d:be:ba:91:20:4e:e0:56:76:14:69:0d:56:39: 59:d1:c2:92:09:01:1f:43:a9:29:96:57:f5:02:45: a3:f4:af:7b:bc:9d:e5:ac:3b:aa:02:b3:4c:5f:6b: 2c:b5:e1:52:20:68:57:61:d2:2d:a6:dc:25:67:c8: 42:b6:96:cd:8c:35:13:a9:61:47:24:e5:b1:d3:c4: 6d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C5:75:88:B9:CD:4B:EA:65:94:5D:F0:87:DB:ED:4A:10:C5:7C:86 X509v3 Authority Key Identifier: keyid:69:D8:91:79:02:AD:24:A5:AC:67:51:65:5C:29:BB:7E:91:71:C7:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/69D8917902AD24A5AC6751655C29BB7E9171C796.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/69D8917902AD24A5AC6751655C29BB7E9171C796.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096686730825760771/0/34332e3234302e3135362e302f32322d3232203d3e2034383337.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 43.240.156.0/22 Signature Algorithm: sha256WithRSAEncryption 35:39:d7:51:6a:94:45:42:0a:9e:7b:28:f5:4e:0a:65:14:75: f8:4b:88:7e:2c:70:a3:ca:31:35:70:ba:b6:8e:24:22:fe:d5: e3:c5:f9:32:e3:bc:af:15:a1:3c:e6:42:18:9f:79:f2:09:54: b1:3e:f0:c6:8f:15:1c:ea:39:d8:f5:aa:31:08:23:49:23:a8: 8f:cc:df:93:e1:a0:2d:cb:96:8a:d0:b7:13:42:05:64:88:eb: 86:58:9a:1b:cb:43:9e:9a:6a:7f:7a:90:2f:6b:8d:99:1f:92: c6:53:68:13:f1:71:80:b5:53:5f:1b:61:4e:3f:86:c6:91:24: ca:2c:3f:5f:18:9d:11:23:c4:3c:f3:41:bc:2a:af:92:3a:c4: b6:74:af:56:c2:95:65:24:2f:a7:88:03:c5:b4:9d:d1:21:e4: 08:9d:94:9f:5f:86:dd:71:2d:e8:99:49:0b:25:76:47:25:8a: ac:bc:fa:51:32:7c:a7:43:3f:ba:83:f8:14:46:b2:73:be:ef: d1:c3:10:d8:bd:11:8d:45:fd:eb:91:e3:c4:0c:69:2e:cb:79: 06:8d:47:1d:51:f1:48:dc:91:8c:51:66:75:df:c0:d8:d2:22: ee:a2:8c:8f:48:88:c8:c5:79:07:74:2c:b5:a1:85:76:7e:bf: ea:7b:f5:25 -----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIUPDMABYV8ruTlNSaeSq9DPNxGKEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5 MTcxQzc5NjAeFw0yNjA1MjgwMjMzNTBaFw0yNzA1MjcwMjM4NTBaMDMxMTAvBgNV BAMTKDMxQzU3NTg4QjlDRDRCRUE2NTk0NURGMDg3REJFRDRBMTBDNTdDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvgsGKvlgv7PMWJRfCf42hCBnG l/lcFjlLFI6PTMDvESIDYEtu9KYkr5eWDLHc1GgwVZ0CAAOSEZrsFuig2oTQy/uS O0pnJ4XCHweztGWoBUduGyN7ogZBMqT34Nv+KjmcPNmdtZjz9I1BaD340YhvIEXb mFiik5UoSdnpOqiWkKE9Ar2qGmAxCkCGxnHc6jxeAgVk/hJuFVnPGE9VfA3Z4L6p qrs5EnXlyDax7/1HqEtyybtNvrqRIE7gVnYUaQ1WOVnRwpIJAR9DqSmWV/UCRaP0 r3u8neWsO6oCs0xfayy14VIgaFdh0i2m3CVnyEK2ls2MNROpYUck5bHTxG1LAgMB AAGjggIRMIICDTAdBgNVHQ4EFgQUMcV1iLnNS+pllF3wh9vtShDFfIYwHwYDVR0j BBgwFoAUadiReQKtJKWsZ1FlXCm7fpFxx5YwDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 NjY4NjczMDgyNTc2MDc3MS8wLzY5RDg5MTc5MDJBRDI0QTVBQzY3NTE2NTVDMjlC QjdFOTE3MUM3OTYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvNjlEODkxNzkwMkFEMjRBNUFDNjc1MTY1NUMyOUJCN0U5MTcxQzc5Ni5jZXIw gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j bm5pYy5jbi9yZXBvL0ExMDk2Njg2NzMwODI1NzYwNzcxLzAvMzQzMzJlMzIzNDMw MmUzMTM1MzYyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzNDM4MzMzNy5yb2EwGAYD VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAivwnDANBgkqhkiG9w0BAQsFAAOCAQEANTnXUWqURUIKnnso9U4KZRR1+EuI fixwo8oxNXC6to4kIv7V48X5MuO8rxWhPOZCGJ958glUsT7wxo8VHOo52PWqMQgj SSOoj8zfk+GgLcuWitC3E0IFZIjrhliaG8tDnppqf3qQL2uNmR+SxlNoE/FxgLVT XxthTj+GxpEkyiw/XxidESPEPPNBvCqvkjrEtnSvVsKVZSQvp4gDxbSd0SHkCJ2U n1+G3XEt6JlJCyV2RyWKrLz6UTJ8p0M/uoP4FEayc77v0cMQ2L0RjUX965HjxAxp Lst5Bo1HHVHxSNyRjFFmdd/A2NIi7qKMj0iIyMV5B3QstaGFdn6/6nv1JQ== -----END CERTIFICATE-----Generated at Fri May 29 22:57:01 2026 by rpki-client